Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          UerfEv3Vi7otLUt9jsJDO2dkkNma+iFCbgIpac1/168=
Subject key identifier:   5B:86:1A:B5:18:55:F2:0D:59:79:CA:EB:66:20:01:5F:2B:65:18:82
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       0199FB0F07F939B4551703BD4CA486741325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          0FCF
Signing time:             Sun 19 Oct 2025 06:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:30 +0000
Files and hashes:         1: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: upBOeJgTJbjGVCLau0NQJgwoPLwT4G3RL09ALp81U4w=)
                          2: WukoJKvYevk5DCDC_j-VNd6UEsY.roa (hash: oH9XlTl7oEKCB+DPnY3H0aSfeO00Y6Ze9ixEhvL+Fj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:07:f9:39:b4:55:17:03:bd:4c:a4:86:74:13:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Oct 19 06:01:30 2025 GMT
            Not After : Oct 20 06:01:30 2025 GMT
        Subject: CN=5b861ab51855f20d5979caeb6620015f2b651882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:f7:8a:e8:f3:c2:75:81:5a:25:b9:29:fa:
                    ef:6f:b3:41:4b:9a:d1:01:31:fe:ba:8a:78:7f:4e:
                    b1:b7:8f:17:3d:32:a2:51:5d:ee:28:11:05:f0:13:
                    08:93:0e:21:3e:ef:66:62:74:bc:6a:3a:82:84:69:
                    fc:6b:cb:fb:22:8d:e5:0f:a9:f3:cd:43:40:3f:6b:
                    d6:7a:5f:b3:28:7c:0f:a5:8d:38:7a:be:24:82:40:
                    6a:44:da:08:a5:90:35:48:da:bb:a9:86:21:2e:6c:
                    fb:58:e4:93:ff:4e:ba:ee:37:44:4a:2c:a2:81:96:
                    83:13:4c:5f:b6:82:40:29:64:e7:2c:fd:b6:df:b8:
                    06:1b:eb:9b:43:0e:bf:02:74:36:d9:88:cc:72:76:
                    b1:d7:71:c1:4d:bb:2f:17:84:64:6f:5b:34:58:d3:
                    84:db:11:b0:42:3c:7c:82:42:90:7d:4c:b9:3e:cf:
                    e1:49:7c:e0:8b:20:40:0d:be:b3:4d:f0:9f:6c:18:
                    c6:4a:a9:4e:d8:dd:57:58:ef:24:e7:7d:9d:16:5c:
                    9f:48:53:65:37:22:8f:fd:b7:c7:ea:c3:df:7e:54:
                    27:07:48:30:c6:7d:60:e3:e3:36:a4:da:94:ea:2a:
                    02:70:50:71:7c:e4:36:bf:a9:81:58:be:a6:37:62:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:1A:B5:18:55:F2:0D:59:79:CA:EB:66:20:01:5F:2B:65:18:82
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:05:0c:77:e5:c7:8b:43:f6:b2:78:1b:e6:b4:a2:0e:3d:
         72:e3:1d:3b:45:ec:64:67:99:e4:5d:82:5a:46:b0:d6:bf:91:
         82:3b:ae:e8:e7:aa:61:5e:50:59:bb:c1:55:50:90:75:2f:4b:
         1f:df:9f:22:87:be:72:49:78:fc:67:1a:df:ab:f7:a0:b5:d7:
         81:a3:4f:c3:a3:ef:62:6e:69:5c:c7:85:c4:18:d9:6f:10:53:
         c6:c1:6c:ff:d6:39:95:94:21:68:6a:9f:60:c3:99:ef:f2:ae:
         18:42:20:a9:0d:c6:cc:8e:60:ba:8c:6e:ad:ef:50:6a:dd:29:
         85:33:35:9c:f9:1c:cf:08:31:e5:ba:56:11:ec:84:5d:14:b3:
         3a:44:fd:47:96:66:6d:fb:80:eb:a2:1d:38:62:c8:fe:f7:a4:
         b9:e2:9a:37:53:94:09:4b:a3:fc:16:e0:3c:6a:f7:9e:7a:6b:
         bd:25:43:56:bc:44:d9:48:22:28:19:f8:42:7c:15:ae:af:cb:
         ea:64:b2:f0:27:af:1a:74:9d:3e:d2:32:bc:8b:0b:53:f5:e2:
         fe:f2:92:be:61:6c:82:05:78:bf:14:7c:4e:2b:06:d0:51:20:
         ed:34:74:9c:9c:35:e4:c7:ba:2a:27:ca:c0:39:c5:5e:71:df:
         9a:fb:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:59 2025 by rpki-client