Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          xh8UYyJ41e2D9y6ls4WJjHvpjYDf7I9pbUW1WtpoWwY=
Subject key identifier:   C5:64:E5:C2:5D:0C:17:32:0F:03:6C:C9:CA:8C:BC:85:88:0C:F1:1D
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       01987298EE6E80B994E99C08448016E63ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          0E3B
Signing time:             Mon 04 Aug 2025 01:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:21 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: wXif5Z5jT73nblQgmxZv3B8phsA3GTS75MJ26V/KRWc=)
                          2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:ee:6e:80:b9:94:e9:9c:08:44:80:16:e6:3e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Aug  4 01:01:21 2025 GMT
            Not After : Aug  5 01:01:21 2025 GMT
        Subject: CN=c564e5c25d0c17320f036cc9ca8cbc85880cf11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:6a:9d:e2:0d:9d:3d:77:00:3b:80:32:cf:
                    67:af:6a:8c:97:ce:f4:4a:53:c4:5b:9e:4b:31:99:
                    09:dd:7a:5e:52:65:26:42:24:ae:4f:a5:70:73:de:
                    39:43:72:2a:f2:9d:c3:61:1e:5d:57:23:55:96:97:
                    b1:b6:ad:12:b8:1d:4c:f4:20:9e:89:83:62:d1:49:
                    b5:54:b4:6c:09:b5:36:90:9b:92:61:4a:83:95:9b:
                    f5:06:9f:bf:05:04:5f:f1:06:25:6f:39:ab:b5:7c:
                    64:d2:5b:e1:54:96:f9:a4:fd:bd:06:05:55:f9:e4:
                    27:98:b0:42:39:a7:14:54:e3:3a:58:71:a2:80:68:
                    21:59:c1:45:5d:08:db:f3:f6:68:59:c3:27:ca:be:
                    1e:1d:34:57:13:9e:65:66:85:7d:08:83:bd:06:9b:
                    ad:27:a0:d6:9e:06:bc:7d:77:9c:ff:15:b8:2b:80:
                    7b:7f:52:27:45:72:92:09:5c:7b:80:5c:a3:7a:00:
                    0d:69:92:0f:1f:f1:d3:10:27:8a:e6:94:d8:c8:97:
                    8e:6a:8f:d8:3e:71:b9:e4:87:72:98:99:bb:b1:91:
                    9a:77:f7:e2:f3:dc:86:bd:f6:c7:56:07:2f:5b:84:
                    60:f2:af:66:c6:bd:4e:69:82:86:2a:11:28:d3:9e:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:E5:C2:5D:0C:17:32:0F:03:6C:C9:CA:8C:BC:85:88:0C:F1:1D
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:bf:69:5c:96:67:8a:e9:e6:b8:3d:b5:08:83:a7:35:5a:
         da:a5:4a:5f:08:b4:6f:3d:79:c5:88:48:2f:d7:29:ad:28:ac:
         0f:d3:33:e5:52:37:36:2f:a3:49:2a:70:7a:b2:0e:5a:8d:33:
         a5:8c:99:22:20:87:5e:f1:ea:2d:22:1f:5c:4d:8f:61:e8:7d:
         b4:da:bd:1b:5d:55:b4:32:51:f0:17:f9:9c:a6:25:f6:69:75:
         f5:96:36:e1:c2:4c:d4:55:bd:dd:02:42:9b:f0:cd:9c:e1:e1:
         5b:7a:23:8e:ac:6c:15:24:7d:ef:cd:46:c2:5e:6f:28:23:8f:
         75:d6:d4:14:cd:f7:4c:ff:03:8c:32:9a:11:b2:20:e7:66:c0:
         bc:fe:e2:60:cd:92:bc:cf:b3:1a:ff:f8:f9:4c:7e:c2:d5:5a:
         e9:0b:cf:87:44:a6:dd:43:8d:a0:2d:72:03:41:01:cc:54:55:
         d9:8e:f6:36:65:ee:52:57:e6:b1:0e:40:64:36:9b:a9:05:94:
         5c:9b:79:f2:2d:da:26:3c:27:de:16:46:b7:ef:7a:22:b0:15:
         27:e2:d9:f5:e3:40:3f:53:0f:20:23:28:ee:fd:37:ea:ea:2e:
         32:05:15:02:0a:89:a4:64:20:e2:93:50:bc:ba:4f:8c:64:7d:
         bb:38:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:45 2025 by rpki-client