Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File:                     WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier:          WaIRW4wJLkilrVF6bMby8F61p07TlaXyzkJ+JgPQ3ac=
Subject key identifier:   D7:06:51:8C:8D:C6:F4:7F:35:62:48:4E:97:9D:CA:63:83:45:F2:0E
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       0199FB45DE1F33FED161242A672AA3C85562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: pBc6wQdRq7MOgyIqf0iNecHKdmkkwAd1bTdde2O1YWQ=)
                          2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:de:1f:33:fe:d1:61:24:2a:67:2a:a3:c8:55:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=d706518c8dc6f47f3562484e979dca638345f20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:4e:e8:5b:47:8a:62:76:d1:85:bc:d3:52:
                    e1:6d:b7:4f:f4:8d:96:5d:3b:c3:a3:2b:41:cc:76:
                    ed:91:65:77:8e:e0:16:46:f5:e6:b6:68:ea:c2:a9:
                    14:10:e9:1e:e3:52:17:1f:30:e7:6a:8a:e4:84:bb:
                    62:5a:77:d1:5a:2a:54:20:4b:89:5e:ff:12:8d:e1:
                    15:46:a0:9d:2b:eb:3e:7e:52:26:ef:0c:a8:d4:4d:
                    fa:72:cd:5e:88:53:69:98:b5:70:37:a4:38:d7:bc:
                    e2:3b:35:1e:ba:ff:5d:c0:7d:67:a2:cc:0c:43:47:
                    bb:30:bf:9e:01:f5:f0:b6:4f:75:7d:50:7a:3c:d3:
                    75:d7:6b:46:fe:f5:93:5d:29:bb:07:e2:2c:f3:03:
                    19:56:d7:b2:70:b2:b8:27:dc:f7:b8:93:a0:76:f0:
                    e3:e8:f2:72:d4:1f:7f:6c:dc:3a:9d:51:84:5b:dd:
                    9e:56:71:67:b3:f2:f6:8f:50:87:ed:6e:8e:e8:e4:
                    b6:e3:1f:6d:f4:8b:23:b4:f9:d6:7e:f5:de:05:5d:
                    5b:51:fe:71:19:ca:27:8b:b4:8b:21:08:85:18:52:
                    43:93:6c:73:58:d1:7e:75:7b:ba:d9:e4:31:68:a6:
                    07:e7:ec:21:78:72:6a:60:f3:47:84:20:d0:ab:3a:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:51:8C:8D:C6:F4:7F:35:62:48:4E:97:9D:CA:63:83:45:F2:0E
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:92:5f:39:ea:9f:5c:5b:1d:c1:01:6a:35:30:74:3c:a6:cf:
         40:ed:1c:90:6a:99:a8:39:da:f2:11:c9:63:b1:1e:79:49:4f:
         15:99:4c:b0:b1:a6:87:a4:8c:0b:ee:fd:63:c8:f8:cd:1c:35:
         fc:1f:1e:67:dc:99:14:0f:a0:e3:5f:db:cf:ce:13:6a:ff:13:
         bb:e8:32:9c:13:02:7d:14:d4:16:26:d5:e1:d0:09:24:da:95:
         29:7d:12:a9:ae:4e:03:b3:69:b4:96:86:7f:fa:e6:ac:c7:4c:
         09:7e:85:7e:72:3c:f6:3c:31:bb:71:a2:92:bd:74:2c:aa:36:
         02:f1:c5:a1:d3:05:57:c7:41:19:bb:e6:77:ec:9e:1e:0a:db:
         dd:6e:f6:6d:6d:b2:21:ce:bd:5c:d2:91:6f:36:94:4c:c4:36:
         67:3f:3e:2b:9e:8f:41:dd:b1:eb:16:fe:11:7e:9b:2d:96:eb:
         86:f7:ec:e2:54:16:7d:05:1e:10:3a:74:d1:68:a8:78:a6:c2:
         37:9e:ce:83:4c:58:d7:24:a3:27:9d:58:21:ef:98:d7:b1:b9:
         4a:74:2f:a1:c7:85:49:a9:5b:6f:50:30:cb:2e:80:9f:41:41:
         cb:14:77:0c:8a:76:b1:ef:d4:49:a1:b6:3f:06:6f:1d:ba:7f:
         4c:cc:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:13 2025 by rpki-client