Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File:                     wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier:          z6WEP/jWQ7FiWd78jc0eCoTNSk82PS7U24agHrL2R5I=
Subject key identifier:   A9:E6:B1:8E:FA:17:92:0F:BD:07:01:E6:44:A7:CF:35:69:48:F1:C9
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer:       /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial:       0199FE7DF3179E6E45E706C6E70C77136026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number:          0A54
Signing time:             Sun 19 Oct 2025 22:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:30 +0000
Files and hashes:         1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: GvXUji8VHHzfE1SwnlWPhcyYLvCOzY91YolOn1HQvOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:f3:17:9e:6e:45:e7:06:c6:e7:0c:77:13:60:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
        Validity
            Not Before: Oct 19 22:01:30 2025 GMT
            Not After : Oct 20 22:01:30 2025 GMT
        Subject: CN=a9e6b18efa17920fbd0701e644a7cf356948f1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:d1:2b:60:45:f7:2d:1d:94:c8:8a:65:4a:
                    6a:64:ed:30:93:2d:c3:5f:ae:b4:6e:a4:33:a3:82:
                    27:1b:cb:05:94:4d:4f:3d:94:0f:fb:27:1e:d1:2f:
                    ca:e8:eb:5c:a0:ad:f8:46:29:cd:d2:6b:8a:8a:a1:
                    19:fc:23:02:78:46:22:40:54:31:8d:9a:1f:cc:9e:
                    26:8d:50:01:da:40:6f:30:d6:ec:b7:a6:23:41:00:
                    da:7c:fa:54:21:6a:7b:70:d5:53:dd:64:ba:a1:77:
                    9f:9c:b2:08:8f:81:88:3a:f6:7c:86:85:e2:19:7c:
                    b5:f6:86:7e:80:cb:81:da:71:f6:2f:8f:5a:d3:41:
                    f2:cc:5b:5e:0a:66:1e:24:b9:c4:ff:d3:23:87:c3:
                    49:fa:77:9c:ce:23:9a:31:23:15:26:e0:dc:7d:e8:
                    93:b6:66:4f:4f:c3:e8:43:0f:ef:b0:cb:b2:3b:13:
                    c5:e9:83:42:08:6e:19:31:77:de:3c:ea:c0:da:94:
                    9b:75:71:a1:0d:34:2c:1b:84:5f:82:f3:30:14:5b:
                    e6:c1:9d:77:5b:cb:03:ca:c1:a2:c4:70:59:75:f2:
                    e8:09:e7:a6:7a:0c:a2:52:2f:a4:c2:f6:ad:06:28:
                    d9:2a:7d:50:72:cb:d5:1e:92:63:ff:d5:c2:1b:fb:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E6:B1:8E:FA:17:92:0F:BD:07:01:E6:44:A7:CF:35:69:48:F1:C9
            X509v3 Authority Key Identifier:
                keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:55:da:d8:8b:07:8b:7b:bc:1d:32:0f:41:08:7b:95:4d:6c:
         3e:52:43:f2:bd:ea:9c:07:3b:41:07:01:7f:5f:37:1b:ab:47:
         62:ad:4c:15:b3:cf:da:d2:d9:31:39:6a:51:56:8f:86:56:26:
         c3:cf:a2:1a:7e:61:ab:3f:04:c2:15:79:5f:14:35:da:ab:c3:
         ac:83:e5:38:be:4e:e9:a2:c0:3f:c5:0c:e9:e5:56:1b:65:2a:
         60:20:4b:fc:93:c6:10:47:12:70:a5:a0:85:45:f7:80:37:41:
         e2:3f:35:4c:c2:75:d0:1e:1c:f4:7b:9a:e8:dc:07:24:ad:37:
         7b:64:7e:66:c0:d5:29:fc:da:c5:f6:0f:e2:6a:e9:2e:c0:d8:
         bc:cd:ba:34:9a:c0:7e:67:3d:35:ea:f6:b8:23:fb:d4:e8:6e:
         df:ed:dc:a6:af:4f:f8:3c:0b:ab:ed:56:9d:5a:24:de:1f:e5:
         a9:d9:3e:3c:ac:db:2d:8e:d9:8d:06:0e:f9:5f:29:86:c7:75:
         12:6a:b2:ed:f7:ad:ec:00:18:5e:8b:80:19:d2:a8:f7:9f:0d:
         25:08:82:c8:a6:82:f5:b8:3c:d0:50:74:5a:01:57:42:8a:62:
         56:ce:39:5d:60:6e:ee:96:57:43:b6:10:46:d6:6b:69:39:b6:
         c1:55:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:38 2025 by rpki-client