Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File:                     WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier:          6pVUVM538loU6jsjla0J42HXRcd1BWBNavP/KBbOjk8=
Subject key identifier:   E1:27:A9:53:10:55:2B:A6:DE:5C:77:A2:31:8C:2C:9A:CE:83:50:2E
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer:       /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial:       019872CF2A238E027A1004953A2855ADA114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 02:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:35 +0000
Files and hashes:         1: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: tEAGhboo7ZgQvbyVY6XAP3R3vx6JDTpag7pAP1Q2SlM=)
                          2: sQw9W7aILGy9Pa9_58J_ycedqSY.roa (hash: 3h6rvOsq/U2tYyEzeXc8KFTE7Z25JXJxvFL7/RbG7Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:2a:23:8e:02:7a:10:04:95:3a:28:55:ad:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
        Validity
            Not Before: Aug  4 02:00:35 2025 GMT
            Not After : Aug  5 02:00:35 2025 GMT
        Subject: CN=e127a95310552ba6de5c77a2318c2c9ace83502e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:75:b2:6c:64:fc:f7:0c:7c:2c:c5:71:98:
                    47:61:44:7f:5a:6e:d5:22:8d:44:53:81:29:13:9e:
                    ad:09:ef:d1:81:74:c1:d3:ad:63:8e:b9:85:27:17:
                    2c:88:2a:16:f8:37:6a:a6:eb:a1:9a:27:c7:fe:e9:
                    22:ff:7b:f1:a9:4e:f5:80:08:29:8f:9c:3d:f5:76:
                    50:8c:c3:19:a6:0c:10:3f:68:a2:bd:2d:98:44:da:
                    bc:32:46:19:9e:d4:1a:34:98:0f:90:82:8e:b7:49:
                    c6:99:67:0c:24:a6:e3:dc:98:54:db:66:e1:16:b3:
                    85:3c:b9:69:76:d9:30:12:d7:58:c1:c1:7a:14:80:
                    e4:7c:ed:af:2c:9b:27:e7:8e:12:d3:b9:4b:f2:65:
                    3a:67:ed:c3:8f:86:38:cc:35:1f:fb:08:45:2a:f6:
                    c6:15:f9:a3:bb:ce:ad:59:c6:10:c7:70:f1:8b:0c:
                    66:7f:ed:bc:9f:62:df:eb:f5:2d:33:9d:23:18:9c:
                    b8:fe:27:e0:a0:c2:af:b7:9c:c8:0e:42:59:6c:80:
                    24:c3:3d:9b:91:12:14:76:80:09:28:d2:16:83:45:
                    af:bf:77:e5:99:7c:e7:52:a7:dc:c5:5e:f8:d1:c0:
                    49:d1:7c:5d:c0:7b:16:a2:0d:95:cd:e7:c4:de:0a:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:A9:53:10:55:2B:A6:DE:5C:77:A2:31:8C:2C:9A:CE:83:50:2E
            X509v3 Authority Key Identifier:
                keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:20:22:6b:e0:de:06:26:59:36:79:7b:49:97:5b:52:d2:
         62:fe:50:eb:06:25:2b:82:2e:88:52:5f:2b:64:63:4d:e0:7a:
         62:9f:53:0b:33:d5:b7:ce:7a:2d:5b:54:6b:f6:e1:ee:6f:35:
         bc:d3:3d:68:f8:97:0e:51:ed:0e:f6:27:c2:49:a2:c5:e6:31:
         4f:b5:cd:73:11:40:11:39:5f:fc:c4:6c:fb:ac:ba:17:46:92:
         eb:cd:3a:48:20:17:ba:2b:d9:98:01:fa:70:f9:a1:0c:ae:0f:
         ff:e0:0d:18:52:40:13:3d:d4:7c:c9:6d:65:a6:27:d1:e3:3a:
         39:46:b7:fd:37:3f:92:8c:78:1f:a9:e4:24:5f:80:ee:81:ce:
         d0:1d:13:ed:22:ee:f3:0f:20:04:60:52:cf:a2:ca:af:12:b2:
         60:2b:61:d9:4b:f1:ae:df:fa:de:b3:87:14:14:6f:c7:c0:9a:
         d9:2c:c5:ff:94:01:b1:c6:3e:14:1d:15:52:4b:7e:61:f4:80:
         6b:0c:2a:26:f7:23:37:64:c6:d0:ea:16:0a:57:9b:d4:f6:18:
         b8:d4:82:0a:9c:70:b4:4a:a1:d0:8d:43:66:77:3f:c6:ba:31:
         2c:6b:cb:2e:7b:57:d3:a9:95:2d:1f:1b:48:87:22:43:32:e0:
         60:4e:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:07 2025 by rpki-client