Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File:                     W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier:          01lZBKlwJdQGGzOMRaPoWS3xalCEMNtsDdmH6rvqdHw=
Subject key identifier:   91:A3:47:F3:1E:E8:C6:F5:13:61:58:EC:43:A6:82:CD:D4:72:BB:BB
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer:       /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial:       0199FD3442F8DCBCA5B2765B8366CF77E19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number:          052C
Signing time:             Sun 19 Oct 2025 16:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:24 +0000
Files and hashes:         1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: clJ31bM35P1mTmWRMv/BwuYjwQfManiqCi48wILkKNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:42:f8:dc:bc:a5:b2:76:5b:83:66:cf:77:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
        Validity
            Not Before: Oct 19 16:01:24 2025 GMT
            Not After : Oct 20 16:01:24 2025 GMT
        Subject: CN=91a347f31ee8c6f5136158ec43a682cdd472bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:d8:48:98:6b:6e:ba:38:0a:cb:f7:40:67:
                    1d:8e:d8:63:60:d4:82:38:ac:04:5a:bb:56:d4:4a:
                    e7:04:80:73:3f:5f:20:9b:11:e2:4a:f2:a3:39:2e:
                    5c:9f:8c:b2:c0:7e:14:2c:7c:ed:64:7f:c5:e6:ba:
                    09:ac:64:3c:e3:0c:d6:59:a5:67:a3:ac:de:7b:06:
                    48:23:2f:9c:ae:3a:e8:1b:0b:c4:9e:81:1b:fe:69:
                    9f:b3:68:26:21:c7:58:e1:58:5f:7d:44:53:21:79:
                    2b:ab:46:a6:f0:d0:0b:e2:fd:fb:ef:95:1d:1b:d2:
                    fb:cd:73:56:e1:8c:c1:0d:16:ab:ce:20:cd:c0:5a:
                    14:a1:01:68:f4:ec:ce:14:de:fe:cd:a0:a3:e8:1b:
                    ca:b3:b5:e5:53:3b:17:4a:f8:af:85:21:97:73:e5:
                    7f:da:f3:de:5f:de:b7:fd:30:1c:5b:a4:14:d9:82:
                    fa:50:44:df:ec:d5:19:3b:59:a0:35:7b:07:14:0e:
                    45:f2:b9:ce:f1:ac:6e:51:42:7e:2d:b2:00:16:74:
                    32:f7:cd:28:8a:f5:e9:f4:89:65:90:c4:17:5b:f8:
                    5a:95:7b:d5:34:ff:79:c7:53:9e:66:dc:4c:cd:63:
                    70:50:44:8a:ba:7d:7e:a1:03:b5:db:d0:7e:fb:36:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A3:47:F3:1E:E8:C6:F5:13:61:58:EC:43:A6:82:CD:D4:72:BB:BB
            X509v3 Authority Key Identifier:
                keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:86:8c:22:0f:9c:70:bd:b8:96:76:a5:b8:16:95:d5:6a:
         9f:ea:57:51:f5:99:07:81:ac:22:2a:49:2d:32:c8:b2:5f:f1:
         98:d6:0f:1b:76:30:85:2e:0b:2c:27:70:95:b4:bb:15:b6:b5:
         2d:0f:ca:1d:b9:98:db:64:62:2d:46:c2:fb:55:a7:c6:26:d1:
         a7:c8:51:ff:f1:d7:bb:f9:6d:fd:52:88:bc:0b:b0:13:fc:3f:
         b6:44:10:20:4d:61:8d:75:a4:74:3d:7e:b5:cd:56:f6:de:40:
         fe:4d:9b:cb:8c:86:67:e3:9e:0b:b3:58:aa:85:1c:f1:23:70:
         18:e3:23:ac:f4:3c:b9:57:61:c1:02:e9:4a:86:5e:7d:51:93:
         80:29:f3:67:e6:12:f1:3a:b5:f1:01:bc:eb:91:f4:2a:88:c4:
         d1:e1:b4:09:da:92:44:44:ba:3a:18:3c:a3:b4:7c:de:1e:f4:
         50:88:ea:b2:1f:9c:ca:67:87:a9:3b:ec:23:de:1e:56:39:af:
         c1:31:2f:50:a1:54:ab:93:dd:b1:c2:cf:fe:06:72:ff:93:0c:
         66:5c:55:2a:ae:a8:4e:fc:c5:01:c7:dc:bf:e3:e4:b4:a1:0f:
         52:6d:21:5e:ba:77:a8:ee:94:59:ef:52:28:3c:62:26:e4:d3:
         96:61:fd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:56 2025 by rpki-client