Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          T7eZtYyGG6reuUErzVC9A2ihEyuIvbFjVXkPDufAWBY=
Subject key identifier:   D7:02:DC:9A:74:4E:00:89:03:36:3E:0C:E3:9B:1A:EE:31:79:AA:EC
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       0197718850BDD56ADAF5EF54EA02464B6434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          1590
Signing time:             Sun 15 Jun 2025 03:00:48 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:48 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:48 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: IUnIxVR565X/g4/rE/iEsKMA+xCsQc1UvJOq8bm+pFQ=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:50:bd:d5:6a:da:f5:ef:54:ea:02:46:4b:64:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Jun 15 03:00:48 2025 GMT
            Not After : Jun 16 03:00:48 2025 GMT
        Subject: CN=d702dc9a744e008903363e0ce39b1aee3179aaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:e9:25:b5:01:2d:77:aa:76:6a:ff:1b:55:
                    87:38:08:e0:45:48:8c:4c:bd:f2:8c:de:bd:a9:45:
                    5b:21:87:37:30:2e:92:a0:a0:a3:1f:46:58:4e:6b:
                    50:70:30:1d:eb:cc:50:b9:38:b6:fc:87:eb:54:e1:
                    8a:78:db:41:4e:85:c5:b2:eb:60:b8:81:32:f4:0d:
                    ba:54:d7:30:b7:09:b2:10:63:0f:3e:b0:5d:f9:85:
                    9a:49:df:2a:1e:bf:d6:7b:a8:ab:02:a2:f4:cf:25:
                    e3:b2:8a:11:b0:6e:8f:f0:02:f1:00:60:72:0c:d5:
                    1a:09:5a:1d:bd:ac:93:96:54:53:fb:d6:80:6a:40:
                    02:db:e4:ee:b6:9f:6a:19:ea:10:eb:a9:25:73:e8:
                    9c:46:a1:3b:56:29:a1:d8:a6:29:6e:7f:b6:3d:94:
                    e5:25:2f:24:a7:00:28:08:c2:e2:26:c6:e2:0a:66:
                    77:80:c2:36:5e:52:65:84:fb:b4:f6:09:29:6d:6e:
                    07:ef:33:b2:de:14:50:ae:5c:34:50:db:fe:87:8c:
                    17:c6:04:6f:f5:0c:d7:74:1e:42:08:12:70:ea:c6:
                    47:67:c4:63:c8:64:ce:06:2a:29:7e:f2:cf:f1:f4:
                    9d:8b:b5:42:26:8a:0d:a1:0b:b1:02:3a:9c:a3:d7:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:DC:9A:74:4E:00:89:03:36:3E:0C:E3:9B:1A:EE:31:79:AA:EC
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:41:c4:8e:cf:4f:e3:68:79:c0:b4:13:10:f2:90:b8:25:6b:
         ad:a6:af:3d:4e:0a:62:eb:d6:cd:e0:c2:ee:ff:4e:26:3c:00:
         74:97:6f:77:9a:d2:da:ed:ef:40:c7:64:82:27:e6:f2:18:08:
         ec:07:e9:9b:14:20:5c:6b:bd:8f:95:b4:db:37:e4:38:18:b3:
         71:c6:84:a9:8d:ec:dd:96:3e:e6:20:c2:f6:54:93:26:27:8d:
         e1:38:c7:b4:5b:89:8e:4a:2b:02:08:33:59:7c:ba:92:3f:13:
         2a:a4:7c:32:0b:65:57:2e:cc:ee:fd:81:99:d1:7f:90:f9:9a:
         d0:33:5c:eb:0f:b5:0a:b5:35:b4:5f:6e:16:ce:d5:c8:2c:f9:
         7c:dc:7c:7c:80:82:45:53:46:d1:74:17:13:0a:91:15:03:fc:
         41:46:9c:6e:ac:31:7f:c4:81:3d:c4:fa:07:19:dc:68:19:ac:
         10:11:30:54:99:bc:b7:f3:ce:78:01:26:69:96:f1:7b:1f:6e:
         81:8d:33:8b:53:fe:a9:e8:3d:11:e2:92:b2:84:ad:c3:c8:df:
         4d:38:f5:59:6c:a9:9f:35:a7:03:76:7e:29:4a:ae:a9:0d:2d:
         c6:1f:04:23:ab:b0:2c:58:49:7c:c0:fe:24:8f:60:b5:6c:56:
         1d:e4:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:00 2025 by rpki-client