Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          NEv8hdCKQon3yPOuiKrhnIg+DQtJPku+x4zbabZIQqw=
Subject key identifier:   B7:86:69:92:95:DD:F0:B6:91:38:64:B0:95:ED:CE:1C:3B:EC:59:33
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       019D265F4559B34FE4897E2823F37B58A532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          099F
Signing time:             Wed 25 Mar 2026 19:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:11 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: rCkiJWCIIPc59WjTcFiMWaBvhISInRRX6tjlAg6xGjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:45:59:b3:4f:e4:89:7e:28:23:f3:7b:58:a5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Mar 25 19:01:11 2026 GMT
            Not After : Mar 26 19:01:11 2026 GMT
        Subject: CN=b786699295ddf0b6913864b095edce1c3bec5933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:75:68:6a:52:43:af:9e:f1:76:ad:56:29:
                    b2:56:ae:23:46:e7:40:c8:1c:4e:41:0d:2e:4d:52:
                    62:e3:85:70:78:6d:1f:46:2a:db:68:04:a8:9e:92:
                    fc:a1:f1:0a:e3:cc:97:8b:c4:d8:eb:a1:23:58:68:
                    79:80:fc:f7:6d:bf:89:aa:fe:18:23:3b:c3:74:0c:
                    18:39:dd:8b:0f:03:d2:e1:ce:99:03:c1:7c:d1:e2:
                    4b:9b:fb:41:66:1a:6f:88:c0:46:1b:9c:64:67:e9:
                    66:07:be:15:8e:f4:1d:49:f0:c5:34:50:a6:eb:04:
                    8f:24:04:be:a1:76:7a:ad:b8:e4:4b:b1:9e:3a:48:
                    fd:6b:25:d8:7f:d4:e0:95:5e:a0:d7:52:ce:4f:4d:
                    58:7f:88:97:96:d6:bc:ef:2a:c4:51:6a:82:c2:e9:
                    31:05:cf:14:7d:45:f4:b6:a3:6b:11:7e:af:3b:c2:
                    5e:3d:33:f2:97:ab:b3:a5:c7:58:0d:1d:ba:30:e8:
                    8f:e2:ca:b2:75:f7:73:c1:3b:53:96:7a:38:a7:c0:
                    75:13:0b:17:9a:a0:2a:e4:01:ae:f7:1b:fa:cc:d6:
                    19:55:99:a0:23:51:2f:83:41:9d:25:e4:2a:ed:02:
                    8f:83:91:cf:6e:a0:a8:fc:bb:5e:e0:97:45:ba:bf:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:69:92:95:DD:F0:B6:91:38:64:B0:95:ED:CE:1C:3B:EC:59:33
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:44:28:6d:7b:84:7f:f1:b1:0d:6a:de:33:fc:af:1b:2e:9f:
         fb:ea:cd:79:13:4a:dd:f1:f0:8a:a7:4e:25:cc:db:bf:7d:da:
         a2:e8:59:0f:00:4a:c3:e6:0a:df:ca:5e:2a:05:57:56:62:4f:
         31:fc:68:73:b4:60:28:71:02:7f:e3:f8:81:f9:ce:5c:4b:a7:
         c8:f7:ce:18:d8:3b:f9:34:0e:1c:5e:79:88:7c:13:df:1f:1f:
         4b:18:37:7d:65:e4:7f:2f:2b:46:27:3b:3a:ca:f7:68:71:d1:
         84:58:3c:d1:f9:c3:1a:8b:de:5f:93:bc:d0:e2:2b:c5:c7:dc:
         08:de:60:25:e5:d3:22:52:17:b6:2b:40:87:f5:da:41:85:0a:
         53:f4:ad:90:ed:db:29:d2:d1:ca:fa:3a:f9:af:b7:c0:bb:de:
         ca:01:87:bc:8c:68:a8:49:6d:ea:eb:ef:4f:f2:db:f5:4e:9a:
         14:17:b8:f9:c7:00:e2:8a:b2:2f:6e:9b:f4:eb:c5:7a:69:c5:
         f8:10:56:09:36:3f:b8:da:ab:82:7f:5c:05:2f:ff:5a:3f:58:
         5c:e9:a9:ad:cf:6f:72:06:3d:a3:82:55:b9:e9:d9:da:0d:e7:
         36:bf:6f:ef:9b:fd:34:b3:e1:3e:bf:15:43:32:dd:c0:8c:1b:
         ec:71:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----