Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          DqqjfEH3SSjZJ+XItvDTMTPpw46gx/MYyRppTaLYJK0=
Subject key identifier:   B3:F7:D2:67:D2:8F:3E:F8:8E:3F:85:7A:41:29:A0:FD:86:80:5F:99
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       019845F652733F333961F6F731A54186E64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 09:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:27 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: FT3PV2zhGqNxLzAaWQfqNp9Rixpk69LOywgKv2/Km4I=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:52:73:3f:33:39:61:f6:f7:31:a5:41:86:e6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Jul 26 09:00:27 2025 GMT
            Not After : Jul 27 09:00:27 2025 GMT
        Subject: CN=b3f7d267d28f3ef88e3f857a4129a0fd86805f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:cf:7a:a3:f9:e1:6e:e9:fb:23:53:08:a8:
                    67:02:6e:23:be:f4:b8:4b:fe:f6:4c:10:b9:f2:7f:
                    4d:fd:94:d0:c4:ec:4f:33:73:33:1f:d6:3b:a8:6f:
                    59:eb:2c:41:2a:7f:aa:f2:bb:67:f4:75:32:3d:3d:
                    31:ad:56:15:49:18:05:b3:ae:ca:6b:89:fa:19:14:
                    24:f2:30:59:70:2f:98:30:64:53:b0:16:c9:18:c6:
                    6f:a9:b9:e2:a5:0b:6a:5c:ad:29:21:83:df:4c:3f:
                    86:bd:6b:2f:60:6e:b5:32:bc:e9:4f:b6:28:b7:f3:
                    d1:f8:c0:4c:3a:93:25:7d:82:29:0a:53:01:4e:b3:
                    5a:54:be:c7:bd:d8:8e:01:71:a6:78:89:b2:b0:ba:
                    f9:b9:de:76:d3:5d:15:c9:ee:56:32:20:5f:cb:fe:
                    bf:60:87:e0:99:10:e9:a1:0d:67:e1:67:98:34:00:
                    d5:64:ae:39:e7:67:e3:a2:a6:9b:1d:8b:55:e2:bc:
                    5f:42:3d:7d:4b:bd:b8:57:b2:5f:4f:ff:7f:4b:be:
                    18:24:59:ac:3c:3a:5e:c9:bb:f0:2a:94:ae:a2:16:
                    6c:c4:1f:c8:3b:09:b0:1e:8c:29:bb:c2:2b:5a:65:
                    48:6a:de:dd:5e:f4:65:02:8b:74:46:04:a4:fd:44:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F7:D2:67:D2:8F:3E:F8:8E:3F:85:7A:41:29:A0:FD:86:80:5F:99
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:20:17:23:30:c4:56:40:09:a4:06:1f:b2:e7:60:32:e9:
         19:6e:18:31:2f:54:15:89:68:56:cf:ad:8d:df:83:f3:fd:e5:
         fb:84:f3:e2:df:10:8d:89:57:05:29:00:b9:80:e1:74:52:9c:
         e4:b0:53:a2:12:3a:25:c3:0b:36:9e:a6:ed:96:34:d2:ad:86:
         04:83:01:4f:76:43:d0:0d:aa:80:14:b7:d0:4a:32:a5:cb:9e:
         4a:bb:95:0a:59:c6:22:a8:30:77:9d:2f:f2:fd:99:c9:fe:81:
         39:c5:a6:f5:e3:fb:dc:79:a1:c6:2d:dc:51:f7:10:62:49:c8:
         ed:df:99:c5:8d:74:53:0f:02:06:d8:45:b4:88:75:f4:86:6a:
         e6:f1:84:59:5d:0a:2d:06:7f:3d:a7:3e:69:13:29:c1:86:b2:
         61:5e:fb:c9:17:20:e2:6d:93:5a:bd:df:d0:b7:00:e4:44:c7:
         dc:ba:bc:4d:cf:b7:69:7f:98:4f:8e:3c:4e:96:78:2c:31:89:
         08:22:6f:ac:9b:01:67:6a:63:c0:9e:5e:62:ce:44:8f:33:ca:
         ca:8d:dd:d3:82:12:a5:d5:85:cb:b4:0e:00:a2:d2:4c:6a:af:
         c6:6d:ee:0a:d9:70:4b:48:b1:3a:a9:b8:32:4a:c2:6e:52:08:
         bf:83:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:09:21 2025 by rpki-client