Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          coDCa68Fq3BuEJ5102pN402lvlDRAlu7jeNPUQRJ4KY=
Subject key identifier:   C7:7C:88:3A:7C:DE:DB:5A:30:F3:CC:0B:53:B4:5A:B5:0D:C8:9B:49
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       0197575A75609F55001485D3B3CB532F532B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          069D
Signing time:             Tue 10 Jun 2025 01:00:35 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:35 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:35 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: lZLL5hNfFNY1kGbW83mXIAccZIjejIr82shTAY4wPN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:75:60:9f:55:00:14:85:d3:b3:cb:53:2f:53:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Jun 10 01:00:35 2025 GMT
            Not After : Jun 11 01:00:35 2025 GMT
        Subject: CN=c77c883a7cdedb5a30f3cc0b53b45ab50dc89b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:33:b8:9a:2d:e6:14:a7:7b:ae:1c:4b:29:
                    db:2f:0c:e8:2a:c6:61:21:b8:49:1a:64:db:44:97:
                    59:be:6d:13:cc:e2:63:59:fd:f2:46:99:58:fc:55:
                    5f:2b:7c:6f:08:18:82:70:0e:49:0e:9b:4c:48:8e:
                    10:3b:69:8e:bf:72:07:c3:57:e4:e7:1c:83:7c:fc:
                    f0:77:74:71:a6:ef:dd:e4:b5:4c:b1:dc:36:64:62:
                    ea:ca:1b:1b:03:90:79:81:76:bc:ae:11:99:d3:78:
                    a3:7c:5f:d8:7e:85:df:c6:1c:64:5d:b4:ff:2c:57:
                    63:21:fb:33:8a:63:2d:68:7e:db:39:a0:0f:b1:ab:
                    97:a7:06:f5:e5:3b:c2:c8:0d:3b:79:27:2c:8e:94:
                    d3:bf:15:7a:81:1e:17:09:57:2f:d5:40:5d:af:67:
                    27:7c:0b:8d:18:33:f3:0d:4b:80:11:d9:a4:46:89:
                    fb:f8:50:5e:2a:60:cb:cc:ca:4d:65:1c:b9:ea:cb:
                    d9:f0:39:da:47:3d:11:0b:a5:e4:b8:df:8b:4a:7b:
                    39:24:71:94:91:3d:41:4a:1c:e9:d2:61:02:9c:11:
                    96:67:87:73:65:f0:b4:a1:b3:55:a8:0e:b4:64:df:
                    62:02:00:ad:b2:a2:67:e3:a8:93:3d:71:e3:90:b7:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:88:3A:7C:DE:DB:5A:30:F3:CC:0B:53:B4:5A:B5:0D:C8:9B:49
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:69:88:fd:3d:2b:e4:2d:0f:4d:cb:b0:76:61:44:a3:27:
         4b:db:22:e0:1c:8f:30:be:d2:07:01:e0:88:8d:f7:0a:cd:69:
         e0:f0:b1:40:66:c9:a0:be:8d:a6:1b:83:2e:26:75:f0:6c:bc:
         4e:29:a3:01:14:85:23:84:86:21:70:e1:44:68:d0:55:28:07:
         0c:de:7b:55:49:c5:a5:7d:c8:d7:52:1d:b9:17:85:0b:32:e3:
         f9:01:76:85:22:ab:5d:9f:e0:a3:fa:4b:6d:cc:69:51:a4:f0:
         91:ed:0a:c3:5e:0b:89:01:b3:7f:e9:7d:33:a0:c5:c1:5e:3a:
         8b:ef:91:8f:98:7a:c8:40:e2:b9:d4:25:ff:f9:4e:9e:f2:81:
         7d:17:74:50:64:8e:9c:75:2b:07:e7:5c:c8:c4:7a:00:f9:30:
         11:78:e6:ce:f2:a9:12:a6:19:97:b9:36:d2:b3:4e:47:3f:61:
         60:40:26:56:62:5b:51:2d:41:1c:5b:1d:2d:12:c4:8c:1f:44:
         a0:8e:d2:ae:9f:ea:04:2a:de:97:61:1a:0f:8c:5f:08:03:36:
         00:ce:62:b1:a3:bc:ef:50:76:6c:d6:6b:70:1e:c4:23:44:72:
         f1:ae:49:b5:f3:d3:3e:4e:e9:c9:ae:90:c6:87:74:73:d9:df:
         4d:ae:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:31:13 2025 by rpki-client