Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          46M2ob0t8a6KrIjOSfAUpEA562bPKfLqhQaC/jkMwJg=
Subject key identifier:   77:E9:5C:2F:D9:9E:08:19:49:52:88:F7:AF:73:1E:A2:34:65:B0:F8
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       01975D259D85F9C31A6179EB94475B97BC73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          06A0
Signing time:             Wed 11 Jun 2025 04:00:35 +0000
Manifest this update:     Wed 11 Jun 2025 04:00:35 +0000
Manifest next update:     Thu 12 Jun 2025 04:00:35 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: jld0g8xnhIlftJ6T9K23K4GkprbH84/CkJiDuj1wE4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:25:9d:85:f9:c3:1a:61:79:eb:94:47:5b:97:bc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Jun 11 04:00:35 2025 GMT
            Not After : Jun 12 04:00:35 2025 GMT
        Subject: CN=77e95c2fd99e0819495288f7af731ea23465b0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:3b:70:25:e4:c7:b5:49:d6:f1:12:6a:ca:
                    47:b8:7e:87:21:8f:5b:ab:4f:41:44:cd:a8:77:ea:
                    e2:b4:1e:8c:63:75:65:63:c0:98:c9:8b:60:9c:b4:
                    d7:6f:d1:42:60:bc:d0:eb:4a:c6:b4:6b:7e:56:2a:
                    09:90:7f:32:9f:98:d4:31:51:ee:7b:0f:ee:fc:81:
                    aa:bf:7a:66:a6:d2:65:6c:e3:46:3d:12:8d:3d:68:
                    f5:66:9e:cc:e6:c3:3c:82:22:59:24:2f:f5:f8:c7:
                    a7:cb:e3:48:ef:23:32:6c:df:d1:18:6d:08:b5:14:
                    69:c3:76:70:9a:b0:2f:cf:6f:ed:dc:ef:66:c0:e1:
                    8a:34:21:eb:6e:bc:c5:f8:29:ee:04:e7:0f:45:41:
                    db:b9:25:be:06:c0:5a:35:71:ac:db:a8:18:88:7c:
                    ef:49:5f:a8:dd:ca:ff:35:81:ea:70:c7:82:79:90:
                    4a:46:35:7a:49:a9:36:9e:e9:e8:2d:ae:51:c1:9a:
                    fc:29:82:fe:06:d2:87:2d:2a:85:24:64:dc:ad:79:
                    d1:9d:ba:d5:51:0d:3f:00:05:16:29:c0:7d:33:f6:
                    b6:d9:12:b3:97:3c:82:dd:a9:74:80:43:d8:d4:2f:
                    50:38:d4:70:1f:e2:b9:5a:47:47:9e:c4:ed:10:da:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:5C:2F:D9:9E:08:19:49:52:88:F7:AF:73:1E:A2:34:65:B0:F8
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4c:c1:41:6f:df:a7:f1:e4:cb:f4:d0:82:59:d3:82:5a:02:
         30:d6:dc:13:bf:c6:03:fe:8e:6c:bd:a7:18:eb:db:a6:9b:d3:
         be:f7:0d:ac:5c:99:e1:49:3f:e0:d1:12:13:98:e1:51:ee:1f:
         bd:ad:04:f3:fe:8e:fc:90:58:de:71:0f:f3:74:6b:8d:f7:f5:
         39:a5:33:a9:30:f8:f5:49:bd:ac:d1:95:d3:05:23:70:7d:bc:
         cd:75:fd:e7:70:bf:e8:52:8a:fd:54:ed:f8:a3:fc:d1:95:22:
         33:10:02:48:fe:66:a5:e2:4f:ed:a2:62:99:0c:60:8e:84:4a:
         47:ee:29:db:f2:ca:e6:aa:0b:36:95:21:9e:2c:82:02:27:a7:
         97:a3:2f:82:c2:e3:8a:2f:c5:40:5a:ac:cf:7f:b7:bb:0f:76:
         0c:ec:1d:35:7d:04:50:37:21:32:fc:16:ba:12:e8:26:cb:ac:
         39:e1:54:ec:22:b5:d5:b4:74:4c:f7:a3:f0:96:02:67:8e:2c:
         3b:cd:b0:80:d2:d3:8d:aa:02:a7:55:0c:71:7a:0f:a5:7f:90:
         25:21:26:5e:07:95:f4:7e:0c:93:96:91:f3:69:9d:7f:45:29:
         52:e6:11:66:38:41:9a:b8:05:ff:09:c2:5b:80:5e:c1:0f:7e:
         75:3b:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:51:25 2025 by rpki-client