Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File:                     WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier:          ukprKBYFLw2olim2sauUqzFVVm2nEdH9UbVAibxxqxY=
Subject key identifier:   A0:D6:E8:DB:9A:74:28:51:5D:F9:E5:56:0F:F7:43:90:B9:B5:07:87
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer:       /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial:       0199FAD7CEBB2075C621E36F61C352B1B65E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number:          1406
Signing time:             Sun 19 Oct 2025 05:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:11 +0000
Files and hashes:         1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: kHwSrtswkxfJ81hl55ao33wsOHSZTvjBeFKI0NXQ0LE=)
                          2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:ce:bb:20:75:c6:21:e3:6f:61:c3:52:b1:b6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
        Validity
            Not Before: Oct 19 05:01:11 2025 GMT
            Not After : Oct 20 05:01:11 2025 GMT
        Subject: CN=a0d6e8db9a7428515df9e5560ff74390b9b50787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:da:16:3c:02:dd:8c:36:f1:88:21:b6:bd:
                    40:4f:d3:32:0c:7b:7f:55:45:66:f5:12:e5:9d:d7:
                    9c:f6:10:a8:2f:22:2e:92:e8:e4:d7:ff:51:ce:50:
                    45:4c:a4:24:da:c3:fd:ce:c0:c6:62:af:99:6e:57:
                    bd:7e:14:8e:2b:e1:cd:7f:b5:49:ae:c8:09:04:9e:
                    f1:93:c0:23:b8:06:d1:a6:03:d3:ea:af:06:fd:fa:
                    18:bb:ef:8e:8c:38:8d:81:e0:c2:cf:fa:ee:be:95:
                    60:cc:e8:f3:7e:6b:4e:66:cc:21:24:2b:7a:7d:da:
                    65:f6:27:ae:ba:e5:26:75:22:d1:f6:a4:89:f5:9f:
                    c3:07:a2:9d:7e:70:8c:95:de:07:81:1a:13:60:c2:
                    dc:49:ea:0d:ba:e7:7e:2c:d4:9b:c3:da:67:c3:ce:
                    a2:92:16:d7:8c:65:bb:f4:96:a2:48:68:b8:cb:fa:
                    b5:9f:2f:cb:7c:50:7b:fc:9a:14:b9:63:fc:5f:21:
                    87:c8:fc:41:82:cb:08:8c:c4:14:8b:02:8e:ad:36:
                    01:3f:3f:80:98:69:17:ba:63:fc:18:ea:7a:1e:f7:
                    e4:67:66:48:6c:e9:6b:ad:2a:1a:b1:a3:ef:88:fe:
                    6b:82:b4:9a:5f:3a:2b:b1:30:66:e3:75:83:47:db:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:E8:DB:9A:74:28:51:5D:F9:E5:56:0F:F7:43:90:B9:B5:07:87
            X509v3 Authority Key Identifier:
                keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:42:85:e7:24:be:ae:e2:68:4d:59:f7:e4:b2:ea:57:6c:b8:
         36:24:bf:73:3e:05:d4:72:88:c9:fc:8f:9e:e8:5c:38:55:1c:
         96:7d:32:9f:2c:79:9e:c5:ca:9b:c7:a2:5c:87:66:e2:4c:21:
         8f:7c:3b:46:b5:1e:46:0c:69:7c:60:69:5c:86:42:29:b8:a9:
         37:ae:bf:62:d6:c6:39:c2:7a:26:ab:9d:0d:cf:b1:72:78:56:
         c0:3d:4b:f6:b5:b5:a4:01:2e:d3:8f:19:5c:dc:c0:d3:dd:2c:
         b0:c9:f3:9c:81:3f:75:50:51:58:10:50:c4:14:d5:ef:d4:d1:
         22:d3:8b:7b:35:3f:9f:2e:c6:05:7a:85:80:ef:84:6b:1c:62:
         45:49:4f:f8:2b:22:fd:f0:59:f9:ce:87:00:d0:dc:38:3f:85:
         ed:7d:96:86:cb:07:c8:0f:0e:55:11:86:6f:67:5d:a5:ac:ab:
         ed:41:e5:ed:2c:ed:77:29:a0:0c:e2:76:ea:be:8d:a0:53:97:
         a3:66:33:03:f7:f0:1c:a5:d6:28:47:8f:80:83:46:4b:c7:43:
         23:98:76:aa:7f:0a:9f:5d:a2:ad:c9:11:8f:e5:9d:59:f8:ae:
         7a:54:74:81:54:e7:da:a6:bb:ed:de:54:bc:c5:dd:a7:c4:93:
         0b:f5:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:26 2025 by rpki-client