Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          i6enyeaqUjszSMKuEWa/ZqfBLijj6/ujmDk4FbWnWy4=
Subject key identifier:   FA:AE:A4:36:F5:AE:0A:78:6F:C3:52:0F:97:81:6F:43:A2:12:2E:7D
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       0198D473BAC26632EB8CA1F029EE5978618C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          1107
Signing time:             Sat 23 Aug 2025 01:03:30 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:30 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:30 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: zlX6nDhuXRuClKUD9zT6Km/hNbhUrCMr4Vy+IAW45bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:ba:c2:66:32:eb:8c:a1:f0:29:ee:59:78:61:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: Aug 23 01:03:30 2025 GMT
            Not After : Aug 24 01:03:30 2025 GMT
        Subject: CN=faaea436f5ae0a786fc3520f97816f43a2122e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:14:a0:28:80:b5:01:c4:7c:75:2e:3e:ac:
                    a6:14:cb:1e:72:a7:35:a3:71:e0:57:4c:d7:b8:53:
                    cc:9b:c5:66:8b:92:e5:6b:90:2d:07:cb:3f:0c:91:
                    98:f0:96:b9:7f:a8:93:8c:25:eb:cb:df:21:7d:87:
                    98:45:d9:66:a2:e3:93:be:29:18:c3:af:fc:3a:10:
                    17:02:dd:18:63:5c:b4:42:63:47:49:27:01:ec:ee:
                    07:85:dd:b1:a2:0a:69:93:66:4f:9a:fe:c8:a5:ec:
                    60:15:f6:06:88:bf:de:d9:84:47:86:cd:03:aa:94:
                    1c:92:bc:2d:30:9d:ab:cc:92:92:ea:4d:b7:89:18:
                    36:90:38:f2:83:6d:14:db:83:ce:67:6a:1a:24:ec:
                    a3:06:61:96:35:e8:b1:50:b5:12:f9:bb:5a:eb:d1:
                    a6:e6:b9:d9:ee:99:30:17:77:93:7b:6d:02:0e:08:
                    76:94:9a:fb:05:02:df:07:b3:ae:b6:68:52:4c:13:
                    e1:09:ee:e4:f0:89:72:51:c5:47:cb:a3:85:52:13:
                    c4:a2:b7:53:e6:04:50:9f:74:6c:70:d3:b9:d1:1e:
                    80:85:88:a0:8c:9a:41:87:4c:4d:93:9b:4b:24:f6:
                    72:e5:d5:cc:21:58:1b:d2:86:58:9b:3b:8d:ab:3e:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:A4:36:F5:AE:0A:78:6F:C3:52:0F:97:81:6F:43:A2:12:2E:7D
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:29:bb:a2:a4:28:35:cb:98:5e:da:fd:d9:81:d8:ba:c0:86:
         6c:a6:68:8b:50:a7:74:2a:39:84:dc:b0:a0:22:bc:52:8e:dc:
         c8:4d:cf:a2:6c:78:9b:60:58:80:fb:18:60:95:63:1e:18:70:
         cb:51:e4:8c:80:2f:65:ed:66:78:81:88:c8:e1:91:aa:4a:0b:
         7e:93:03:8a:fc:e7:df:e1:1b:e0:a1:06:39:75:c0:80:66:9b:
         73:7b:ac:ab:44:85:c5:64:36:da:41:33:f1:84:72:6d:c9:78:
         a4:f5:68:83:72:81:f3:24:af:2d:e9:d5:b0:00:a1:c8:5d:0c:
         db:29:79:dc:da:e0:6a:a8:dd:6e:c9:03:f2:e1:15:db:6f:28:
         d0:f9:c3:ae:31:7a:68:26:5b:53:3d:64:e2:73:8e:b1:9c:4f:
         a0:db:c8:8d:a3:9f:21:6e:0f:be:8a:25:d7:1e:b1:34:47:ba:
         10:cf:7a:34:3f:1c:a7:d4:bf:e6:5e:a0:ae:09:3e:90:7c:e6:
         7c:36:3c:4e:45:ab:8b:54:8b:2f:e1:c7:6c:3a:4f:3b:11:ec:
         53:1c:bf:2a:3d:7e:19:5e:07:4c:e4:bc:01:93:c7:eb:49:1c:
         c5:0a:3b:8f:f9:e7:dc:33:01:06:5f:7d:44:95:fc:f9:9a:67:
         d3:c4:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:37 2025 by rpki-client