Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File:                     gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier:          nUhelIyPHGjeZyyUTxzX37eSMBScjkOylxWBxIPEAjM=
Subject key identifier:   BC:76:CE:09:33:DA:50:DA:E7:43:67:D4:B4:C8:2E:78:EF:4A:AD:F4
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer:       /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial:       0196ACFA6FA56BC4D1BC3829D1C42D7DEFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number:          014E
Signing time:             Wed 07 May 2025 23:00:15 +0000
Manifest this update:     Wed 07 May 2025 23:00:15 +0000
Manifest next update:     Thu 08 May 2025 23:00:15 +0000
Files and hashes:         1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
                          2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: 50PEw20SCoMNg1ifVl+sXMEg/awTcOclO6dZmEWGiPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:fa:6f:a5:6b:c4:d1:bc:38:29:d1:c4:2d:7d:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
        Validity
            Not Before: May  7 23:00:15 2025 GMT
            Not After : May  8 23:00:15 2025 GMT
        Subject: CN=bc76ce0933da50dae74367d4b4c82e78ef4aadf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:03:02:9c:9d:2f:2b:17:37:8a:53:2c:52:
                    41:65:eb:c6:21:f9:bf:92:12:a7:e1:95:01:03:42:
                    3b:49:b9:88:ad:97:be:9f:0d:36:48:5c:e9:0a:2b:
                    1a:5f:a0:ea:9f:92:0f:b9:9b:27:49:95:68:14:9e:
                    db:aa:8d:b1:c0:9f:ea:cc:04:61:f4:c9:ee:e1:1b:
                    45:5a:7b:b6:1d:59:ab:21:6e:1f:ee:65:bc:88:02:
                    f4:50:a2:35:dc:37:51:32:b1:e6:6d:c3:bb:51:9f:
                    2d:53:a0:ee:9f:4d:44:f2:54:83:e6:41:2e:65:6e:
                    a4:ad:2c:f3:81:86:4c:5d:55:66:65:7b:2d:38:d1:
                    fa:34:5a:03:2f:04:17:9e:21:23:71:09:ef:c3:39:
                    91:b4:ef:68:40:97:1c:d6:be:f8:d8:f4:d9:11:6f:
                    07:98:95:cb:55:71:70:3f:59:8d:8e:dc:67:fb:00:
                    35:66:92:07:10:08:ed:23:e2:2e:a9:a3:ce:94:e5:
                    6f:a5:6e:a0:8b:a3:c6:00:e6:3d:36:3b:c6:2c:24:
                    cf:9b:57:b6:3f:2a:57:c8:03:9e:f9:c4:6c:50:5d:
                    60:60:e1:80:25:f5:e5:79:ea:10:01:2d:db:57:68:
                    13:de:c3:6f:8c:29:c0:f1:9d:d6:34:9c:db:4d:8a:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:CE:09:33:DA:50:DA:E7:43:67:D4:B4:C8:2E:78:EF:4A:AD:F4
            X509v3 Authority Key Identifier:
                keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7b:d5:34:64:11:a0:9b:98:7e:f6:44:1b:3f:68:48:ce:44:
         fa:65:42:21:69:29:c4:e0:39:7b:3c:4e:ee:85:31:5e:a8:55:
         0e:81:a7:fd:92:4e:ed:aa:44:27:2a:19:f4:88:63:46:85:6b:
         48:6f:87:b4:7a:f6:f3:d6:51:8d:6a:9f:b3:20:25:ea:5a:b1:
         9a:38:4a:8f:83:01:a5:8f:58:54:20:e5:2e:b8:19:cf:e6:95:
         26:e1:fc:5f:8a:ca:7f:cb:d8:c5:c5:09:b6:3a:9a:a9:e8:72:
         95:96:a4:78:3f:51:6d:a5:e8:9d:c3:b0:6e:6b:19:40:f3:68:
         8f:ca:a4:d5:90:a3:4d:c5:5e:1e:c4:0f:f3:4e:6f:7c:09:d5:
         9f:eb:74:7d:ac:56:10:d5:5a:4e:88:1b:8f:7d:f6:73:da:f6:
         11:f0:a0:17:a2:86:07:5d:a4:c5:f7:5e:67:18:1d:a0:16:43:
         bf:aa:3d:20:72:28:a8:67:f5:1b:25:56:dd:81:62:c0:27:5e:
         01:ab:45:49:fd:30:83:fd:d1:c7:44:63:bd:31:77:d7:16:78:
         bf:a9:30:f0:81:82:ff:c7:af:54:00:6e:55:d8:80:f8:8a:07:
         2e:1d:f6:51:6f:51:6c:03:a1:2d:0a:5d:01:a8:16:d7:58:9a:
         ac:57:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:28:32 2025 by rpki-client