Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          9CkeeanfGqmPojlIhoMa6A/l4cLAEqXF05ARm61ynsY=
Subject key identifier:   F6:88:AF:A3:BD:0F:B8:42:7A:20:91:BA:BC:8A:B6:A5:33:22:0B:63
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       019A4D73D7912A2000FFDA99DA0952F3B834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0D97
Signing time:             Tue 04 Nov 2025 06:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:28 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: +zmRwpwT5OKO82ng2gorii21qnmhqLvUz+TqkxMP2Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:d7:91:2a:20:00:ff:da:99:da:09:52:f3:b8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Nov  4 06:00:28 2025 GMT
            Not After : Nov  5 06:00:28 2025 GMT
        Subject: CN=f688afa3bd0fb8427a2091babc8ab6a533220b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:01:b6:92:c0:16:fa:a6:78:8a:00:56:0d:
                    a4:3b:67:44:8a:8e:a9:96:fc:03:03:9e:3a:29:3c:
                    19:da:8f:16:f5:9b:5b:c3:7c:8b:7b:c2:db:57:e9:
                    43:01:00:a7:23:37:f2:a1:4b:c4:e3:44:78:a9:fc:
                    09:f4:99:1f:5b:87:b3:9e:eb:ab:59:09:47:b6:b6:
                    dd:63:7e:fc:6c:d1:0b:f4:d9:6f:16:b7:31:97:63:
                    d2:88:7e:2e:40:ad:85:95:0a:aa:ab:6c:eb:48:72:
                    82:56:ca:e0:46:70:f1:50:94:45:8b:65:3a:01:55:
                    b2:2a:8f:0c:32:1a:c5:d0:e2:89:96:86:11:02:ee:
                    4b:50:fc:26:e1:33:cc:b6:47:e6:c9:47:f1:84:b5:
                    ed:c7:df:39:f7:e3:55:e5:dc:5f:77:c8:d2:fd:ae:
                    c1:cb:10:04:3f:e1:e1:22:b6:bc:11:1d:47:37:63:
                    59:61:89:b8:21:be:72:27:b9:a1:67:ec:2c:36:88:
                    2e:ef:6b:23:57:98:ca:53:a4:cd:43:09:b6:45:89:
                    a3:f4:be:14:bf:1e:74:54:00:48:5e:2d:12:f5:3f:
                    e8:e0:41:07:6d:39:d2:dc:18:c6:58:1b:03:17:4d:
                    42:aa:15:be:42:cd:e3:57:78:79:e6:b1:14:2c:3d:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:88:AF:A3:BD:0F:B8:42:7A:20:91:BA:BC:8A:B6:A5:33:22:0B:63
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:aa:bd:59:6c:1d:5b:70:a9:2d:f7:24:d1:b4:fe:e8:b3:fc:
         43:55:63:ad:a9:95:f6:0c:cf:fa:b1:fc:93:0e:72:00:89:a3:
         97:0a:f7:be:1a:82:c6:f6:5d:84:70:8d:7c:cd:97:9c:b9:81:
         64:94:90:10:54:4f:71:cd:0d:b2:1c:12:f0:37:9b:eb:ef:f7:
         2d:24:9e:86:8b:bb:19:20:e7:5e:08:6e:e9:5c:53:39:08:49:
         3b:bb:72:c7:b5:f9:0d:b4:06:be:12:0b:fc:77:7b:ea:27:4c:
         da:ca:af:f3:31:bf:07:4e:64:d8:4e:03:2e:80:e6:12:38:0f:
         a2:bd:53:4f:a4:a1:5f:24:a0:23:3b:9f:ec:89:72:d3:fc:c1:
         61:81:2c:7d:e9:43:8a:e8:0b:4d:de:3f:c4:3e:06:e0:50:3d:
         26:c0:c0:dd:74:e6:03:39:2b:a3:ae:b9:7b:74:73:8e:1d:e6:
         ce:72:52:b8:62:63:5f:8a:fc:23:dd:79:90:c4:85:8b:dc:e5:
         88:51:c5:c5:93:3a:75:43:41:35:86:90:b4:c6:71:d0:fd:67:
         92:f9:fe:78:85:de:06:fa:46:fb:54:93:86:d8:5d:0d:74:5c:
         24:a4:1d:36:58:da:34:45:ce:3d:a9:b7:ee:9a:9e:71:dc:e9:
         fb:a4:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:39 2025 by rpki-client