
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          lV3uiwfKgTZ7UQwym8CNVbXLnJ4h7WWh/5+mobIpLyg=
Subject key identifier:   62:F6:13:6E:BF:9C:5D:EC:D3:1B:C2:DB:12:AA:68:7F:7B:3C:EC:87
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       019A4DAAEFAFF14201BDD202774980CC9F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          06C6
Signing time:             Tue 04 Nov 2025 07:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:39 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: 76ORFXs4gerXt/xcsAdZPF+VMlWqszwHNLtxTi7rriM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:ef:af:f1:42:01:bd:d2:02:77:49:80:cc:9f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Nov  4 07:00:39 2025 GMT
            Not After : Nov  5 07:00:39 2025 GMT
        Subject: CN=62f6136ebf9c5decd31bc2db12aa687f7b3cec87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:b3:90:2b:08:b7:b1:53:2c:96:96:5d:7e:
                    73:b6:82:9c:32:62:78:05:4e:5b:9a:80:49:65:21:
                    3f:1b:5b:6b:88:aa:06:4d:bf:cf:78:b8:b8:92:83:
                    31:34:c5:f1:82:b1:6d:ac:55:b0:85:1d:be:82:67:
                    8b:5e:f5:6f:0f:69:3c:16:5d:a6:51:08:e8:18:1d:
                    3f:69:47:d4:15:91:14:8e:e8:a1:bb:86:53:b2:84:
                    cb:4f:da:cf:26:45:09:d6:05:8c:c6:e6:fe:d4:51:
                    d9:c7:b3:eb:cf:95:3b:99:80:5f:d9:6f:54:21:48:
                    48:dd:7a:a1:71:01:49:e0:fc:6b:22:6e:c5:dd:da:
                    ed:27:9a:0a:eb:a5:92:f2:b7:22:fa:77:9a:0b:a7:
                    91:45:64:ce:27:fd:2b:b5:23:f3:96:72:52:11:2d:
                    1d:cf:31:5d:14:30:46:ee:50:72:b4:20:fd:52:40:
                    0f:98:e2:a4:db:0e:54:5e:ae:7d:68:3c:b7:51:c6:
                    1f:4d:c0:a4:6a:2a:ab:97:20:07:b2:3d:4d:fd:14:
                    ba:5f:37:ad:c3:c0:72:e2:12:2a:af:38:95:7f:59:
                    7a:f1:f5:13:c1:44:c6:06:2a:52:36:fc:0c:84:65:
                    c6:f1:a9:63:0c:dd:c6:69:fe:3e:a6:81:e0:cd:1b:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F6:13:6E:BF:9C:5D:EC:D3:1B:C2:DB:12:AA:68:7F:7B:3C:EC:87
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         20:3a:9d:58:b4:51:e7:83:ac:40:13:d4:a5:21:bc:f3:d4:ac:
         a1:2e:be:b8:a7:4f:09:4a:66:29:a1:bd:22:31:e8:61:8d:5d:
         13:96:a5:2d:b8:ac:e9:b8:2a:b8:df:f4:42:4b:78:12:20:c6:
         2e:6a:a2:a7:50:1d:61:51:14:75:76:4b:37:fd:1d:4b:e9:e2:
         b3:06:66:1a:55:51:db:53:27:8c:de:07:1e:d0:0a:22:55:da:
         d9:db:f9:47:47:0c:b1:8f:1b:43:c0:a0:5b:56:d0:40:3a:aa:
         81:db:b6:1f:2d:68:de:b0:f5:7d:49:db:4b:0b:eb:73:a4:84:
         0f:9d:06:7f:9b:28:f6:47:0b:0a:9f:ae:26:f2:2d:d8:b5:e6:
         f2:0f:b8:bf:b4:c1:c3:65:31:2c:b7:f3:95:42:20:d2:ba:8a:
         22:9f:11:6e:88:02:69:2b:fa:6c:a5:65:b3:1d:47:e7:bb:53:
         de:e6:54:90:0e:3b:be:ab:d4:5d:e3:75:00:6f:ab:92:26:a2:
         fa:71:11:f9:3c:91:ef:1e:e4:d9:d9:d7:9d:88:39:51:37:2c:
         ac:76:ba:c9:0f:6d:60:e2:b0:92:ee:c4:cc:c0:3a:18:5f:f2:
         ca:be:b7:57:2b:97:af:9d:ec:c9:45:31:dd:8d:b4:c5:3f:3e:
         02:4a:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:55:01 2025 by rpki-client