Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
File:                     WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft (raw, json)
Hash identifier:          7y1wgW+/HbK/flFuUwbRZV8BAoz2rmqwMICtZXlWvGg=
Subject key identifier:   DB:32:00:8A:B5:DC:B4:06:3D:A7:7C:E5:13:19:A1:FA:24:91:27:71
Authority key identifier: 58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
Certificate issuer:       /CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Certificate serial:       0199FDDA52AB77475D574330A31DCFDD8E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
Manifest number:          0DD6
Signing time:             Sun 19 Oct 2025 19:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:47 +0000
Files and hashes:         1: CMb2v2PccTlBgcAh5nA2SeBCOKc.roa (hash: khwSYgRcb0xgIwV3Wxw9JYrinxD/gAooMfP6PNCyCK0=)
                          2: WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl (hash: jz3rAHqwFgKtfNXkbJb6EswZoQUnqCVc/zgIvEJufeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:52:ab:77:47:5d:57:43:30:a3:1d:cf:dd:8e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d3e953b5fe17a531c9cf71560748df41ff714a
        Validity
            Not Before: Oct 19 19:02:47 2025 GMT
            Not After : Oct 20 19:02:47 2025 GMT
        Subject: CN=db32008ab5dcb4063da77ce51319a1fa24912771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:d3:7d:eb:6b:2f:f8:d1:9c:d0:80:58:69:
                    bc:5a:7e:7f:73:b1:b2:22:03:a5:42:35:2f:87:5d:
                    35:97:2f:6f:ea:95:36:54:d8:57:76:fe:d2:08:6c:
                    8f:8d:d8:3c:58:88:9c:d5:5d:5d:92:f9:78:7a:f8:
                    08:70:3d:05:a3:46:50:19:cf:46:d2:cf:4f:3d:b7:
                    1f:b9:1d:cd:92:de:31:23:69:28:44:b8:ee:2c:a9:
                    7f:ac:c5:75:3a:7e:65:31:e2:46:78:39:21:bc:7f:
                    0e:ec:16:19:1a:b7:f2:df:73:42:43:df:2e:0a:2b:
                    71:2b:75:a2:66:00:6d:4d:f6:3b:44:d9:71:8c:6a:
                    f2:27:58:ef:33:ae:88:cf:08:7c:23:20:94:05:58:
                    fd:81:db:7f:a8:50:f8:e3:77:94:12:3f:f8:af:6e:
                    0b:ad:eb:af:e8:0a:bd:22:e9:0b:97:b6:f4:e2:ff:
                    ea:fa:66:e0:5f:fb:f5:de:db:63:a7:2c:e6:5e:a3:
                    cb:6e:85:1f:06:76:19:53:68:85:19:ee:4c:43:1e:
                    96:d0:b1:5f:00:a1:03:10:ac:2b:fe:5f:bb:2b:aa:
                    7a:ef:f6:20:65:ff:22:fb:b1:00:af:8d:83:f3:5c:
                    dc:c4:db:1e:44:76:6b:d5:48:c8:24:d6:a4:c2:17:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:00:8A:B5:DC:B4:06:3D:A7:7C:E5:13:19:A1:FA:24:91:27:71
            X509v3 Authority Key Identifier:
                keyid:58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5b:f5:6e:8e:34:05:91:03:5b:9b:7c:ac:e0:62:26:20:dd:
         0c:b9:4d:fa:7b:78:cc:a2:b9:b8:5a:65:61:35:01:d9:1b:3a:
         51:e5:ed:b6:7a:8a:0e:41:6b:6c:52:a7:da:43:87:b5:3d:de:
         76:00:fc:07:c0:14:52:de:ff:0a:1a:46:b3:54:5a:8b:c1:bb:
         b9:01:21:8e:b8:ca:45:5d:50:e7:27:7c:8e:00:e8:16:ef:11:
         f5:05:84:28:e4:f1:04:07:3d:9c:83:25:d0:a6:88:44:64:38:
         90:06:0a:ce:cc:11:b8:c9:be:a7:a6:3d:31:ea:b9:6e:bb:a9:
         45:ec:06:51:85:68:c0:e4:04:bc:b5:39:f4:0e:44:bd:e0:ac:
         71:23:b8:6f:de:ed:34:cc:76:df:cf:f4:4a:d0:d6:ad:93:bc:
         61:bd:4e:6f:4a:11:10:b7:b4:30:61:31:e5:9b:21:d6:6b:0a:
         4f:9e:7b:b8:8d:27:ee:19:2c:10:53:81:52:68:77:81:96:50:
         66:c4:49:2a:55:8f:de:9e:11:ea:81:27:83:67:af:60:51:22:
         9e:d7:25:fb:38:19:2d:ed:e9:a8:c4:b5:a7:59:86:fc:5b:9f:
         d9:80:1c:6e:d3:47:5e:63:1f:67:18:39:fe:55:3d:4e:f2:e3:
         d7:3a:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:58 2025 by rpki-client