Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File:                     WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier:          rpYEzxbb75Zgh4ObKv0A72OYnUaTatLqItgb+GsRbOs=
Subject key identifier:   B3:9E:9A:FD:90:5D:A9:6F:37:A8:BA:B9:99:28:56:22:B6:C4:80:DE
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer:       /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial:       019A71137AF012A28146B60B6B0474EAF6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number:          0C19
Signing time:             Tue 11 Nov 2025 04:01:33 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:33 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:33 +0000
Files and hashes:         1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: 7JMFUVumGTn0A6frXUU53kIddgmUi9mzrB04HTaTOVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:7a:f0:12:a2:81:46:b6:0b:6b:04:74:ea:f6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
        Validity
            Not Before: Nov 11 04:01:33 2025 GMT
            Not After : Nov 12 04:01:33 2025 GMT
        Subject: CN=b39e9afd905da96f37a8bab999285622b6c480de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:32:35:0a:c8:7e:6c:47:f3:28:55:57:3c:
                    30:c2:c3:78:59:69:70:6f:fc:29:a6:4d:54:9b:32:
                    8b:eb:20:fa:3a:6b:44:5f:64:b4:aa:03:33:91:80:
                    06:dc:9e:cc:1e:78:e2:e5:8e:df:fd:f5:02:48:4a:
                    ce:fc:4a:36:ee:e2:ec:34:1b:a6:fe:c3:78:02:45:
                    45:e4:87:da:4d:69:dd:8c:18:15:ad:58:08:4b:b8:
                    e5:05:3f:13:de:28:dc:7b:8c:57:6b:cb:e7:af:e4:
                    19:c1:3c:d3:95:e2:96:d9:f8:d4:60:f3:09:68:40:
                    95:bd:29:e9:7e:5a:0b:6f:f8:3f:0c:1d:a8:5a:2e:
                    07:a9:5c:54:01:f7:a6:24:19:3e:28:b4:4e:f3:34:
                    2a:38:a5:dc:5c:3d:59:e9:0c:65:65:30:0c:86:a4:
                    c4:d9:42:88:06:96:56:e8:b8:3f:52:d6:48:22:a4:
                    11:86:fc:32:2e:eb:b3:48:10:92:ec:9a:c3:05:93:
                    7c:5d:33:3e:17:47:f2:29:ae:91:4d:57:df:00:2f:
                    eb:24:03:61:65:cc:ce:72:64:35:15:e3:29:da:de:
                    3a:01:81:e6:bf:68:a7:08:ec:bf:f5:e2:1b:90:91:
                    10:81:e9:83:94:fe:6b:3c:bc:7d:76:95:03:40:1c:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9E:9A:FD:90:5D:A9:6F:37:A8:BA:B9:99:28:56:22:B6:C4:80:DE
            X509v3 Authority Key Identifier:
                keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:0f:89:86:41:b4:97:d1:8d:1a:eb:7c:b4:80:23:3c:2e:
         cb:86:c1:c6:55:8c:97:81:d8:a4:66:28:cb:07:ca:d2:2a:ab:
         41:b0:d0:f3:85:da:d8:98:da:98:23:8d:8f:58:2e:2b:d0:e3:
         b4:97:5a:f5:cf:7c:92:1c:21:ac:a8:60:c0:5c:4e:43:89:fe:
         5f:62:3b:42:17:17:8d:1c:d2:67:2b:9c:54:dd:e9:72:71:64:
         9f:d2:32:4e:cf:f1:8f:31:f5:dd:3b:6e:18:14:fd:a4:91:cc:
         1c:63:83:5e:02:18:be:2b:95:87:01:cb:bf:ad:78:be:51:6c:
         40:da:b9:de:71:a3:4a:28:19:e8:bd:33:df:3d:5c:51:4d:a9:
         e7:d5:78:3c:b8:dd:dd:34:41:87:91:a1:82:31:43:2f:e1:96:
         05:f8:9e:e0:cb:31:60:f6:05:70:bd:c0:e8:09:c1:52:6e:12:
         9b:02:1f:41:9c:79:ef:1a:b8:ca:b4:2c:c6:f1:5c:e7:a9:f2:
         cf:39:f6:7f:44:b2:58:1a:d6:e6:34:b9:a8:f2:3c:a6:0d:ca:
         50:32:61:7f:ac:2c:f4:25:d4:9a:3f:5d:1a:8f:b8:8c:40:65:
         d6:b5:7b:6d:01:66:ab:ab:fb:3d:21:2d:7e:17:98:14:da:a5:
         73:c7:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client