Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          loXcmZ8nn52HZP2/dGYLukNKGY9Ps9vHUi40aioa0Ac=
Subject key identifier:   7D:E7:75:76:E4:17:FD:43:FD:CD:39:C7:E6:F5:4E:6F:A8:10:76:25
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       019762F110A52EE27D9C920AB6A1C182AE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          06A3
Signing time:             Thu 12 Jun 2025 07:00:55 +0000
Manifest this update:     Thu 12 Jun 2025 07:00:55 +0000
Manifest next update:     Fri 13 Jun 2025 07:00:55 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: 8on6fn46oEx/fYvCD0WcnW9szvWjO7vuhPR6y3WyrEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:f1:10:a5:2e:e2:7d:9c:92:0a:b6:a1:c1:82:ae:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Jun 12 07:00:55 2025 GMT
            Not After : Jun 13 07:00:55 2025 GMT
        Subject: CN=7de77576e417fd43fdcd39c7e6f54e6fa8107625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:4c:a6:31:b6:5b:ec:51:7f:a9:48:35:94:
                    03:18:cf:05:7c:16:4e:02:41:31:20:9c:75:f1:87:
                    a5:57:47:c0:55:06:f5:d3:95:f0:10:c9:ed:18:4a:
                    d2:63:dd:ef:01:f4:6b:d6:27:e7:62:54:6f:2e:bf:
                    36:c7:73:f4:50:51:a1:65:99:32:9e:46:4b:10:48:
                    5c:12:5c:e9:1e:12:cb:ac:7b:5a:c3:2b:3f:c6:f0:
                    b1:f8:7f:5b:81:0f:43:6f:e6:50:78:62:84:6d:3f:
                    d6:a2:e1:4d:a8:63:f5:fb:fd:8b:8b:20:b6:2e:22:
                    72:e0:23:4e:04:ee:8b:12:c8:f5:fd:94:a8:45:ca:
                    5f:6e:b2:b1:93:ed:da:33:31:97:d9:13:0f:c2:8f:
                    dd:a4:38:85:24:b4:93:f2:25:12:ca:5c:b5:88:f1:
                    2c:e2:ac:84:d7:21:95:f9:73:fe:a3:bc:dd:37:5c:
                    51:86:f0:f9:b0:ae:6a:49:0d:9f:36:2a:02:d1:02:
                    1e:88:f5:e0:88:19:12:b0:99:19:88:33:c7:01:75:
                    8c:0f:9f:fd:f5:c0:aa:6c:b8:de:39:b6:22:a5:e9:
                    64:63:38:dd:e6:e0:c3:70:82:98:6c:2a:98:d4:44:
                    a5:e8:30:d9:23:60:a8:6e:2b:ac:f3:a6:77:f2:ce:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:75:76:E4:17:FD:43:FD:CD:39:C7:E6:F5:4E:6F:A8:10:76:25
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:52:f5:c3:9b:8c:03:b7:a0:dc:bb:b6:13:a9:74:56:c4:93:
         0b:76:81:a1:f7:2c:62:16:27:8c:03:21:2d:3d:3b:01:d2:5b:
         04:04:aa:87:4e:c1:df:cf:67:a6:88:ee:d2:af:18:d7:fe:9b:
         5c:62:6e:40:a7:0e:b7:09:77:e8:44:73:d7:43:e3:4a:fa:7c:
         f9:02:b7:e1:ae:80:1e:2c:b4:4e:74:34:ff:79:05:fa:25:50:
         f4:5a:9d:15:e9:e1:a9:c9:3a:3b:6f:01:6c:32:36:8d:db:9b:
         26:f2:dc:58:d7:d4:4c:a0:bb:c8:86:e8:e8:1b:79:06:19:4b:
         ed:70:e8:65:0e:f6:e0:92:3d:b1:b1:e8:86:04:db:23:d9:fd:
         4d:1c:81:45:f7:df:15:0c:6b:e1:d6:f3:09:34:18:33:8b:d0:
         a5:33:a4:f7:c0:20:7d:43:d1:5b:dd:3d:2c:92:62:41:80:a1:
         7a:14:9e:8e:0a:46:58:12:8d:5d:af:18:ab:f8:f0:58:49:a4:
         c6:2e:d4:3c:ac:cb:94:87:17:7e:06:57:df:61:72:19:08:e9:
         72:23:26:73:e2:6d:e2:9d:e1:c9:46:65:f4:d3:00:92:49:8c:
         28:56:38:59:77:5c:d0:e2:fb:82:81:d6:27:82:5b:c6:4d:c1:
         c0:9c:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:24:32 2025 by rpki-client