Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          L7Y2ImLLgMwLFUGH7hkFMKIbKZS463ZaAN2kX5PhmIE=
Subject key identifier:   04:D4:FD:AA:D7:98:AD:2D:45:EC:4C:B7:78:4E:39:C6:81:B3:2E:A9
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       0198744FFAA054064412332B3A867F14CF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 09:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:55 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: +yxBmSHzAXgrR1gyhfD9frWpGonE1qrC8UNTEj68FqA=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:fa:a0:54:06:44:12:33:2b:3a:86:7f:14:cf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Aug  4 09:00:55 2025 GMT
            Not After : Aug  5 09:00:55 2025 GMT
        Subject: CN=04d4fdaad798ad2d45ec4cb7784e39c681b32ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:ec:a0:ce:60:24:2c:70:24:4f:0d:d2:25:
                    5c:41:a5:e3:67:5c:a0:c5:ad:2a:dd:5e:9c:28:5f:
                    54:5d:99:25:ac:7b:0e:64:28:63:1d:44:de:4f:81:
                    6e:19:b3:a2:a1:18:30:11:97:57:52:87:eb:32:9e:
                    c6:b8:1e:65:dc:9e:75:9f:b1:87:ce:f6:01:be:08:
                    60:d9:8d:59:43:a7:d8:0e:97:3b:1a:e0:fc:3b:3d:
                    e8:df:1c:7a:ba:be:68:31:12:e6:1d:7f:be:d3:be:
                    2a:31:1e:bb:ee:eb:0c:6d:df:71:15:99:d6:f1:a4:
                    1f:f7:45:8b:5e:48:68:c4:2b:a4:3a:93:f8:c2:72:
                    0c:b7:bb:2e:b9:ac:2e:09:7e:70:64:1c:92:01:65:
                    8a:c5:f5:f8:af:01:f6:45:ef:8e:9d:a7:a6:f2:8d:
                    62:64:54:ec:1e:75:e3:da:9c:e7:67:8c:1c:6c:8f:
                    3b:72:6d:82:e6:1d:b8:f5:2b:08:66:5d:4c:9c:bd:
                    c5:91:b7:0e:4a:c2:f8:bd:5e:d5:b1:d1:0c:d8:0b:
                    df:2d:18:a0:14:ce:3d:91:3f:1e:b5:0d:49:38:c3:
                    e0:bf:10:c1:73:23:89:93:96:30:f8:e2:7a:23:3a:
                    25:22:fc:a1:df:e6:6e:2d:40:0a:9c:c4:75:ab:29:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D4:FD:AA:D7:98:AD:2D:45:EC:4C:B7:78:4E:39:C6:81:B3:2E:A9
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:03:44:54:6a:ed:9a:7d:ca:2a:92:3f:c4:76:2c:8c:7b:af:
         0c:f5:48:f3:ca:1d:fa:1b:e4:08:88:7c:d1:fb:8f:4f:87:e7:
         70:4e:38:34:1f:3b:98:81:e6:3a:fc:43:33:85:6e:f7:43:f1:
         fb:f9:63:a7:4e:09:5a:7c:58:dc:be:d0:7e:b2:77:ea:eb:aa:
         ec:17:11:1f:6e:ac:a1:f3:6a:bf:dc:5d:0d:ee:e8:03:6e:d8:
         4d:fb:7d:e5:ca:e3:ad:e4:f7:5c:d5:9d:f5:4c:5f:cf:4d:e6:
         36:b9:1c:aa:d6:f1:a0:1b:d0:52:d4:7e:c9:3e:c0:01:dc:f0:
         db:36:6a:51:2b:d9:3f:c6:1d:19:f2:ff:96:42:6e:37:81:2e:
         8d:a9:d0:d5:7b:21:85:69:f6:ed:eb:20:eb:72:55:3c:99:67:
         8b:11:62:a1:17:32:cb:a3:94:d0:d5:10:c3:db:2d:3e:99:f9:
         ef:e2:15:a8:71:3c:dd:a8:da:88:37:c3:11:af:55:68:da:5d:
         55:73:bd:83:3e:3d:c8:2a:f1:17:05:55:9a:1d:de:7a:a9:b7:
         00:50:68:18:d3:99:bf:9c:0c:ca:7c:53:60:32:11:51:0e:a4:
         f7:0e:f4:a0:9c:9d:43:dc:d5:9e:71:39:2c:ca:80:92:2f:b5:
         60:18:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:50 2025 by rpki-client