Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          h6YBIN1VQLz5U8SxAK1UDNdGCOZPWorxwsaabtYEZIc=
Subject key identifier:   BC:3C:4B:91:35:AE:D3:2A:11:B8:AE:EE:D2:0A:03:0A:B3:54:EE:67
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       0199FC8FC7FA0E89B7F1A6E617BE781FA0A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          05AA
Signing time:             Sun 19 Oct 2025 13:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:45 +0000
Files and hashes:         1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: U+VEbML2F7SyuGhEAyrZ4OeMpUDpvJyqLBNFysBSst0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:c7:fa:0e:89:b7:f1:a6:e6:17:be:78:1f:a0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Oct 19 13:01:45 2025 GMT
            Not After : Oct 20 13:01:45 2025 GMT
        Subject: CN=bc3c4b9135aed32a11b8aeeed20a030ab354ee67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:8a:c7:57:cd:9e:18:ea:27:ff:dc:b4:9d:
                    15:6d:78:0d:4f:57:e0:49:64:70:d2:de:ed:0c:1a:
                    26:54:1e:e7:8c:1f:25:c5:12:de:82:d6:a6:16:4c:
                    55:7b:cc:11:f2:2f:78:64:6e:3d:50:96:5d:45:03:
                    52:c8:13:f3:d0:07:45:7d:99:23:aa:8f:cd:a7:65:
                    ff:d5:1c:bc:a7:9d:49:29:6d:7d:75:14:13:3f:6d:
                    81:b2:78:08:e5:23:f9:37:6d:63:54:2d:69:2e:e4:
                    72:df:bb:94:1d:f5:1c:e1:d4:3f:62:ab:39:96:1e:
                    42:f5:b8:3c:4f:3f:3b:c3:30:a2:a4:36:f1:f1:5f:
                    93:e7:6c:8b:4f:c2:58:31:cf:19:3f:e2:e9:b0:ce:
                    14:a4:8f:e0:aa:fb:88:7a:bc:e1:98:bc:ab:f7:18:
                    36:0e:1d:ac:db:99:3a:ca:fe:fa:46:5e:cd:ad:e5:
                    1d:08:40:ed:25:7b:cc:59:82:d7:f8:f5:c8:ee:0c:
                    ac:33:cb:02:d0:fe:ee:a3:81:73:98:b4:cd:4f:5d:
                    6b:92:bb:9f:18:d7:09:bd:da:28:ed:95:d5:37:9c:
                    32:3c:a2:06:f2:0b:c8:8d:a7:58:d2:9e:44:df:8a:
                    df:49:c5:76:a7:a3:94:c7:59:72:b7:6f:81:b3:20:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:4B:91:35:AE:D3:2A:11:B8:AE:EE:D2:0A:03:0A:B3:54:EE:67
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:dd:b0:63:06:1e:2d:a1:a8:5a:4c:54:29:80:2d:a4:10:66:
         4d:5e:b4:2f:75:24:8a:dd:f1:cd:b8:34:7d:de:1b:66:c0:88:
         2d:cb:4a:78:dc:6e:88:d9:65:31:f4:c4:01:c6:50:75:76:4d:
         7f:8a:ce:7b:23:81:1c:3d:26:1b:a2:d5:a9:45:f4:5a:42:32:
         1d:40:ec:a8:c1:3b:56:36:72:64:77:51:81:12:bd:99:ac:9b:
         5f:8a:8f:b8:d5:8b:97:5f:35:04:61:d3:36:7a:d9:87:f4:04:
         82:bf:9c:03:bf:f0:ff:d2:03:0c:c6:5c:62:60:6b:cc:59:07:
         8f:ce:df:18:da:ec:0a:15:09:b7:9c:42:6f:51:68:81:3a:58:
         8f:75:1d:d5:13:42:47:6b:0d:30:03:bb:17:d5:56:16:c1:1f:
         d3:f6:8c:f6:37:84:31:49:8d:5f:e6:77:55:d8:3b:67:06:a7:
         14:90:1a:e6:76:51:59:9f:3e:de:d0:e4:24:50:68:6e:7c:30:
         86:45:03:cd:d8:54:0a:72:bf:68:71:87:5d:db:59:8b:35:30:
         a6:92:c2:86:d4:57:78:be:c1:8a:52:23:9c:7a:c5:c0:69:8b:
         d2:28:92:a5:79:b7:ec:d2:0d:71:9c:da:63:18:db:3b:64:c4:
         d4:95:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:38 2025 by rpki-client