Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File:                     WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier:          wuACI9DtWTBBU3+Kb7u8Os71TH84LbgFk7t/kqU8UqU=
Subject key identifier:   7C:5F:F5:9F:3E:68:97:7E:9C:10:BD:72:E1:1C:6F:F6:1B:52:1E:1F
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer:       /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial:       0199FC8F917ADD86EE2E23D85027CE023D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number:          07C7
Signing time:             Sun 19 Oct 2025 13:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:31 +0000
Files and hashes:         1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: qfZ+T0hJkGbQT6FWjMiUkz2yHJ7rRM+nKNbiEn/Fegg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:91:7a:dd:86:ee:2e:23:d8:50:27:ce:02:3d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
        Validity
            Not Before: Oct 19 13:01:31 2025 GMT
            Not After : Oct 20 13:01:31 2025 GMT
        Subject: CN=7c5ff59f3e68977e9c10bd72e11c6ff61b521e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:07:96:78:dc:f3:80:a7:16:ab:6c:0e:a5:
                    b8:df:d5:93:b1:62:39:15:dc:a8:1f:d0:a9:0d:be:
                    69:13:64:1a:02:71:61:00:44:34:b6:3c:5f:63:d0:
                    e8:6a:9a:04:cf:51:e0:18:2a:69:42:83:3e:51:57:
                    c8:13:01:75:a3:69:3c:9d:7f:69:43:1e:d1:d2:9a:
                    f6:45:dd:27:01:1c:45:94:15:a3:28:e0:1c:c8:8b:
                    72:b6:76:f3:f3:fb:eb:7c:79:ad:42:98:3a:b4:cb:
                    c3:f1:71:92:a1:ec:69:04:3d:ec:61:40:42:8d:3d:
                    92:47:83:2d:65:a5:73:36:bf:2c:d4:71:74:d0:00:
                    18:0b:cc:c6:64:97:13:bd:ed:dd:9b:c6:f7:f3:67:
                    70:47:65:2c:63:bd:84:f1:c5:ff:9a:ea:01:ac:11:
                    53:ad:5c:23:e3:7f:7c:10:d3:47:22:15:5a:bb:8c:
                    26:21:3d:44:bf:7d:46:ea:95:ab:15:4a:bb:1a:c9:
                    5d:00:21:f2:cd:6b:05:ab:62:17:60:67:91:56:8b:
                    47:3a:d2:bc:af:e1:32:70:5b:7f:f7:0d:45:6a:4c:
                    c3:41:e0:9e:10:dc:79:6c:5d:52:fd:fe:9f:2d:f3:
                    74:3a:dc:a0:10:24:78:87:8d:b6:34:d2:ad:fa:33:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5F:F5:9F:3E:68:97:7E:9C:10:BD:72:E1:1C:6F:F6:1B:52:1E:1F
            X509v3 Authority Key Identifier:
                keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:1a:ae:79:07:77:42:82:67:c5:84:bf:04:af:a4:f2:43:
         90:67:af:cd:b0:ae:52:0d:5e:a5:fc:3a:9b:32:40:82:00:a7:
         64:ff:55:5f:ce:d9:98:13:2a:5a:fc:c6:c2:1b:fe:4d:fa:07:
         e0:8f:83:07:91:0a:44:bd:e1:5c:17:46:db:b5:95:c0:7e:39:
         c4:e3:9b:85:06:0e:6e:08:90:ce:68:b1:99:0e:31:86:4e:9a:
         95:39:1e:d3:90:8c:e7:e5:78:39:f8:38:6e:07:25:1d:86:6c:
         e7:1d:a5:7f:94:f0:ee:86:fb:f8:f1:95:13:a1:b2:0f:c9:b7:
         d2:99:84:de:dd:0a:fe:a7:5f:80:c6:07:f5:de:f5:5d:02:b8:
         b7:09:66:e6:a1:12:34:60:17:58:f1:e3:2b:df:6e:ff:5b:23:
         31:ae:a6:94:95:30:f0:df:71:76:3b:60:f7:c2:71:48:37:d0:
         0a:f7:26:91:7e:e4:e0:39:9f:e8:96:7b:69:c8:6d:43:ed:59:
         6d:0c:7f:d6:dc:eb:59:2d:82:9b:ed:66:6d:7a:a8:0c:84:09:
         b0:f2:bd:e3:6b:78:8f:77:a1:3a:45:57:3a:f6:ce:6e:6e:31:
         0d:32:93:83:e2:e5:49:59:a6:0e:39:28:49:cd:da:00:f1:7d:
         bd:87:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:26 2025 by rpki-client