Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File:                     WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier:          mbdMRrRkk4tU4jcJM909/6j5AqDOzw2amdQfly7GgFQ=
Subject key identifier:   C5:EB:74:F0:99:C8:17:D9:09:63:B0:E9:2F:82:65:E4:A6:8E:BB:19
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer:       /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial:       0199FDD8F95A1EC7FDEBB8C2FA3DD39CAC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number:          1533
Signing time:             Sun 19 Oct 2025 19:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:19 +0000
Files and hashes:         1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: Fi3/MWBfUY3RnKmkZpda1P7+eK+D63ICmjcl8EZYS/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:f9:5a:1e:c7:fd:eb:b8:c2:fa:3d:d3:9c:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
        Validity
            Not Before: Oct 19 19:01:19 2025 GMT
            Not After : Oct 20 19:01:19 2025 GMT
        Subject: CN=c5eb74f099c817d90963b0e92f8265e4a68ebb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:90:5b:2c:ef:9d:49:93:c9:c4:74:a3:92:
                    d6:8c:d5:4d:1a:b5:18:54:27:27:bd:32:08:6c:62:
                    0e:58:8d:dd:3e:d0:b5:31:f3:65:65:4e:98:8b:b2:
                    13:ea:c3:4a:15:d1:2f:51:f4:6d:56:8c:02:46:93:
                    e3:83:fc:46:67:90:2e:2d:4b:5d:d6:b6:bb:1a:26:
                    a6:92:ac:23:d5:6d:55:c6:4b:c6:64:b8:d4:6a:62:
                    88:b3:09:f1:87:f0:30:de:90:1c:43:d0:0d:52:00:
                    f2:af:bd:59:35:1b:dd:12:46:f6:92:8e:c3:89:04:
                    3c:8b:a4:f8:58:13:fc:b0:d5:13:df:42:7e:a2:e1:
                    55:e5:bb:b1:a4:7e:7b:51:cb:bb:11:ca:4f:0e:7f:
                    bb:72:c0:6e:8d:d1:85:1e:79:8f:3a:07:d7:3b:9c:
                    24:a1:06:10:f0:33:ce:9d:68:61:f3:16:2b:09:1a:
                    70:5a:e7:58:d5:93:9e:c8:05:03:8c:f6:ea:21:45:
                    61:a8:75:9f:60:05:ec:8f:da:2a:70:1e:6c:f4:76:
                    c9:a2:a3:e2:52:7c:5f:3d:80:ab:db:a0:b8:b1:a1:
                    58:c9:ff:a8:76:14:d3:07:ec:38:c2:eb:2e:cf:f0:
                    1f:7e:15:a0:c7:22:5e:df:d7:52:5b:8c:45:b0:da:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:74:F0:99:C8:17:D9:09:63:B0:E9:2F:82:65:E4:A6:8E:BB:19
            X509v3 Authority Key Identifier:
                keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:cf:82:64:73:03:5f:42:e2:5e:ff:6e:1c:04:a7:d0:a8:
         fe:d9:84:10:95:51:68:68:7c:db:70:5c:e2:5c:54:bc:63:a6:
         77:b1:75:84:6c:84:76:d3:8c:46:e7:12:ed:c7:ad:8d:a4:64:
         fa:62:59:0d:b7:4e:4c:5b:4e:73:a1:92:0a:76:b5:a3:23:b1:
         f7:71:61:25:f1:bb:a5:d2:bd:e8:5e:20:a7:8e:79:ee:41:cf:
         a5:ef:96:1b:67:ce:aa:96:23:9d:cb:64:7d:4b:cd:f3:5c:dc:
         f1:18:93:29:ce:b1:ad:ff:5d:28:cd:dc:cc:d9:35:72:dc:aa:
         48:b5:88:47:d4:86:c1:bc:3f:67:fb:2e:64:33:f9:3f:5b:2a:
         4c:c0:a4:b1:85:f0:9c:4e:1f:a1:c6:88:23:7f:53:24:e6:2c:
         3d:bf:2e:ff:cc:e0:5f:32:5e:44:08:db:00:24:4f:2c:8f:1e:
         0c:60:7b:5b:69:99:b5:96:53:fd:cf:25:ad:71:73:20:34:7b:
         0c:8c:b1:b6:58:77:df:48:d0:2a:69:a6:8d:d6:95:47:80:8d:
         5b:6f:5d:ce:6c:5c:8c:47:a1:53:da:af:94:04:ca:16:09:33:
         f2:9f:e6:69:5a:1d:e0:1c:15:1f:31:2b:2a:c2:e1:e9:52:0d:
         4f:7f:9e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92PlaHsf967jC+j3TnKxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MWU5NTljYWI5MjEwMzQzOGFjMGY1ZjFiYWU4NzA3YWM5
Y2M2ZDMwHhcNMjUxMDE5MTkwMTE5WhcNMjUxMDIwMTkwMTE5WjAzMTEwLwYDVQQD
EyhjNWViNzRmMDk5YzgxN2Q5MDk2M2IwZTkyZjgyNjVlNGE2OGViYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaqQWyzvnUmTycR0o5LWjNVNGrUY
VCcnvTIIbGIOWI3dPtC1MfNlZU6Yi7IT6sNKFdEvUfRtVowCRpPjg/xGZ5AuLUtd
1ra7Giamkqwj1W1VxkvGZLjUamKIswnxh/Aw3pAcQ9ANUgDyr71ZNRvdEkb2ko7D
iQQ8i6T4WBP8sNUT30J+ouFV5buxpH57Ucu7EcpPDn+7csBujdGFHnmPOgfXO5wk
oQYQ8DPOnWhh8xYrCRpwWudY1ZOeyAUDjPbqIUVhqHWfYAXsj9oqcB5s9HbJoqPi
UnxfPYCr26C4saFYyf+odhTTB+w4wusuz/AffhWgxyJe39dSW4xFsNrvSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXrdPCZyBfZCWOw6S+CZeSmjrsZMB8GA1UdIwQY
MBaAFFkelZyrkhA0OKwPXxuuhwesnMbTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQt
ODEzZTA5NmIzMzk1LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQtODEzZTA5NmIzMzk1
LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1vPgmRz
A19C4l7/bhwEp9Co/tmEEJVRaGh823Bc4lxUvGOmd7F1hGyEdtOMRucS7cetjaRk
+mJZDbdOTFtOc6GSCna1oyOx93FhJfG7pdK96F4gp4557kHPpe+WG2fOqpYjnctk
fUvN81zc8RiTKc6xrf9dKM3czNk1ctyqSLWIR9SGwbw/Z/suZDP5P1sqTMCksYXw
nE4focaII39TJOYsPb8u/8zgXzJeRAjbACRPLI8eDGB7W2mZtZZT/c8lrXFzIDR7
DIyxtlh330jQKmmmjdaVR4CNW29dzmxcjEehU9qvlATKFgkz8p/maVod4BwVHzEr
KsLh6VINT3+e9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:03 2025 by rpki-client