Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          jBXuH9d8UovUs6Klq99d2KrpvtiZcuHbHfVUA1ifuHY=
Subject key identifier:   CC:ED:0B:74:17:3D:6C:B9:F1:B4:C5:64:4E:D8:C1:3D:47:5E:9A:35
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       0199FC8F81B0BD14BED3965C811D180158B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          069C
Signing time:             Sun 19 Oct 2025 13:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:27 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: b7NH+Z7/P0Gp7azfTjLLTCZRjW2dB3DBMkB+TQDiBRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:81:b0:bd:14:be:d3:96:5c:81:1d:18:01:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Oct 19 13:01:27 2025 GMT
            Not After : Oct 20 13:01:27 2025 GMT
        Subject: CN=cced0b74173d6cb9f1b4c5644ed8c13d475e9a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:69:05:7b:09:83:89:b8:c5:69:21:59:b0:
                    7c:66:97:65:c6:c1:a0:15:a2:9f:98:81:8f:7e:aa:
                    30:e4:1e:9d:f3:34:41:c4:9c:23:b9:bf:e2:91:38:
                    19:df:3c:fb:67:93:3f:d1:12:b2:fd:62:83:da:b2:
                    52:12:1f:09:ec:3f:99:c3:1c:f8:47:2c:55:6b:1c:
                    cf:c6:4b:1b:d3:cf:23:b2:01:1e:b8:d6:aa:78:4d:
                    92:1b:20:34:ca:18:ee:54:72:bf:3a:16:d4:ea:d5:
                    10:c2:a8:73:d1:9d:99:8b:26:ba:c6:ff:4c:4a:2d:
                    be:eb:90:7d:df:de:cd:92:8d:49:87:a8:61:38:f3:
                    76:cc:d6:31:25:91:be:b3:bf:d9:67:7b:30:90:da:
                    d5:97:d8:a3:50:e6:a8:12:d8:b0:9b:fe:a6:01:bf:
                    8f:a2:0d:10:46:a7:f8:d9:93:ad:18:11:cf:c4:a0:
                    cf:6e:c8:f1:eb:3d:2f:48:8b:7f:06:50:95:4e:62:
                    0a:5f:9d:16:94:97:d8:c1:24:21:c0:e6:57:75:fe:
                    db:8f:15:b0:1f:bf:c1:b4:d5:36:9c:6f:5e:39:91:
                    2b:9b:9f:85:84:34:a4:0b:a3:a7:69:19:c4:a3:15:
                    75:1c:f0:39:73:1c:65:5d:90:e7:58:89:48:0c:09:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:0B:74:17:3D:6C:B9:F1:B4:C5:64:4E:D8:C1:3D:47:5E:9A:35
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:af:cb:0e:11:63:04:ce:51:8a:be:17:ff:17:4f:07:4c:
         cd:af:65:34:aa:74:f0:fb:44:c3:83:f0:b2:15:39:f5:af:6a:
         52:f4:ae:b1:f1:a1:8d:30:8b:6d:c4:0c:b9:30:78:20:b7:96:
         39:6e:b0:c6:b9:f0:25:a1:ef:31:22:f3:40:bd:6c:a2:7e:23:
         96:31:9c:15:7d:40:a8:f2:bc:f5:25:be:da:21:d6:3c:ee:70:
         4c:be:f5:b5:ec:fc:b9:d2:ce:3e:00:40:d3:4f:e9:84:b8:6f:
         1e:ab:f8:5d:e3:fd:98:ff:84:96:5b:2a:60:cb:0a:39:64:12:
         dd:96:ec:ef:7a:56:ae:a4:05:c8:f8:11:8d:48:cd:e6:5f:ce:
         29:04:5e:0e:62:76:85:e2:f6:84:bc:4c:36:86:ce:73:27:86:
         c9:3e:c2:df:cb:b6:63:4a:f5:16:60:42:c1:f5:01:78:26:77:
         da:f1:2d:a6:c1:23:1c:d4:10:75:d5:05:64:4f:50:91:44:50:
         83:57:7a:7b:89:80:1e:49:54:2b:7e:78:9f:5c:15:3a:30:94:
         08:12:f2:3a:b5:db:f7:9f:ba:65:36:fb:8f:5a:62:d8:53:96:
         e6:21:fb:7b:b1:38:19:c3:ed:56:e0:c7:ef:2b:fd:6b:d2:15:
         5a:2c:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:26 2025 by rpki-client