Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File:                     gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier:          X2StMH7ytx6npF5rZiVQJw8c+tdafV5LL1j7draK0vA=
Subject key identifier:   74:F5:B9:57:1C:EE:F3:5A:02:37:5E:79:76:DC:B6:78:26:BF:5E:FA
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer:       /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial:       019749684A990834F40EBEF0D1A84248A80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number:          019F
Signing time:             Sat 07 Jun 2025 08:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:00 +0000
Files and hashes:         1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
                          2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: TEVjH2+QiuI8Axt+AHfl1n0zBhTIUqMzXOuRnTaLJ8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:4a:99:08:34:f4:0e:be:f0:d1:a8:42:48:a8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
        Validity
            Not Before: Jun  7 08:01:00 2025 GMT
            Not After : Jun  8 08:01:00 2025 GMT
        Subject: CN=74f5b9571ceef35a02375e7976dcb67826bf5efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:af:54:93:7f:95:c2:b0:0f:4e:39:0c:bb:
                    d4:7f:c4:e1:09:98:87:86:17:b3:97:9b:bb:bf:92:
                    1a:6f:26:c3:38:a4:52:f6:87:ae:3f:92:53:69:e3:
                    f1:35:7e:4c:49:18:53:30:a6:86:df:09:bb:0f:09:
                    eb:1f:0f:ca:f6:7c:fb:0a:bb:a5:fe:2a:10:1a:89:
                    95:ec:18:4d:78:7c:37:f0:ca:6f:82:21:6f:a3:1e:
                    61:49:66:62:91:fc:3c:58:31:1a:ed:cb:f4:7a:cc:
                    d2:65:aa:d0:6c:3d:01:cf:80:a5:d1:58:d8:5b:04:
                    f5:e0:96:1e:1b:2e:4c:85:a0:b8:8f:55:35:20:1e:
                    47:5b:d5:74:82:17:6c:1f:05:71:53:1e:c9:a4:21:
                    1f:57:99:83:3b:57:33:4c:53:c4:91:19:9f:19:b3:
                    cf:f0:f6:0b:66:f2:f8:cc:3d:b8:32:0b:d3:a5:78:
                    e1:d7:7d:dd:14:fd:67:5b:cc:8c:1a:6f:8c:25:96:
                    be:6b:7a:59:62:a8:cf:fb:f6:92:cb:61:0c:04:d2:
                    22:5a:e4:2e:2c:6d:54:c0:e1:72:18:b5:9e:b3:72:
                    79:74:99:d4:d8:d6:07:bc:a7:05:2f:6b:5a:29:9c:
                    34:25:02:15:12:4d:51:af:ce:88:fe:22:ce:15:97:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:B9:57:1C:EE:F3:5A:02:37:5E:79:76:DC:B6:78:26:BF:5E:FA
            X509v3 Authority Key Identifier:
                keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:10:3c:ce:b7:22:50:57:80:0c:e3:2b:06:fd:2e:db:13:f4:
         e8:2a:8c:12:6c:08:e7:3f:49:58:b9:0a:b6:79:a2:5e:56:db:
         bb:51:98:a2:f7:23:e9:8d:de:40:09:7d:73:1e:80:d8:33:75:
         b6:64:86:f2:34:08:76:04:5e:fa:bd:bf:39:14:47:e7:f7:d2:
         48:86:e1:75:cf:82:87:59:b5:d8:75:2d:7c:c7:83:69:7a:7e:
         2b:78:2c:50:50:33:20:7d:27:17:4d:16:fa:01:1e:d1:e1:9f:
         b4:49:a1:01:b6:12:44:b0:b1:76:e1:0c:3c:ed:c0:dd:41:28:
         2a:1b:09:2a:59:2b:fc:30:ab:e9:3e:88:cb:aa:bc:20:93:4a:
         58:95:9f:10:65:cf:94:7d:77:0f:bb:c3:23:9e:16:3e:ee:c0:
         5d:40:87:85:f0:4d:f7:4a:6b:52:0c:ff:97:02:2e:d6:0d:e3:
         fe:56:f9:fa:4d:39:1f:e4:c6:6d:cb:8f:ec:e6:25:a7:bb:0e:
         18:e9:3d:1e:83:a4:f0:23:2e:73:56:f6:a8:d5:88:72:19:76:
         13:d5:b9:b9:e8:1b:cf:71:15:e5:8c:cf:fb:ed:d9:ea:cb:01:
         32:29:d1:bf:37:80:ea:c7:a8:6c:20:f7:71:8d:c6:4b:f2:2d:
         9b:12:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:53 2025 by rpki-client