Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          KVwEMfDvOWXRX7Ok+EouRJaZqr7btb0J/80snaS/zaI=
Subject key identifier:   B9:B5:C6:F1:8C:A0:78:6A:E4:9F:00:33:24:D8:12:95:90:01:2B:E8
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       01975C80F65E377392C7508A7E0499BDAEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0ABE
Signing time:             Wed 11 Jun 2025 01:00:44 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:44 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:44 +0000
Files and hashes:         1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: ypFEgD7vkaEis/9aO7WZj1jHa3OdSLMsiiivpVh0H5E=)
                          2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
                          3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:80:f6:5e:37:73:92:c7:50:8a:7e:04:99:bd:ae:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Jun 11 01:00:44 2025 GMT
            Not After : Jun 12 01:00:44 2025 GMT
        Subject: CN=b9b5c6f18ca0786ae49f003324d8129590012be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:99:09:4a:92:36:d9:dd:18:60:39:20:0c:
                    e8:7f:cc:94:2c:17:a1:5f:06:f7:e2:a5:ae:00:95:
                    34:c7:d7:44:f9:54:1d:d5:55:dd:6e:16:46:f5:f9:
                    36:1c:0e:01:d2:75:eb:53:f3:65:13:de:3a:39:c7:
                    69:3e:85:df:3b:39:d3:cf:20:17:65:72:b5:0d:b5:
                    ff:d1:c9:94:b7:9d:a3:7e:12:66:00:41:c3:c4:7e:
                    92:93:1a:0d:d0:0b:6f:12:4c:2b:a6:45:4e:7f:3a:
                    b1:12:c2:ce:35:0b:27:44:19:76:9b:91:b3:e3:75:
                    40:97:93:cc:79:1e:fe:17:f6:6e:6b:ba:62:84:9e:
                    ee:b9:94:61:36:cd:8f:97:4a:8f:05:5e:3f:06:0e:
                    3f:b4:ca:53:70:67:f9:54:99:d5:49:32:52:3e:25:
                    01:39:38:41:48:49:63:e3:fb:0d:9c:db:d3:39:43:
                    12:3a:04:37:ec:f3:5b:3e:37:63:91:80:a8:3c:05:
                    a6:13:5f:2e:49:e2:d7:f6:ce:26:fb:7e:aa:7e:0f:
                    9b:55:2b:58:cd:43:eb:52:b2:f9:12:17:11:ba:a6:
                    fe:7a:56:3d:0c:b7:08:de:f0:1f:f6:06:28:db:ed:
                    f6:5c:65:80:5a:d7:90:c9:3d:c9:a0:53:f3:0c:b9:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:C6:F1:8C:A0:78:6A:E4:9F:00:33:24:D8:12:95:90:01:2B:E8
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:20:cd:ed:80:05:c3:ff:5e:46:89:4b:90:64:c4:75:59:8d:
         57:54:34:31:59:6f:de:06:0c:4b:b7:7a:16:d6:7e:cc:28:37:
         c4:30:e2:48:21:62:db:62:76:d0:da:3d:d6:78:85:88:06:bd:
         ba:f6:11:51:e1:80:a6:1a:85:6e:40:5f:e7:cb:5b:7f:92:f1:
         34:2a:4a:85:4d:b2:18:f0:da:48:e3:ee:9d:21:41:28:a5:ad:
         ce:b0:64:96:07:72:8c:95:77:b0:ec:64:ae:48:04:a5:51:a4:
         d7:c9:55:66:a3:99:b9:0a:73:d2:ba:22:c7:a5:2d:e7:65:d8:
         7a:cd:a9:fc:9c:21:22:60:70:60:7e:9a:ad:11:f4:b1:1a:ca:
         f1:06:51:c9:46:85:df:80:6a:b0:76:44:9d:e5:38:13:57:e7:
         1c:3e:68:c3:9a:65:49:f1:f3:17:32:1e:c8:3d:f6:6d:c8:54:
         92:2a:2d:ef:86:76:e5:0d:8a:4d:e2:0f:d2:66:7f:d8:a9:be:
         5e:c4:c4:89:29:a0:dd:00:02:66:18:70:63:cb:86:24:59:2c:
         7a:2b:5e:13:16:07:f9:42:c1:72:af:57:02:c9:73:3b:07:2b:
         05:13:d6:e8:7c:47:1c:ca:ce:e0:24:70:bf:d0:53:da:d8:39:
         2a:15:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:40 2025 by rpki-client