Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File:                     gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier:          XIb/7+ihbHTNO85zonnFbs2S05h5EFm9z4UAZvfx1zs=
Subject key identifier:   E6:33:6D:35:EA:A6:09:78:97:08:9E:4F:80:82:11:C0:11:93:90:F0
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer:       /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial:       019844760EF631DEF98839D66B05CEE0AA86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number:          0221
Signing time:             Sat 26 Jul 2025 02:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 02:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 02:00:44 +0000
Files and hashes:         1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
                          2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: IAwxCn942zrNJnzECHKZooTjdYeZ/Orh7L8qwPE+LJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:76:0e:f6:31:de:f9:88:39:d6:6b:05:ce:e0:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
        Validity
            Not Before: Jul 26 02:00:44 2025 GMT
            Not After : Jul 27 02:00:44 2025 GMT
        Subject: CN=e6336d35eaa6097897089e4f808211c0119390f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:de:5d:37:f8:a4:55:cc:07:dc:33:a7:e4:
                    65:57:d8:21:9a:f1:90:76:81:c7:7b:4d:c6:ad:59:
                    bd:5b:d2:c2:2f:72:26:e1:77:67:e4:69:34:ff:34:
                    94:70:eb:d2:a9:2c:7c:3c:72:c3:80:26:c3:29:ae:
                    13:36:ec:e1:0d:39:39:07:79:a4:c7:2f:3f:0c:5a:
                    91:b2:02:5f:7c:82:26:d8:78:1a:57:eb:a8:10:08:
                    4d:f9:bf:65:81:56:73:e7:31:cd:32:78:67:41:53:
                    c8:7c:25:f7:60:56:c1:d7:96:bd:c0:73:29:93:2c:
                    fc:17:c9:e2:74:eb:76:0e:df:bf:be:bf:4f:c6:b1:
                    51:2c:82:84:a3:87:8f:54:2f:44:5a:5b:86:75:38:
                    3b:de:99:1b:52:f6:9f:48:92:5e:a8:1f:3a:9e:e4:
                    ba:b5:a6:49:24:9c:7c:cf:f9:88:89:41:95:48:1b:
                    b0:38:14:69:ea:26:68:ec:42:01:be:1e:20:6d:17:
                    7b:76:fd:08:bf:4c:6b:54:4e:4d:6b:77:7c:dc:93:
                    ba:17:17:91:bc:a8:7a:e6:38:71:47:a2:9f:e5:d5:
                    09:31:7d:de:fe:4c:53:9b:6d:31:67:01:5b:16:74:
                    62:76:06:66:71:1c:52:d9:81:e4:16:f2:53:28:61:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:33:6D:35:EA:A6:09:78:97:08:9E:4F:80:82:11:C0:11:93:90:F0
            X509v3 Authority Key Identifier:
                keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e2:c7:54:0b:09:7d:aa:ff:23:b3:8a:f2:46:f8:8d:8f:3a:
         e8:e6:46:70:f3:13:fa:53:7f:63:d9:8a:57:a0:ec:78:77:65:
         02:06:0f:c7:c5:0c:8c:aa:70:2d:06:cb:38:20:33:ee:2f:48:
         46:ac:2e:b3:07:d8:49:de:ad:d8:aa:b4:fd:81:17:2c:29:fa:
         84:b3:cd:e4:a7:c4:d9:bd:f6:0f:bd:ef:96:2a:a3:64:d5:0a:
         59:42:77:8f:d7:c7:67:57:c6:28:a4:bc:eb:95:6a:48:77:c3:
         59:4b:c3:a3:03:d7:cf:39:aa:e0:07:01:3b:52:5a:81:2c:ab:
         23:42:bf:90:73:64:0b:85:5e:89:7d:8c:17:c7:61:ec:eb:bd:
         d4:b5:fc:18:29:00:db:f4:e2:ff:ff:d3:62:79:7d:d3:b2:40:
         fa:19:d7:b1:54:db:2b:e5:25:79:a4:97:d8:a9:81:79:db:74:
         e8:09:b6:d6:87:cc:0f:a1:dd:29:d2:13:7f:2a:73:b4:ae:5d:
         f5:37:eb:2b:6c:93:25:49:c5:75:a4:47:a6:77:a8:94:18:af:
         75:00:2a:09:33:59:89:48:f8:31:ee:ea:37:76:78:1b:a2:19:
         9b:0d:08:e1:1e:63:f9:00:17:9b:d1:9c:d2:60:d6:fb:8a:0b:
         fb:95:84:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdg72Md75iDnWawXO4KqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNDA0YzA0YzZjMjdkMzI5ZjljODdhMDJhZjA2ZGQ5ODZl
ZTc2N2IwHhcNMjUwNzI2MDIwMDQ0WhcNMjUwNzI3MDIwMDQ0WjAzMTEwLwYDVQQD
EyhlNjMzNmQzNWVhYTYwOTc4OTcwODllNGY4MDgyMTFjMDExOTM5MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11veXTf4pFXMB9wzp+RlV9ghmvGQ
doHHe03GrVm9W9LCL3Im4Xdn5Gk0/zSUcOvSqSx8PHLDgCbDKa4TNuzhDTk5B3mk
xy8/DFqRsgJffIIm2HgaV+uoEAhN+b9lgVZz5zHNMnhnQVPIfCX3YFbB15a9wHMp
kyz8F8nidOt2Dt+/vr9PxrFRLIKEo4ePVC9EWluGdTg73pkbUvafSJJeqB86nuS6
taZJJJx8z/mIiUGVSBuwOBRp6iZo7EIBvh4gbRd7dv0Iv0xrVE5Na3d83JO6FxeR
vKh65jhxR6Kf5dUJMX3e/kxTm20xZwFbFnRidgZmcRxS2YHkFvJTKGEQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYzbTXqpgl4lwieT4CCEcARk5DwMB8GA1UdIwQY
MBaAFIFATATGwn0yn5yHoCrwbdmG7nZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2Yjct
ZjQ2OGVlMzMxNDc0LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2YjctZjQ2OGVlMzMxNDc0
LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+LHVAsJ
far/I7OK8kb4jY866OZGcPMT+lN/Y9mKV6DseHdlAgYPx8UMjKpwLQbLOCAz7i9I
RqwuswfYSd6t2Kq0/YEXLCn6hLPN5KfE2b32D73vliqjZNUKWUJ3j9fHZ1fGKKS8
65VqSHfDWUvDowPXzzmq4AcBO1JagSyrI0K/kHNkC4VeiX2MF8dh7Ou91LX8GCkA
2/Ti///TYnl907JA+hnXsVTbK+UleaSX2KmBedt06Am21ofMD6HdKdITfypztK5d
9TfrK2yTJUnFdaRHpneolBivdQAqCTNZiUj4Me7qN3Z4G6IZmw0I4R5j+QAXm9Gc
0mDW+4oL+5WErg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:43:00 2025 by rpki-client