Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          eI+UkOepSTjeGu/++JfvJ5+uxAd8kSYOQtPAOJPWlO8=
Subject key identifier:   F9:17:94:05:91:20:3F:E3:2A:99:F0:24:0E:69:2D:9D:B9:41:CD:9A
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       01989411B2467A4A98EA5F35D76E79A25F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          0741
Signing time:             Sun 10 Aug 2025 13:00:44 +0000
Manifest this update:     Sun 10 Aug 2025 13:00:44 +0000
Manifest next update:     Mon 11 Aug 2025 13:00:44 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: TvMBLW4Ii3UvjYC65fkWGm51OMzjn/AXvWP/vdjuD9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:11:b2:46:7a:4a:98:ea:5f:35:d7:6e:79:a2:5f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Aug 10 13:00:44 2025 GMT
            Not After : Aug 11 13:00:44 2025 GMT
        Subject: CN=f917940591203fe32a99f0240e692d9db941cd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:63:86:87:44:a4:22:9c:2f:2a:d2:b3:87:
                    bb:fb:f2:bd:0e:01:2d:6e:96:11:57:10:ca:50:ca:
                    61:6f:8e:f5:91:71:e5:f4:81:36:ab:7b:27:e2:a2:
                    9b:4e:86:c9:14:1a:e5:7c:8f:c0:20:9f:3a:fa:11:
                    fa:6b:fa:1b:bb:ef:f6:32:ee:6f:ff:53:6f:7e:a0:
                    6c:9c:37:56:c4:94:ce:54:35:ce:7b:9c:61:07:cd:
                    78:ab:04:a7:26:ae:4e:4a:a5:a4:87:4f:b4:ef:52:
                    5e:a3:93:99:0e:f7:95:4f:8d:ca:5e:a4:dd:e5:6c:
                    ec:1e:25:f6:8b:ff:b1:47:e2:2e:64:a2:13:c4:8e:
                    e4:8c:a6:6f:b0:52:fe:86:36:dd:6e:25:f7:b3:b8:
                    6a:0d:d8:20:47:60:56:34:c4:e4:0d:35:9c:be:9e:
                    47:e8:14:07:e2:c9:90:0d:5b:18:0a:04:36:2c:e8:
                    4f:13:16:92:c4:c1:5c:e7:2b:5d:94:0e:7e:55:a2:
                    79:3a:4b:d1:c8:2a:0c:da:65:0b:bf:87:59:a8:9b:
                    b0:fc:d0:a6:62:94:95:ee:70:c1:5e:85:46:d8:fc:
                    84:f9:50:a7:65:e5:dd:55:3f:35:40:68:41:b0:c2:
                    e1:8a:db:af:2c:38:ec:3f:34:06:68:3e:64:3d:59:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:94:05:91:20:3F:E3:2A:99:F0:24:0E:69:2D:9D:B9:41:CD:9A
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:13:8d:78:cc:68:d2:2e:ba:dd:d3:36:0f:4e:5a:23:92:
         a6:a0:1e:7e:16:24:8e:a5:99:46:bf:07:41:78:98:85:a2:b6:
         2f:bc:30:3d:ff:1a:28:e9:45:54:42:dc:4e:52:d9:c7:e3:3a:
         01:a5:a6:5e:fb:5a:e2:4d:71:e1:ac:54:2f:87:a5:b6:99:b1:
         23:c1:f0:45:72:8e:2b:7d:8a:5b:c0:73:60:a1:44:d6:a6:8a:
         4e:d7:e4:f6:3d:5b:7a:bd:6a:8c:97:3c:93:cf:08:3b:95:4e:
         71:16:4a:10:31:a8:06:14:0a:49:d5:0f:00:f0:7b:26:76:93:
         3c:08:7d:bc:2d:32:2a:08:72:9c:55:56:98:fb:b4:f3:e1:00:
         8e:d7:75:73:d3:02:3d:ec:63:c9:5d:1e:2a:f7:18:b9:3e:98:
         53:04:2a:95:7e:71:2d:06:96:cf:76:2e:e9:a2:a5:39:8b:a0:
         76:b8:89:7c:67:9c:b2:38:bd:0c:80:d7:26:bc:43:89:f1:8a:
         b8:68:02:eb:23:12:1b:b1:68:2c:35:68:ac:3f:5d:fd:67:18:
         db:bb:52:7d:49:03:e4:46:40:04:43:60:ca:f7:ee:a4:75:0c:
         cc:08:13:24:d9:5f:5f:68:36:5c:a8:e1:b5:60:12:12:c7:43:
         d4:a2:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:45 2025 by rpki-client