Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          kqyBxZ/LzOrFRQc63jf/2QSrs2EzlTXY0Sbw/X369CY=
Subject key identifier:   4A:FC:72:CE:7A:0D:C3:26:69:A5:B0:A6:6E:D6:19:01:32:B5:EE:6B
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       0199FAA124B0E2A2B519797B721C5FEA787E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          0AEE
Signing time:             Sun 19 Oct 2025 04:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:28 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: CKlk8hwTgRjX7SV8KSscD6xsJjuapE/nkzWH9MhUjAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:24:b0:e2:a2:b5:19:79:7b:72:1c:5f:ea:78:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: Oct 19 04:01:28 2025 GMT
            Not After : Oct 20 04:01:28 2025 GMT
        Subject: CN=4afc72ce7a0dc32669a5b0a66ed6190132b5ee6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:9b:75:ce:a2:5d:0f:25:d5:cc:ea:58:f4:
                    8f:83:d3:38:f9:c2:06:76:49:e2:97:9d:03:e4:5f:
                    6e:78:bc:39:f6:ea:98:8d:ed:60:76:79:a6:3b:56:
                    ec:04:37:0f:67:96:b0:b4:c5:a1:4a:e9:be:aa:7e:
                    c5:2b:19:6e:a7:07:89:ca:8f:9e:d5:28:e4:70:ef:
                    69:c1:5b:80:d9:e9:62:6d:7e:8c:9c:6f:71:28:67:
                    f3:8c:f0:b8:6b:4d:8f:a9:eb:16:5a:6d:93:69:24:
                    d8:d5:6c:b8:32:f4:e0:eb:4b:bc:97:22:3b:b5:55:
                    42:91:2e:d2:59:15:0e:03:5d:63:8b:bb:70:3a:2a:
                    6a:46:40:a6:98:5f:80:fa:c4:e1:df:87:52:41:eb:
                    1e:ad:01:32:99:89:1c:02:21:33:5d:77:33:58:86:
                    be:4d:bf:cf:ed:42:11:dc:09:6e:9e:80:fb:7a:52:
                    cc:5e:aa:2e:c0:f3:af:48:44:b0:e9:28:bf:4a:4d:
                    73:65:26:9a:25:84:4e:56:1b:3a:9e:a5:cd:65:57:
                    98:d4:bf:04:eb:8e:c0:47:32:90:d8:9c:ea:ee:c8:
                    f7:44:bd:28:e7:56:54:12:ec:b0:62:d1:78:76:ab:
                    51:66:c6:3a:a1:b2:cc:9f:1f:f2:47:94:0c:12:0b:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FC:72:CE:7A:0D:C3:26:69:A5:B0:A6:6E:D6:19:01:32:B5:EE:6B
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9f:20:e1:2e:07:17:5e:f0:00:6c:45:de:38:51:ab:9b:ce:
         89:c7:79:31:1e:cc:d4:90:ca:bb:94:7c:34:ec:1c:64:c2:b1:
         29:e3:84:bf:5b:92:b8:02:4f:52:89:9a:0e:2f:b5:86:a6:1a:
         6c:70:f7:b8:9a:12:40:40:20:7b:0c:76:57:08:4a:0e:88:58:
         de:e3:c8:f2:36:94:d4:b8:77:89:2b:c1:13:0c:86:c0:e8:fa:
         62:a7:89:57:c7:32:eb:5c:26:52:b4:f4:0d:62:e0:09:d3:31:
         19:a2:43:17:66:ad:c6:d0:8c:cd:7e:92:4e:53:19:ab:7d:2b:
         c8:3b:99:43:e0:68:48:f3:ad:a4:ca:e2:31:1f:eb:c8:d5:5b:
         2f:7e:8a:2e:16:23:f0:12:ff:da:bd:d0:96:ec:b8:ef:4a:41:
         ad:86:20:ba:c1:f0:52:53:db:f2:59:e2:19:2b:96:53:0d:a7:
         a6:68:f1:ee:e9:9c:bb:44:49:f8:10:2b:97:c1:ed:c4:01:0e:
         d9:ed:20:4a:1f:fa:23:f3:53:a8:07:d0:e6:e7:4d:78:c3:df:
         91:e0:c3:17:bc:dd:48:d2:a0:ff:dd:f5:5e:29:ba:32:e3:c8:
         eb:fa:90:9c:ca:da:b2:24:1d:74:6e:bb:70:cc:61:1e:2b:1b:
         1f:2e:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:25 2025 by rpki-client