Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File:                     WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier:          nqZ7lEqRqllYak+aV85F9n5samFfVeKptmj+DnNG7LQ=
Subject key identifier:   03:83:18:6B:92:F3:11:17:F3:26:06:43:DE:BA:15:37:02:3C:67:E5
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer:       /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial:       0199FFC763B62E0B691756CF036B33116607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number:          0B0F
Signing time:             Mon 20 Oct 2025 04:01:21 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:21 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:21 +0000
Files and hashes:         1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: 0fRAgooF72wW/r+a1IaVZ+igl3IwZ6JW13oSM6Ifh9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:63:b6:2e:0b:69:17:56:cf:03:6b:33:11:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
        Validity
            Not Before: Oct 20 04:01:21 2025 GMT
            Not After : Oct 21 04:01:21 2025 GMT
        Subject: CN=0383186b92f31117f3260643deba1537023c67e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:77:94:6a:7a:3f:f5:15:56:3d:aa:a6:16:ec:
                    da:cd:35:8f:b7:4f:e1:73:4d:36:52:4b:b7:d4:7e:
                    c2:74:29:02:c1:c8:cc:65:b5:ee:c4:b7:6d:91:0a:
                    5c:9c:2a:17:5a:f6:08:43:b1:22:41:17:10:4f:51:
                    8f:57:3e:d1:83:fc:38:11:16:f7:be:48:34:0c:76:
                    35:72:b0:fa:cd:f6:f0:5e:0c:aa:51:e9:c2:5c:2f:
                    3a:6e:a4:d4:15:d0:21:c0:81:e3:9a:24:4f:ef:77:
                    2e:54:94:27:3a:a0:e5:ea:01:07:fa:7f:6b:d1:bb:
                    bd:ba:e9:9f:39:17:38:a1:b7:19:48:3f:e6:b9:52:
                    c8:49:c8:2c:81:75:84:7c:b0:c7:ad:67:8e:13:27:
                    28:24:6e:da:0f:90:7a:1c:57:bb:89:80:6c:6f:f9:
                    f1:3f:81:b0:e7:40:86:e8:34:9a:d9:d1:fd:21:7a:
                    40:a8:97:a8:a2:12:2e:1f:72:a4:99:d3:bb:f2:c0:
                    1e:f6:a4:6f:31:87:e0:96:6a:4a:5a:b0:95:ce:3a:
                    57:a7:c7:2c:30:0d:7b:4a:4f:55:8d:5e:4a:ce:7f:
                    b2:e3:e4:f8:bb:b4:8c:e8:db:e9:30:9b:88:f0:23:
                    ba:2b:46:94:10:a3:46:6d:80:46:eb:93:42:fd:42:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:83:18:6B:92:F3:11:17:F3:26:06:43:DE:BA:15:37:02:3C:67:E5
            X509v3 Authority Key Identifier:
                keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:ae:85:b9:8f:e2:6d:7d:1c:18:3b:fe:7e:6f:0a:71:5b:
         02:91:29:e9:63:9f:87:7a:d7:f0:e5:d4:be:d7:a4:e9:a7:8b:
         77:f2:78:fc:9a:63:f8:6e:6b:01:8b:8c:6e:97:bb:58:01:35:
         57:22:ab:88:19:bf:a0:53:0e:3c:d9:f1:7c:f2:0f:46:1b:a4:
         7a:d7:45:e4:2f:8b:34:26:2b:3b:53:5e:c3:c4:b5:61:a2:87:
         89:50:5a:06:72:1d:7e:67:76:38:a8:1b:c0:b1:b8:e2:ed:fb:
         89:89:2f:bc:41:60:17:00:89:7b:4d:31:15:b4:69:d3:6b:f0:
         e3:5a:e9:54:72:54:14:14:2c:3c:89:8c:f3:da:79:b3:e9:ce:
         15:e9:70:07:84:a7:a6:07:3c:ed:79:f6:d5:32:28:5d:ea:47:
         70:76:b3:cb:4d:bb:8c:df:09:ca:2b:bb:3c:91:ec:fe:e4:ec:
         20:15:ff:c6:0e:6a:70:e3:3c:2f:8b:26:7a:e4:d1:83:f0:70:
         68:3d:e9:d2:aa:72:c8:6d:a6:8c:27:bc:68:8d:65:e7:58:ba:
         74:93:7f:0b:eb:12:42:9c:af:03:93:c3:8a:fc:37:ed:28:30:
         67:10:6e:9a:b0:fd:9d:63:7e:f6:74:ad:fa:85:ab:23:40:a1:
         8d:a6:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:58 2025 by rpki-client