Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          3OC3Jonlk809bAKbzk/fTU25e5sPnJZVioE/ojtMZh0=
Subject key identifier:   61:B4:2A:03:6F:9E:61:43:83:44:BB:14:56:95:52:FC:82:AE:34:2A
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       019922FA5AC84D81DE5CD4DD89689247A2E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          078B
Signing time:             Sun 07 Sep 2025 07:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:56 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: WNWdy2xApGOhOPG3ntRltQKynb0Zb1nW7vCxdCSn+KE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:5a:c8:4d:81:de:5c:d4:dd:89:68:92:47:a2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Sep  7 07:00:56 2025 GMT
            Not After : Sep  8 07:00:56 2025 GMT
        Subject: CN=61b42a036f9e61438344bb14569552fc82ae342a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:7e:43:3a:ed:41:33:f8:4d:64:c4:7f:14:
                    53:73:41:55:68:6e:88:95:cd:da:58:47:f6:a1:30:
                    50:bb:85:16:e7:54:fa:c5:37:de:3f:ab:00:a2:4d:
                    13:0f:06:ed:fb:b6:e0:7b:5b:e9:9e:69:d8:79:61:
                    79:18:0c:d3:b5:16:88:fb:b2:58:35:07:5a:e0:cd:
                    ed:81:04:7d:39:dd:98:db:30:44:0e:cb:c0:4a:e2:
                    47:ab:50:bc:b7:65:b4:5c:df:06:30:17:f0:38:9e:
                    f9:21:14:e7:e9:3d:6d:cf:36:19:c6:f2:71:5d:09:
                    83:1a:1b:f6:68:e3:aa:bf:7d:c7:38:54:e8:25:3c:
                    a8:92:bc:1c:d7:0c:06:38:60:f1:d0:19:a0:16:2b:
                    77:9d:68:ce:c1:88:df:6d:df:e2:c8:2e:ee:2f:6e:
                    f2:77:43:ab:44:e4:7d:1f:a2:bb:89:d6:67:e2:41:
                    ec:b9:32:5f:30:8b:de:bd:56:cb:e7:87:be:09:1e:
                    cc:4d:e8:de:79:eb:9d:07:ce:49:53:2b:80:62:28:
                    05:3c:3b:4b:a1:4b:a7:44:cd:1d:42:ce:fc:90:a6:
                    2e:68:b3:a5:0d:12:78:6c:81:c6:15:28:fc:0e:43:
                    4e:6f:9b:8a:b5:5d:44:57:27:2e:e5:cd:53:76:72:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:2A:03:6F:9E:61:43:83:44:BB:14:56:95:52:FC:82:AE:34:2A
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:6b:90:28:10:5f:21:26:3c:b8:3f:c0:dc:41:50:74:32:
         65:07:4c:a9:65:8e:d1:3c:fe:d3:94:76:07:3e:ae:58:bb:ce:
         a7:13:34:4d:53:d7:a7:55:e6:03:df:d5:83:5b:ea:3e:b7:02:
         f7:af:58:35:21:5d:86:10:6b:f3:97:b8:62:c9:86:e5:34:88:
         91:cf:05:f4:bf:77:05:e5:cb:e6:54:87:2d:e6:6c:b2:da:de:
         f2:83:bd:f3:65:81:6e:e5:e4:74:40:93:7d:40:f2:a4:cf:bd:
         6e:44:d1:c9:44:2e:7e:d0:d9:6b:f0:3f:0c:fc:ac:e5:47:3a:
         ee:d2:53:e9:9f:c5:e0:54:fe:77:7f:d2:61:fb:18:91:d6:e6:
         39:ec:1b:9c:f7:81:54:56:38:da:7c:b4:fb:24:4c:d9:cf:81:
         10:31:1c:ee:df:dd:d2:ba:60:7e:56:10:14:ed:77:30:7e:5d:
         22:8e:10:99:30:98:17:a1:d4:5b:18:f4:39:2c:8b:0f:58:96:
         50:1f:d3:73:80:91:d1:e5:16:b4:dc:8d:8a:4b:0c:aa:50:41:
         82:bf:e9:af:fe:89:6a:6d:73:3e:a2:58:4c:a7:84:3d:cf:b3:
         0e:41:73:b6:3e:ce:93:42:15:ff:d7:fc:ce:7f:0b:7d:05:72:
         0c:e4:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:52 2025 by rpki-client