Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File:                     gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier:          zGSwkJ2sBGV40j0a9oUakasCTkz2FP9FMPmfwYlTOpQ=
Subject key identifier:   40:65:BA:19:2D:92:7F:B4:E4:66:E9:39:88:A9:D0:6E:CE:86:30:11
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer:       /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial:       0197B96A8B9A0FCBDD58E39E5D260B372624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number:          01D9
Signing time:             Sun 29 Jun 2025 02:00:56 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:56 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:56 +0000
Files and hashes:         1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
                          2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: ZZIxYC2nZ0bnapxA9Diboos9sx5FFbiR95GmHE/wleE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:8b:9a:0f:cb:dd:58:e3:9e:5d:26:0b:37:26:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
        Validity
            Not Before: Jun 29 02:00:56 2025 GMT
            Not After : Jun 30 02:00:56 2025 GMT
        Subject: CN=4065ba192d927fb4e466e93988a9d06ece863011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:db:93:94:18:5c:32:bd:fe:a9:65:3f:34:
                    87:85:12:76:74:07:ae:f0:a4:4e:15:f4:d1:84:ea:
                    58:65:8e:fb:11:1c:f5:fd:c6:db:37:0c:29:aa:6d:
                    f2:f8:d9:da:79:79:0b:20:5c:b2:9a:75:f3:31:92:
                    ab:ba:db:04:69:82:41:13:ff:e3:f8:f0:17:ef:c3:
                    64:c0:6a:bc:97:e4:a0:dc:98:ad:96:37:6d:40:b2:
                    cf:aa:87:fc:ee:f6:b3:2f:e8:a6:29:ee:c7:42:e3:
                    14:dc:d5:07:08:44:e9:34:bf:ec:c5:63:51:d4:f1:
                    e6:ec:53:0c:e1:77:bb:91:00:62:95:50:45:a2:ab:
                    a0:7c:99:d3:ab:1a:67:d7:99:4c:08:0f:62:74:0a:
                    ce:13:9a:12:fd:25:53:11:cd:d2:16:f4:ef:a6:df:
                    a1:58:9e:22:f4:00:61:1c:22:74:8d:a6:1e:14:47:
                    48:43:d8:4f:fd:a7:f4:1c:0d:a1:4d:23:ef:bf:5e:
                    dd:98:04:a6:ed:3e:c8:63:f0:6b:72:c0:57:44:0a:
                    55:7e:d9:1e:28:88:8e:e9:56:5f:dd:31:f0:89:bb:
                    3d:77:2a:8f:90:e1:cc:ec:ad:94:62:24:be:15:3b:
                    97:68:b1:84:99:b9:49:2f:ac:10:25:d0:f1:37:6a:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:65:BA:19:2D:92:7F:B4:E4:66:E9:39:88:A9:D0:6E:CE:86:30:11
            X509v3 Authority Key Identifier:
                keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6e:47:f1:90:55:76:c1:4b:08:13:c3:25:d8:31:4d:33:1d:
         56:4a:3c:1e:7b:51:c4:40:6b:89:c6:ea:71:a7:f2:0b:aa:16:
         f7:ed:4e:c6:21:a6:7f:b9:33:23:db:43:9d:94:a5:a4:57:4e:
         84:91:e0:fa:b6:fa:b9:14:f2:44:74:8a:da:b6:49:9a:41:47:
         17:4d:60:b6:99:f3:f5:e0:74:6d:0f:e2:8d:dc:94:04:dc:73:
         cd:eb:08:99:74:2b:e3:88:96:67:cd:44:f9:d4:af:64:c0:38:
         7e:68:5a:51:a8:a4:d4:80:62:d9:d1:78:a4:7d:a3:26:21:bc:
         45:3f:91:ac:a2:4d:f7:35:96:69:af:6b:87:6c:fd:dc:41:fb:
         9e:ed:ed:c5:06:7c:3f:55:42:6f:ed:8a:bb:c8:8e:82:0a:37:
         5d:23:d3:bd:3a:d0:3f:82:e6:91:92:98:23:f5:2b:f0:75:99:
         62:58:6a:2d:32:27:77:98:3e:f9:0d:ed:71:85:ee:b7:c9:04:
         5a:e5:42:32:1e:3a:1a:24:5a:fe:32:91:e4:03:16:15:84:ce:
         b2:5b:a7:ff:de:82:29:b3:14:55:dd:5a:b2:86:16:05:92:36:
         74:59:af:44:ef:d4:cc:e6:f8:0d:0a:97:db:aa:3a:27:e1:0c:
         4b:0f:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:51 2025 by rpki-client