Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File:                     WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier:          J5LIRWSbX3/UajKbMKsraj8ufHpYFDOyCMgS2WMztJQ=
Subject key identifier:   6A:70:60:92:D8:18:8A:B9:E8:91:95:D9:CC:06:95:FA:F7:58:1F:E1
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer:       /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial:       0199FAD81B77A31052293752714B93DD2998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 05:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:30 +0000
Files and hashes:         1: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: OT39yPEpiY4NNFbByxgqfvMWQkYg1+2o+jvxLXe7knU=)
                          2: sQw9W7aILGy9Pa9_58J_ycedqSY.roa (hash: 3h6rvOsq/U2tYyEzeXc8KFTE7Z25JXJxvFL7/RbG7Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:1b:77:a3:10:52:29:37:52:71:4b:93:dd:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
        Validity
            Not Before: Oct 19 05:01:30 2025 GMT
            Not After : Oct 20 05:01:30 2025 GMT
        Subject: CN=6a706092d8188ab9e89195d9cc0695faf7581fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:41:a2:ea:59:03:cd:d2:bb:01:40:c0:c5:
                    17:88:3f:9b:99:85:90:d6:e4:ef:10:63:fb:d3:28:
                    44:c5:25:bc:58:99:65:b3:86:cb:9b:d7:45:46:43:
                    03:01:64:3c:dc:2b:a6:86:4f:7c:12:3a:92:37:da:
                    b5:d9:ef:60:13:ce:8f:79:a1:01:37:83:a6:f8:da:
                    05:b9:03:b7:ed:e7:eb:a0:d0:82:e9:08:7b:ae:d2:
                    c3:b6:5d:59:7d:26:42:f6:10:ea:9b:35:e2:07:2c:
                    51:0b:53:d8:52:e1:22:fc:d6:43:43:22:50:39:58:
                    76:97:85:5a:12:8e:e8:99:81:2b:0a:f8:78:37:15:
                    fc:b0:24:23:a7:dc:15:5b:13:02:0b:f4:4f:0a:26:
                    4b:19:9c:2f:19:e3:2d:ae:64:81:a7:1d:96:2e:05:
                    6d:1c:94:77:0b:2f:19:50:14:e1:26:4a:a9:54:f7:
                    b5:74:c6:75:39:e5:71:eb:a5:e0:14:b3:6c:cc:1a:
                    5d:6a:74:62:74:0f:f5:2f:24:e2:84:e5:c8:2a:d8:
                    04:b4:34:00:d1:ae:1e:fb:e7:2f:05:af:72:dc:66:
                    d3:80:74:20:f0:48:63:3d:df:66:9c:10:36:e0:93:
                    39:f4:c3:4e:7b:90:bf:46:6b:ae:36:39:bf:5e:f8:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:60:92:D8:18:8A:B9:E8:91:95:D9:CC:06:95:FA:F7:58:1F:E1
            X509v3 Authority Key Identifier:
                keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6d:37:11:7c:13:85:4d:59:fa:b3:b9:5b:43:13:0a:8c:c7:
         35:a6:0f:0a:07:3d:b2:34:c4:bb:7c:9c:e0:e5:4b:53:a9:05:
         f3:29:26:4c:3a:e4:12:0f:a1:31:11:58:d7:f4:d3:d8:da:10:
         90:77:ce:ba:cc:7d:ed:a9:13:1f:d0:fb:fb:ca:ac:7e:61:9a:
         1f:a3:56:55:18:dc:78:34:65:bf:f2:95:03:ab:5b:74:7d:64:
         a3:94:b8:e0:a2:3e:38:0e:1f:b3:76:71:42:d5:22:f4:fc:9f:
         46:13:2e:b2:eb:b0:f2:12:72:ed:cc:55:ef:d1:f3:ab:2f:39:
         d7:e4:40:82:ac:90:35:e2:fd:19:46:f2:1e:2e:42:ce:d4:7c:
         4a:b5:25:43:1f:5d:d1:f1:62:70:0c:2c:21:7e:fc:98:d0:79:
         71:5c:93:85:43:7a:4d:c2:9c:63:3d:5c:d0:ba:0f:be:dd:6e:
         ee:e2:f6:12:4f:27:c8:f8:c0:21:56:99:76:ba:2c:ce:11:df:
         38:f2:d0:66:33:f5:06:be:08:64:50:e3:b6:24:8c:51:a6:9f:
         b2:8f:36:4b:54:d1:77:1a:7d:1c:4e:75:3d:1a:ce:10:a9:9a:
         8a:54:98:63:67:b0:23:33:73:77:bf:0a:91:90:c8:34:b3:f7:
         a0:50:dd:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Bt3oxBSKTdScUuT3SmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGFjZDIxMTIzZjllNzVhOTJhMGU2ZDRiMjZmOWU5Yzk2
MzY3NWYwHhcNMjUxMDE5MDUwMTMwWhcNMjUxMDIwMDUwMTMwWjAzMTEwLwYDVQQD
Eyg2YTcwNjA5MmQ4MTg4YWI5ZTg5MTk1ZDljYzA2OTVmYWY3NTgxZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj9BoupZA83SuwFAwMUXiD+bmYWQ
1uTvEGP70yhExSW8WJlls4bLm9dFRkMDAWQ83Cumhk98EjqSN9q12e9gE86PeaEB
N4Om+NoFuQO37efroNCC6Qh7rtLDtl1ZfSZC9hDqmzXiByxRC1PYUuEi/NZDQyJQ
OVh2l4VaEo7omYErCvh4NxX8sCQjp9wVWxMCC/RPCiZLGZwvGeMtrmSBpx2WLgVt
HJR3Cy8ZUBThJkqpVPe1dMZ1OeVx66XgFLNszBpdanRidA/1LyTihOXIKtgEtDQA
0a4e++cvBa9y3GbTgHQg8EhjPd9mnBA24JM59MNOe5C/RmuuNjm/XvgxWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpwYJLYGIq56JGV2cwGlfr3WB/hMB8GA1UdIwQY
MBaAFFpKzSESP551qSoObUsm+enJY2dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQt
YmNkMzMwMjgxMGUzLzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQtYmNkMzMwMjgxMGUz
LzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG03EXwT
hU1Z+rO5W0MTCozHNaYPCgc9sjTEu3yc4OVLU6kF8ykmTDrkEg+hMRFY1/TT2NoQ
kHfOusx97akTH9D7+8qsfmGaH6NWVRjceDRlv/KVA6tbdH1ko5S44KI+OA4fs3Zx
QtUi9PyfRhMusuuw8hJy7cxV79Hzqy851+RAgqyQNeL9GUbyHi5CztR8SrUlQx9d
0fFicAwsIX78mNB5cVyThUN6TcKcYz1c0LoPvt1u7uL2Ek8nyPjAIVaZdroszhHf
OPLQZjP1Br4IZFDjtiSMUaafso82S1TRdxp9HE51PRrOEKmailSYY2ewIzNzd78K
kZDINLP3oFDdeg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:32 2025 by rpki-client