Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File:                     WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier:          GUV2yX4LcTeovRJmWDJPBhzqWyhNX9+qI0uU6GAb6RY=
Subject key identifier:   FD:F4:96:4A:69:91:B8:E4:DA:30:61:15:3D:E3:19:C9:9B:A6:C3:69
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer:       /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial:       0198D5BC33238DE872A49FBAD9FE8EAEC8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number:          0B44
Signing time:             Sat 23 Aug 2025 07:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:17 +0000
Files and hashes:         1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: 3Uom/9SXXkbKq5Pq0+pJ37TdmqSSysON2L0BFVDsTn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:33:23:8d:e8:72:a4:9f:ba:d9:fe:8e:ae:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
        Validity
            Not Before: Aug 23 07:02:17 2025 GMT
            Not After : Aug 24 07:02:17 2025 GMT
        Subject: CN=fdf4964a6991b8e4da3061153de319c99ba6c369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:7e:ad:f5:df:23:ad:8f:ba:22:3b:24:07:
                    74:0b:6c:3a:ec:a2:2d:43:f1:b9:75:ad:5c:7b:1c:
                    52:ef:d8:28:3b:3d:aa:7c:c8:3c:5c:d6:a1:b3:89:
                    f5:7f:5a:1b:86:57:3f:31:d4:f0:7e:42:d1:8d:4e:
                    4e:e7:b0:c1:d0:82:55:a7:7d:aa:57:62:b6:86:98:
                    08:95:fb:72:0a:d2:98:15:8a:85:b0:c2:b9:f1:74:
                    9b:2a:3c:5c:a8:dd:6a:67:1d:69:7e:6c:9e:7e:29:
                    f7:fc:b6:30:a9:bd:e6:a1:0e:2d:ff:f8:c2:27:b8:
                    09:56:b1:b8:dd:fc:31:43:a6:cf:b4:21:04:ab:bf:
                    cd:63:f3:0a:2c:42:66:9d:16:f3:cd:2e:93:c1:0c:
                    76:6c:d6:ad:d6:75:ba:39:d5:e0:2d:b7:5c:a5:1a:
                    02:cb:13:49:92:f8:bd:24:3d:00:92:0f:2c:e1:d7:
                    fa:04:f6:ea:ea:28:3d:3e:a3:8c:25:4c:50:89:82:
                    ea:c3:0f:95:19:86:62:65:31:dd:20:c3:28:c6:96:
                    fa:a3:c8:86:b8:db:fa:a4:dd:70:9c:99:b7:0f:fb:
                    a5:97:a3:dc:b8:83:f7:4c:30:6e:58:fd:3d:22:1a:
                    83:43:ff:41:cf:b6:9a:4a:e6:09:9b:c1:41:1e:15:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F4:96:4A:69:91:B8:E4:DA:30:61:15:3D:E3:19:C9:9B:A6:C3:69
            X509v3 Authority Key Identifier:
                keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:f7:73:57:2b:3f:9c:07:1d:03:71:02:13:76:be:bb:a4:
         91:1e:df:15:71:eb:cf:49:01:85:0a:3c:80:f3:98:a0:82:a8:
         95:c8:c9:37:31:0a:3f:23:8b:a6:40:9a:a0:02:a6:70:38:06:
         8b:2e:ad:99:0f:3a:e0:e0:86:d6:f6:84:cf:6b:d7:8b:19:e9:
         d3:06:30:69:b6:03:09:11:c7:7a:81:18:b5:14:28:bb:38:fe:
         8f:8d:ea:56:ef:f2:9c:79:6f:cc:e9:16:7d:ab:3f:d3:cb:67:
         e3:b0:8b:09:cf:2f:1f:53:84:61:49:b8:6f:0e:e4:f3:75:21:
         f8:83:6f:af:7d:50:6b:05:8a:24:4e:32:ad:dd:62:e9:bc:6a:
         a0:b3:4e:2d:37:1d:bf:cf:8f:19:39:48:bc:1e:47:b2:9f:fc:
         52:45:80:e6:da:23:1b:29:c5:cc:1e:ef:d6:02:e6:68:bc:5d:
         66:43:ba:ca:61:d6:ca:48:41:d8:f5:0c:99:6e:a5:da:cc:e3:
         03:87:68:78:19:d3:5c:cf:1d:50:32:b5:ab:19:22:be:23:b8:
         1c:f7:30:e6:2f:a4:c6:17:42:c7:21:e1:fe:2f:57:fe:a0:4a:
         e8:c5:b6:9e:82:23:c4:79:5a:e8:dc:b5:2f:c7:ef:77:5d:22:
         6e:da:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:08 2025 by rpki-client