Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          Af8rnVwighW8256nU7/Tfd1S2wxbR64OrT0sh1P59ZE=
Subject key identifier:   31:9F:8F:A6:D5:DE:AC:12:73:F4:4C:6C:56:14:0B:DD:B2:6A:D5:92
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       0198D660F70927BB5E1C0E9086A8C7F84608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 10:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:15 +0000
Files and hashes:         1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: pB5IPOwO0eDPDaoaKTrIVLGui5TJM9lZ7miotrnPwqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:f7:09:27:bb:5e:1c:0e:90:86:a8:c7:f8:46:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Aug 23 10:02:15 2025 GMT
            Not After : Aug 24 10:02:15 2025 GMT
        Subject: CN=319f8fa6d5deac1273f44c6c56140bddb26ad592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:c7:fd:00:84:53:e8:76:d2:30:10:f9:26:
                    b9:69:5b:4d:46:4e:0e:ca:33:1e:1a:fa:cd:2a:d3:
                    54:63:05:64:9c:b7:96:0b:d6:c8:4d:ce:e9:c8:25:
                    95:06:c2:1a:f8:ca:81:09:81:c8:e1:aa:a7:3d:bb:
                    a4:a1:af:4f:2e:aa:55:79:67:b3:34:1f:28:08:d4:
                    db:93:8f:3e:ed:7e:2d:17:49:48:13:14:90:da:c0:
                    15:cb:40:4b:e6:88:9e:1d:f1:4d:98:62:06:fb:ee:
                    bc:c5:f0:b6:16:70:de:46:21:1b:8b:d7:5d:a8:13:
                    3f:ae:d1:eb:92:63:80:2d:cb:ba:52:4b:e5:4d:fd:
                    33:82:d3:5d:bc:cf:b1:76:bf:72:27:03:a3:84:0b:
                    17:8b:f5:67:8b:5b:16:cf:e1:5f:dd:72:e2:f2:8f:
                    60:36:58:72:25:1a:15:4e:c6:67:9d:0c:98:4c:2c:
                    6d:b5:be:b0:49:10:23:57:2f:42:4f:87:15:22:f4:
                    30:9a:bd:7d:73:86:60:56:35:11:11:18:99:07:bc:
                    92:45:c0:ef:7c:d4:7f:8e:d4:c7:bd:eb:3b:ab:b6:
                    1b:0b:b8:76:45:e9:5b:c4:0b:58:64:6c:5b:fd:a8:
                    0c:a4:b4:e5:a5:9c:bc:15:b1:c2:e1:a4:b3:c9:39:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9F:8F:A6:D5:DE:AC:12:73:F4:4C:6C:56:14:0B:DD:B2:6A:D5:92
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:98:ef:b1:a7:7e:34:f8:f1:0c:09:ed:05:ad:00:f3:05:
         96:33:d3:8f:d5:9b:24:27:9d:10:ed:44:15:ae:a9:39:5a:a5:
         5e:b5:b5:6e:57:ff:80:2e:2a:8a:b4:08:3b:05:a3:c4:07:13:
         c2:55:b2:5b:1b:90:64:d4:f5:64:36:15:d3:e2:b3:37:0b:09:
         88:86:67:73:5c:93:20:2e:80:b3:c7:59:7f:68:ef:c2:9e:44:
         18:95:5c:ab:cb:b5:a2:b4:b6:5a:b5:81:a8:2c:0e:75:ad:44:
         27:77:73:e4:03:97:91:b6:24:09:6d:43:19:d5:5c:59:7a:c8:
         12:bb:1a:58:90:af:a5:52:92:9b:e4:0d:29:81:96:7a:fe:33:
         50:5a:a9:59:b7:14:88:e3:cd:bd:ac:c9:03:14:ac:21:89:7c:
         34:ea:e6:ea:af:59:d7:46:46:a0:3f:01:80:19:e6:5e:f6:b9:
         dc:60:c2:bc:2a:e8:fa:2e:ef:ec:bf:07:0b:93:ea:70:77:87:
         89:10:58:be:48:d1:e9:e4:db:f8:46:7f:a6:cf:7c:f2:be:3f:
         ae:9a:0e:53:7d:12:7f:f9:62:bf:28:8c:66:71:79:b4:e9:fb:
         a9:18:3e:e0:82:06:37:ad:f2:3f:92:de:5b:bc:bf:d6:2f:9d:
         be:69:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:39 2025 by rpki-client