Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File:                     laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier:          nivclsIOaZIrUyHMmhfSAHTxnMegz94s1afoSKPqwic=
Subject key identifier:   5F:AF:1C:B1:0D:81:9A:E5:19:62:67:9E:05:C3:A8:54:7F:A2:66:9D
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer:       /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial:       019A00A353D97CFF0B732A05F996920CAE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number:          1194
Signing time:             Mon 20 Oct 2025 08:01:35 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:35 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:35 +0000
Files and hashes:         1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: o7zYqrRDOklYfjFl0/f5sqQoVg/6QhgkyofyOsu8yCs=)
                          2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
                          3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:53:d9:7c:ff:0b:73:2a:05:f9:96:92:0c:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
        Validity
            Not Before: Oct 20 08:01:35 2025 GMT
            Not After : Oct 21 08:01:35 2025 GMT
        Subject: CN=5faf1cb10d819ae51962679e05c3a8547fa2669d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:d6:54:33:8c:e4:17:34:86:54:9d:8a:bb:
                    17:84:92:45:d2:35:f7:91:c4:e4:3d:eb:69:2b:84:
                    1f:88:0b:d3:ce:bf:09:d3:7e:72:1d:62:e3:09:2d:
                    a1:18:0a:8c:8e:24:78:76:b7:1f:7f:b7:e5:af:99:
                    60:26:b5:39:d4:84:be:0d:4b:03:6a:bf:ad:f1:0f:
                    54:b9:66:27:86:6e:ae:93:54:5c:bd:d5:61:f3:bc:
                    31:75:72:39:c4:c0:70:05:89:9e:cc:7e:ae:8a:0a:
                    26:4c:9c:4a:61:15:4b:91:e3:36:1b:46:8c:df:6d:
                    e6:6c:29:fd:95:0d:bb:ed:62:60:7f:44:d9:e7:43:
                    4c:83:3f:ce:16:b9:21:4b:72:dc:7b:bb:00:f8:53:
                    c3:6a:a0:6a:98:17:8a:a7:18:ae:39:51:c4:69:37:
                    23:2c:e2:71:76:56:eb:c0:8a:93:d2:c5:30:05:86:
                    3a:68:84:f1:3d:5c:14:83:37:95:d3:67:0b:15:ce:
                    4b:aa:fc:04:bf:b5:03:79:46:39:9e:70:f6:8f:bd:
                    6c:92:aa:f3:13:df:2c:03:fd:96:33:e8:e0:fd:e9:
                    aa:24:d9:35:26:22:4d:2a:09:4c:16:f6:54:29:d0:
                    93:fa:2b:8b:2c:33:1d:b2:6f:af:2f:13:44:9c:4a:
                    5b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:1C:B1:0D:81:9A:E5:19:62:67:9E:05:C3:A8:54:7F:A2:66:9D
            X509v3 Authority Key Identifier:
                keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:5c:de:b8:d3:c5:33:d0:03:4c:81:77:f7:97:16:04:16:
         dd:61:d2:6c:3f:51:5c:9f:75:dd:e9:12:38:80:9b:91:76:63:
         8c:c7:05:d9:a2:c1:06:ba:da:ac:45:0f:99:90:0d:d6:2f:20:
         cf:b2:01:d6:3c:ec:91:2f:b7:57:7d:3e:ee:33:75:d6:8c:ca:
         7a:a4:7a:93:6c:79:91:64:47:a0:c1:d5:2a:fa:b6:ec:5e:fb:
         a2:d0:a1:7a:f6:3d:24:ae:d4:cd:9d:94:2a:c2:dc:ac:3c:15:
         e6:e8:3b:51:c2:80:40:c9:a5:ea:de:17:51:83:2d:b0:af:1f:
         ff:83:d0:91:ce:4f:3e:bb:d2:be:4f:34:05:f2:e0:78:bb:57:
         e1:47:63:fe:e4:1a:bf:71:b1:06:ad:13:57:4c:fe:b9:2b:a2:
         be:4c:e0:99:4c:70:60:a4:8c:d4:c9:73:7f:a6:9e:2c:aa:71:
         75:ef:e1:3b:33:78:b1:a4:2c:17:74:88:01:05:ab:2e:7f:e2:
         a5:3d:1b:f1:c4:69:65:cc:fe:c5:6a:91:4d:7b:a9:ef:b6:89:
         70:cc:7d:0a:1a:ec:6f:5b:c9:41:ae:a6:e2:3c:c0:bf:9a:f0:
         b7:3e:aa:aa:8a:80:cd:a2:31:99:87:cf:22:96:aa:0f:cc:5c:
         d9:67:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:55 2025 by rpki-client