Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          5Smd71re5aCfBmHd4uNn4c5mh4YRaM+JzftOUqGfnH8=
Subject key identifier:   FB:68:2D:86:8B:6B:77:39:4D:5F:2E:56:32:37:B6:71:CE:56:98:4B
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       0199FA6A5306E4D9431E6D856E8FA9A34C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0D6C
Signing time:             Sun 19 Oct 2025 03:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:36 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: +aD9HT3Lb7TrmAcCqM+rJzbx42IKItRXpp7tHvJOVJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:53:06:e4:d9:43:1e:6d:85:6e:8f:a9:a3:4c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Oct 19 03:01:36 2025 GMT
            Not After : Oct 20 03:01:36 2025 GMT
        Subject: CN=fb682d868b6b77394d5f2e563237b671ce56984b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:5f:ab:6e:f4:aa:b0:9f:d5:b7:24:7f:3d:
                    79:a3:6f:b5:64:00:85:6c:f4:ac:d6:63:d5:a2:70:
                    bb:77:b6:7d:00:46:fc:15:da:36:5d:06:7f:ee:e5:
                    e8:85:e1:df:0c:2f:fb:68:5d:ef:db:a9:62:11:20:
                    62:c7:27:12:2a:c7:2e:b6:3c:1f:3a:20:0c:19:a9:
                    64:e8:da:04:87:68:9b:a7:ec:25:13:57:2a:50:25:
                    0d:b0:d5:0a:b8:ac:aa:6f:29:58:45:d9:ac:8b:08:
                    6d:9d:c4:51:5c:e9:21:11:f6:8c:63:32:cf:6e:65:
                    bc:65:2a:d7:73:ad:49:b1:66:33:2c:06:3e:87:78:
                    9b:ee:df:b8:82:47:1f:eb:9e:5a:2d:bc:e9:fc:95:
                    49:cf:72:d3:b8:39:fe:53:6a:8d:44:cb:64:f7:96:
                    da:0c:14:af:df:7a:05:97:8f:b4:e5:6f:d9:b8:c2:
                    03:23:f9:f1:e3:8a:84:f4:34:a6:03:12:ca:81:3e:
                    7a:09:d0:d9:9f:bb:bb:68:94:e2:de:71:63:80:5d:
                    64:3a:dd:15:be:87:d5:c2:dc:72:80:ad:b4:e7:86:
                    63:d4:87:a9:b6:ee:3d:7d:d7:bf:96:ba:27:4d:6f:
                    c2:9e:34:42:29:72:f2:38:8d:62:7b:ba:ab:74:c4:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:2D:86:8B:6B:77:39:4D:5F:2E:56:32:37:B6:71:CE:56:98:4B
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:42:97:c3:5f:68:ba:54:a2:31:ff:81:06:64:2e:08:f2:fb:
         9b:43:d2:6b:73:ca:97:a9:16:9f:7d:00:ed:a5:01:b5:62:58:
         5b:dd:8d:8f:de:73:81:14:4b:8b:b4:89:a3:b7:9a:69:e4:bd:
         45:60:f9:08:92:07:9a:6d:93:7e:79:d6:1b:44:99:68:f4:96:
         46:7c:9d:e2:9d:5a:1f:90:ae:45:0a:56:be:7a:4e:ac:2c:66:
         ae:c1:fc:9f:24:2a:2a:5c:67:fd:f6:0c:e4:ab:00:8a:fd:83:
         3a:38:4e:e2:dc:91:17:11:c9:0f:69:6b:87:2e:f8:59:e0:f0:
         c7:2b:37:65:25:bc:cb:20:7d:ba:73:fd:a8:5b:ee:09:00:16:
         f5:c6:24:63:80:ed:00:74:4d:c2:e9:c3:3f:92:24:dd:4a:c2:
         b6:d8:30:f7:7f:07:e4:38:fb:59:e2:c2:56:fc:e2:24:50:82:
         5b:f9:32:c4:04:a4:43:aa:e3:fe:cd:b1:1d:b2:4a:e9:76:7b:
         df:38:fc:8e:d3:13:0b:cd:ac:29:e0:07:53:f8:19:3c:f4:8b:
         da:7f:42:24:8b:00:93:9a:55:91:44:4c:97:c4:18:e4:b6:90:
         78:3e:e7:d6:1f:aa:79:ae:1f:05:12:35:07:97:55:f8:09:84:
         f1:56:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:31 2025 by rpki-client