Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          jH+KTXG4s1vBd0nUrCjDSSRdFJfVTW9svoNFdSlhRHM=
Subject key identifier:   8C:83:04:EC:C1:5E:A3:C4:D8:C6:DC:FA:D8:C2:40:7D:DA:83:4F:DC
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       019F189F0BFC8054139C9978FCB969260E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          0AA1
Signing time:             Tue 30 Jun 2026 13:01:44 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:44 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:44 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: rdfwubLvd/sjAXcx2SLSs6P6+2Z4Yzx/yBRfhoF34jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9f:0b:fc:80:54:13:9c:99:78:fc:b9:69:26:0e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Jun 30 13:01:44 2026 GMT
            Not After : Jul  1 13:01:44 2026 GMT
        Subject: CN=8c8304ecc15ea3c4d8c6dcfad8c2407dda834fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:5a:e6:66:cb:2a:fe:dc:6c:6c:ea:1c:9c:
                    da:70:9f:5e:dd:a9:a2:74:da:4c:b2:9c:b6:17:82:
                    6b:ba:ce:25:7d:aa:66:8b:b6:12:24:a8:4d:28:c6:
                    72:b0:5b:ef:42:ad:0f:6e:f6:3c:92:40:cd:0c:78:
                    2d:f8:82:cb:a6:7c:1c:3d:51:f2:fc:f4:b4:6a:df:
                    d4:25:c4:b1:15:af:34:b7:f8:91:c2:0e:9a:01:cf:
                    40:7d:b2:8a:22:8a:b2:31:a3:97:1f:9e:87:82:f9:
                    18:f0:fa:f8:82:97:70:42:ea:fb:7d:48:5c:47:ed:
                    d8:a0:90:f3:2b:8f:4a:e0:d1:5c:32:db:4d:b2:44:
                    95:c0:d5:75:89:27:37:5a:1a:bb:9e:b1:40:9d:7b:
                    6f:88:81:0b:91:8a:5e:2f:3e:df:c5:c0:50:25:c1:
                    9c:78:48:82:31:27:fe:9b:8c:98:04:e1:39:de:fe:
                    63:8d:bd:c9:6a:fb:ed:f0:f0:e7:44:ba:c0:b8:31:
                    0d:cd:6e:d4:f3:95:d8:e9:66:fc:63:13:5d:d5:67:
                    6f:6a:2a:03:a2:c8:ac:63:30:1c:5e:01:3d:41:ea:
                    5b:d3:16:e0:38:0d:bc:5c:7d:d1:ae:58:3c:3b:95:
                    00:62:27:a0:94:c9:b2:ca:0e:b2:bf:ac:c7:88:42:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:04:EC:C1:5E:A3:C4:D8:C6:DC:FA:D8:C2:40:7D:DA:83:4F:DC
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:9b:c9:71:c4:5a:6c:38:29:6d:31:48:58:4e:ce:0f:53:
         d9:b3:d9:f6:fc:2a:62:ae:75:f9:ac:1e:f6:d0:78:63:74:43:
         d5:9a:4e:a7:bf:d1:6b:70:e9:ea:85:a1:d4:77:ba:63:a1:06:
         ce:48:c7:81:80:c9:76:6a:cc:9c:82:4c:d6:25:4e:16:ae:7c:
         92:26:40:31:b1:4f:9c:b2:74:c0:d3:3a:fe:9d:1a:19:07:3f:
         6b:4f:9a:16:24:b9:93:39:af:70:d7:8e:a0:0a:27:b5:01:6f:
         65:5e:69:80:e3:47:c7:61:1f:61:a6:48:d0:fa:8a:6a:f9:bb:
         61:69:7c:96:3e:32:d5:3a:c6:4f:8f:93:0c:11:a8:ef:7d:b6:
         5d:28:c8:c8:69:6b:c0:03:df:42:88:0d:51:a8:27:fb:fb:cb:
         2c:f9:c7:d8:87:e7:a9:88:09:e0:37:ac:a0:f5:f2:60:f8:73:
         80:b4:4b:f1:50:a0:0d:06:ba:99:f4:3a:4d:e6:eb:02:9b:71:
         44:1d:85:99:15:90:d8:b1:17:7a:7a:93:20:c3:64:54:70:c8:
         04:1d:d5:d7:14:9c:c1:61:18:0c:68:ac:a9:70:52:ab:e5:c6:
         e2:89:54:96:bc:68:31:ff:1e:d4:a8:e6:94:08:52:4b:3b:6f:
         43:28:ec:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynwv8gFQTnJl4/LlpJg4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjZhZTEzNTUwNmI1OThkNjZhNDExMmUzNDU3Njk5ZjFj
NDE0ZTEwHhcNMjYwNjMwMTMwMTQ0WhcNMjYwNzAxMTMwMTQ0WjAzMTEwLwYDVQQD
Eyg4YzgzMDRlY2MxNWVhM2M0ZDhjNmRjZmFkOGMyNDA3ZGRhODM0ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu05a5mbLKv7cbGzqHJzacJ9e3ami
dNpMspy2F4Jrus4lfapmi7YSJKhNKMZysFvvQq0PbvY8kkDNDHgt+ILLpnwcPVHy
/PS0at/UJcSxFa80t/iRwg6aAc9AfbKKIoqyMaOXH56HgvkY8Pr4gpdwQur7fUhc
R+3YoJDzK49K4NFcMttNskSVwNV1iSc3Whq7nrFAnXtviIELkYpeLz7fxcBQJcGc
eEiCMSf+m4yYBOE53v5jjb3Javvt8PDnRLrAuDENzW7U85XY6Wb8YxNd1WdvaioD
osisYzAcXgE9Qepb0xbgOA28XH3Rrlg8O5UAYieglMmyyg6yv6zHiEKP3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyDBOzBXqPE2Mbc+tjCQH3ag0/cMB8GA1UdIwQY
MBaAFORmrhNVBrWY1mpBEuNFdpnxxBThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdhdUUxVUd0WmpXYWtFUzQwVjJtZkhFRk9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84MzFjNGQtODE2MS00ZGMxLTk2MjMt
Y2VkNTJkYjgxOTM2LzEvNUdhdUUxVUd0WmpXYWtFUzQwVjJtZkhFRk9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84MzFjNGQtODE2MS00ZGMxLTk2MjMtY2VkNTJkYjgxOTM2
LzEvNUdhdUUxVUd0WmpXYWtFUzQwVjJtZkhFRk9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQmbyXHE
Wmw4KW0xSFhOzg9T2bPZ9vwqYq51+awe9tB4Y3RD1ZpOp7/Ra3Dp6oWh1He6Y6EG
zkjHgYDJdmrMnIJM1iVOFq58kiZAMbFPnLJ0wNM6/p0aGQc/a0+aFiS5kzmvcNeO
oAontQFvZV5pgONHx2EfYaZI0PqKavm7YWl8lj4y1TrGT4+TDBGo7322XSjIyGlr
wAPfQogNUagn+/vLLPnH2IfnqYgJ4DesoPXyYPhzgLRL8VCgDQa6mfQ6TebrAptx
RB2FmRWQ2LEXenqTIMNkVHDIBB3V1xScwWEYDGisqXBSq+XG4olUlrxoMf8e1Kjm
lAhSSztvQyjsew==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:39 2026 by rpki-client