Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          I4Sf/f8mYotn93IpHvxtyV7mUOoL43cXqpUe9bCs3Gs=
Subject key identifier:   C1:3C:C5:F3:5A:12:E6:C7:CF:2C:14:DB:BE:12:E2:41:B3:4E:A9:DE
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       01976A058C0A5BACE4567C95BD57DAD3C70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0DB2
Signing time:             Fri 13 Jun 2025 16:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:37 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: R3esxdQwGSleKTuGrmW//M49QcT3H56ECB0rgdqmME4=)
                          2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:8c:0a:5b:ac:e4:56:7c:95:bd:57:da:d3:c7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Jun 13 16:00:37 2025 GMT
            Not After : Jun 14 16:00:37 2025 GMT
        Subject: CN=c13cc5f35a12e6c7cf2c14dbbe12e241b34ea9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:a5:85:c6:83:e0:b6:03:bb:b9:77:e8:42:
                    2a:f1:11:90:57:11:03:57:1d:6b:c3:08:9e:f9:69:
                    99:39:6f:6c:16:9f:c9:48:05:f9:f7:05:e7:25:df:
                    76:9d:80:c5:0a:8e:fc:36:f9:a4:87:e9:3a:ad:f9:
                    04:21:6f:68:67:e6:63:ad:28:3c:de:92:a3:41:4d:
                    5b:a6:ff:d1:ac:13:28:22:6e:a3:fa:62:5e:1b:b5:
                    a2:0d:24:b0:a8:db:2e:96:51:f6:cd:d9:87:0c:c3:
                    42:eb:fa:55:a0:4b:3a:39:c5:64:e6:4a:7f:c6:46:
                    27:da:a9:e6:6c:d6:80:3a:c1:a9:88:ad:2b:6a:b3:
                    8a:ed:f5:54:ae:b5:5e:14:dd:58:b9:31:e5:8e:21:
                    bf:18:d7:b1:ca:6b:0f:1c:1c:db:f1:2b:5c:9d:d9:
                    95:d6:86:be:3f:92:46:5f:d1:00:4d:57:10:03:8b:
                    3f:7d:28:0b:36:80:7a:b3:96:7d:ac:29:04:59:80:
                    ba:de:47:63:3a:a3:7c:b3:6d:c8:99:b8:40:81:57:
                    08:a0:21:a6:3e:44:ed:02:b7:f8:c4:e1:a0:f8:fe:
                    b4:14:02:2c:00:ab:da:13:28:43:76:80:fe:f4:64:
                    e5:6b:97:2c:55:6e:10:34:6d:75:f2:05:53:cd:8a:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:C5:F3:5A:12:E6:C7:CF:2C:14:DB:BE:12:E2:41:B3:4E:A9:DE
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c3:cc:ca:ea:79:37:08:f4:fb:87:7c:24:03:56:7e:d7:57:
         4a:96:94:c7:45:66:0b:6d:e2:0b:66:cd:26:ce:14:2b:e1:b4:
         e0:84:9a:3e:e7:35:e8:43:5f:be:24:bb:55:4d:f4:ea:10:34:
         43:40:b9:80:1c:62:0e:71:fb:f4:36:55:5a:1a:9c:b9:4d:87:
         76:88:35:7f:35:2e:6a:26:7f:09:f2:b9:0d:c0:71:ce:70:5e:
         89:5d:08:d1:f9:61:1a:1c:d8:0e:53:92:31:dd:96:d4:d8:69:
         3c:0a:1b:bf:73:31:57:eb:d5:15:3b:32:b1:b8:75:3e:e7:62:
         b8:8c:ff:e3:20:fd:8c:72:92:ae:9d:de:8d:9d:27:95:54:36:
         af:f9:cd:94:a3:a1:e0:3d:fe:69:bb:79:5c:68:7c:23:09:7a:
         76:74:6a:a7:6c:75:ea:09:2c:68:ee:72:db:c0:d4:17:40:fa:
         82:71:2a:6f:ed:42:23:73:c8:e9:01:6c:48:dc:7b:06:7b:cb:
         d6:ae:4f:88:4d:31:e6:08:6e:eb:7f:a7:ba:b7:a0:82:d1:f6:
         b2:5c:87:96:69:7b:16:2f:46:6e:fe:2f:b1:61:1f:ea:ba:90:
         fa:d6:df:88:93:67:1d:84:b7:f9:5d:4d:b0:0f:09:75:2c:d8:
         bf:74:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:15 2025 by rpki-client