Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File:                     WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier:          mpFlYScLSRxXV5eXnkbOIQZHXoqFnhcyum3e5kq9syY=
Subject key identifier:   E2:F0:74:80:33:99:41:02:73:E3:15:DE:6D:E2:34:82:0A:22:34:5A
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer:       /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial:       0199FC58D8365440687277C892ED2F74CCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number:          0A3E
Signing time:             Sun 19 Oct 2025 12:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:44 +0000
Files and hashes:         1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: i5DjgoR/Lbn1tL1hUEIoUpHZIGAhwJXeLD4XLj5UTIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:d8:36:54:40:68:72:77:c8:92:ed:2f:74:cc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
        Validity
            Not Before: Oct 19 12:01:44 2025 GMT
            Not After : Oct 20 12:01:44 2025 GMT
        Subject: CN=e2f074803399410273e315de6de234820a22345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:53:3e:07:9e:6b:25:98:38:ad:15:8f:1e:
                    09:05:66:93:8a:5d:39:61:0b:43:25:20:22:e9:5c:
                    de:e7:ca:38:a2:ea:96:4c:42:cf:98:48:63:a5:dd:
                    4a:c9:24:78:e4:25:e6:da:05:8e:84:f8:10:90:23:
                    da:54:38:7c:f0:07:b6:d5:d9:34:94:b8:8d:c7:a9:
                    18:dd:e3:d3:20:24:bf:11:86:1d:d9:69:90:22:83:
                    68:a1:e0:1d:f2:b7:06:0c:0e:3b:4a:40:59:f7:33:
                    dd:80:d7:54:7a:04:2d:45:d7:c2:65:d5:63:46:e5:
                    84:12:93:69:91:7c:02:ba:a9:74:6a:86:8a:4b:bf:
                    d8:0d:64:82:15:2a:f9:60:57:b2:73:6b:65:75:86:
                    8a:12:3a:96:4e:56:06:13:2c:85:32:97:fd:15:7f:
                    6a:c5:e6:83:b3:1d:31:73:95:f9:ec:03:ab:58:e3:
                    1b:79:e3:35:f0:fd:9e:a7:3a:a3:00:3d:b2:b7:d9:
                    39:8a:ff:4c:de:36:08:5f:76:4f:2e:cd:ea:04:75:
                    71:ac:62:db:ad:0e:9b:f2:30:08:79:a6:f2:24:8d:
                    e5:84:40:f6:2d:5c:f6:94:d9:bf:95:b1:e7:71:8a:
                    f6:ed:7f:dd:b5:6a:54:52:da:e1:87:0e:9d:c2:fa:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:74:80:33:99:41:02:73:E3:15:DE:6D:E2:34:82:0A:22:34:5A
            X509v3 Authority Key Identifier:
                keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:2f:1d:cb:77:22:f7:53:85:54:0b:cc:c9:70:c1:91:db:
         04:57:ab:e7:7c:5d:68:1b:7a:b3:6e:33:19:9c:79:54:90:05:
         b1:ff:f5:0f:34:bb:6e:f2:35:85:86:21:a0:e1:90:d6:b3:cf:
         16:93:92:aa:cb:a5:91:15:e0:b3:4e:f8:4a:55:2b:f4:7e:84:
         cf:ae:a7:42:31:1e:18:3c:53:61:4e:64:61:ab:9e:d3:0d:ec:
         e0:88:60:82:cc:b4:07:62:c9:f1:c2:1f:21:06:0e:1d:72:19:
         cf:df:4d:87:66:b5:96:2a:10:6d:d7:6f:2d:2c:a6:a5:28:7b:
         06:87:6a:fe:e8:68:01:a1:f2:9a:e1:95:9c:f9:d4:0e:bb:b9:
         41:6c:72:05:e4:35:54:b2:0c:c5:42:1e:fe:92:76:7f:91:dc:
         f4:f1:27:4b:4a:45:f6:bf:10:be:2c:37:4d:69:06:87:d4:10:
         8b:89:4f:ef:44:b1:80:58:4f:db:82:bc:4a:30:48:06:5e:26:
         29:ea:41:36:97:fd:22:36:31:4d:94:dc:08:c5:4b:87:ad:ec:
         66:8c:60:e4:9c:e8:50:ed:aa:69:74:9d:c4:48:1e:6a:d6:6a:
         c9:06:ce:3a:45:f5:52:ff:ce:8a:50:6c:ad:5f:81:4e:63:85:
         bf:25:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:46 2025 by rpki-client