Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          10upPhmnHyWdc9g0BjYb2/XGVmkag0s2Dm6wmbOlklo=
Subject key identifier:   28:CB:4A:9B:27:F7:00:5D:E0:70:6F:2F:A9:5B:0C:FA:DC:6D:DB:1E
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       01A0DA96938624B48CB45EF2651B0F36C50A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          0B8A
Signing time:             Fri 25 Sep 2026 22:01:36 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:36 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:36 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: ee5XQDylZPCr2DNHTs0ew4RIcDUR2OjWoqBnJ5O0oC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:93:86:24:b4:8c:b4:5e:f2:65:1b:0f:36:c5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Sep 25 22:01:36 2026 GMT
            Not After : Sep 26 22:01:36 2026 GMT
        Subject: CN=28cb4a9b27f7005de0706f2fa95b0cfadc6ddb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:47:f5:b2:25:48:4b:98:16:45:a1:51:cf:
                    45:29:c7:da:a5:3e:aa:45:da:c5:77:bb:19:4f:3c:
                    42:b1:e5:98:3d:13:90:b0:4b:c7:d1:50:56:9f:3f:
                    2d:74:e6:80:ab:da:f7:8e:34:11:0e:0d:92:b6:48:
                    41:ed:a9:65:e2:67:a1:ee:3f:3f:ff:06:0c:2e:a6:
                    6f:52:9f:56:a7:13:20:a6:5d:9b:cd:5a:1e:ff:9f:
                    95:f5:03:13:b3:d5:96:e8:95:e3:1f:ab:c6:1f:81:
                    8e:eb:a5:cb:27:d3:ac:7d:e5:87:0e:8b:48:54:d5:
                    18:ad:f7:8a:9e:d0:c5:c8:4d:18:b6:90:da:39:66:
                    b0:49:66:51:4f:2b:cd:53:62:5e:58:99:99:b1:e3:
                    3b:e1:18:bb:27:b0:d3:9d:cd:5d:5d:9f:dc:af:39:
                    7c:e3:7f:a3:93:c3:99:4b:19:34:52:f3:36:46:09:
                    d5:d4:7c:3d:56:ba:af:4d:54:b1:6b:71:ec:57:47:
                    f4:88:20:1e:a8:04:ed:71:1f:46:74:b7:f8:fa:74:
                    aa:84:4a:1c:1f:cb:31:0b:06:a4:bf:d9:2d:de:13:
                    fe:d6:09:df:66:26:b1:0c:f0:d4:ce:05:78:e3:58:
                    56:1b:de:89:06:e1:91:51:a3:2a:9e:df:b6:23:b0:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:4A:9B:27:F7:00:5D:E0:70:6F:2F:A9:5B:0C:FA:DC:6D:DB:1E
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:43:91:25:d2:19:91:9c:ee:73:c9:15:23:1c:4d:58:b6:
         24:c3:3b:44:a7:ba:34:e3:d5:83:ab:04:f6:65:c4:f4:aa:73:
         56:b4:a1:9b:31:f3:11:20:0b:2d:0c:71:fc:e4:ab:4c:9e:73:
         e4:f0:44:a0:47:de:5b:45:62:34:aa:f3:96:ce:cf:76:23:2a:
         0a:c7:85:07:cf:4c:65:bb:5e:85:7f:b3:60:ca:89:3e:24:43:
         0b:2b:1f:f3:9c:42:dc:d4:1f:ea:25:16:3b:e7:a5:7e:36:69:
         84:07:72:75:c4:5c:f6:ef:2f:17:ab:71:2d:b8:a8:90:b0:cb:
         cb:09:f0:99:6e:ce:90:b2:4f:98:7b:ab:5a:e4:73:fe:8d:5c:
         f0:70:5e:58:3e:bb:6b:53:46:7f:20:03:5d:c4:ac:f3:78:56:
         82:ea:13:8e:1e:58:a3:f1:bb:e4:d1:92:b4:63:a3:9e:a9:a2:
         6d:35:1e:90:d8:2c:f7:89:33:63:a6:a4:cd:4d:d1:dd:6f:51:
         bf:ec:cf:f5:c5:58:f7:81:92:2c:85:b2:86:ca:5d:fd:96:4b:
         d4:2a:27:66:0e:ec:1c:d6:75:b8:3c:6a:0c:4a:4b:e4:18:3d:
         77:90:ef:f5:30:5a:81:b0:7d:3e:4f:1a:74:3c:74:08:fe:5d:
         4c:9f:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:53:07 2026 by rpki-client