Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          64+VAna6/tU8tZ2Bfj5Lk4JiV4zUCv+AWbs2loc1+CQ=
Subject key identifier:   EB:EE:9C:DE:5B:12:E8:C0:50:2B:CA:91:77:76:C6:75:32:65:A2:58
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       01A000935ED769F4001FE3FB4B660BCC1FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 14:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:53 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: 18IlGdtOERFLvSoZETMzI1FnG2UhYKO0LQSOe1mKSDc=)
                          2: J6w8kCSUOVu4x3FnMkUHc1W5sqg.roa (hash: VngHqJ/oUhKVw9dv5QbYyRcEHNNlzn2oilRidIcUrHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:5e:d7:69:f4:00:1f:e3:fb:4b:66:0b:cc:1f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Aug 14 14:00:53 2026 GMT
            Not After : Aug 15 14:00:53 2026 GMT
        Subject: CN=ebee9cde5b12e8c0502bca917776c6753265a258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:65:d3:48:9c:69:92:b7:a5:c0:54:b4:b7:
                    e0:e0:ad:c4:53:ff:d6:21:ee:3e:43:53:bb:9b:c3:
                    43:c4:39:58:b3:9a:2f:39:79:06:4f:0e:eb:dc:4e:
                    31:6f:8c:a5:e6:b8:8e:01:16:c7:fe:e2:f3:7a:8e:
                    18:ee:1f:f6:b9:41:af:0f:01:0a:11:b4:9a:ad:4e:
                    33:1a:8d:23:b2:31:bf:64:b6:15:15:32:2d:09:9c:
                    25:c6:24:da:49:91:f6:d3:d4:5f:cd:db:69:56:f7:
                    7b:93:93:58:87:80:59:e1:07:45:b7:27:98:e1:1b:
                    6d:26:1c:bf:d5:77:15:9a:68:78:0a:83:f8:75:bd:
                    5d:07:43:a3:62:34:b1:b5:ec:49:0b:8d:77:f9:41:
                    af:82:30:e8:0c:42:9a:53:ee:a5:11:92:30:73:7c:
                    30:ae:1e:c4:25:fb:2d:13:c3:ce:0c:91:61:be:af:
                    7e:91:a0:0d:72:9b:93:24:af:70:87:e0:9d:7f:2a:
                    1f:23:12:b0:42:0a:99:74:2e:2a:a4:d8:25:e0:b6:
                    cf:dd:92:26:1c:5b:56:d1:85:b9:8a:5e:60:9f:b8:
                    40:aa:c9:cc:ef:7b:85:32:1f:63:d9:42:00:51:40:
                    b8:b9:ba:72:10:1f:69:4a:7a:b8:0b:89:5d:63:e8:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EE:9C:DE:5B:12:E8:C0:50:2B:CA:91:77:76:C6:75:32:65:A2:58
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c8:0e:e6:38:29:a8:84:d9:79:56:ef:40:fd:5c:98:b1:98:
         0a:8a:35:d7:b2:0a:ce:c1:80:56:fa:4b:71:c7:f0:8b:06:ca:
         9c:84:98:01:c3:01:dc:e0:8b:cd:17:14:ad:93:c5:a6:c7:51:
         48:26:f2:fd:2e:83:58:a1:90:66:0e:83:78:d2:ba:d9:d1:07:
         2f:44:0c:5b:fc:4d:db:40:bc:0f:87:f3:e1:1b:8c:c1:93:3b:
         60:96:b0:e5:88:35:04:a5:91:de:5a:f1:74:06:40:91:8a:4a:
         e8:92:68:d5:46:81:5c:fa:e9:5a:a0:f7:d8:66:a1:c7:4b:10:
         9b:54:8f:fe:ff:7d:c3:b2:1f:39:3c:78:2c:0f:6e:6f:60:f1:
         07:dc:32:88:dc:34:5b:b9:42:c0:a1:1b:de:6a:99:fb:db:58:
         7c:d8:55:18:ea:ea:c0:a1:f6:ec:c0:54:c0:20:21:c8:65:65:
         08:22:ab:e0:5a:4f:df:15:d0:a9:0d:66:86:23:2f:e1:e6:88:
         03:a7:61:c5:72:85:f2:7a:92:c2:df:ec:2b:d2:a1:ec:83:06:
         11:7e:f6:06:f0:9d:6c:3a:74:43:f7:09:63:50:9a:c6:82:c4:
         ea:f6:fa:e4:fe:fe:ab:d0:9f:d5:e4:b3:e1:25:15:a5:4c:3f:
         5d:ef:ea:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk17XafQAH+P7S2YLzB+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTJmOGZjOTg2ZTlmMWQzZTRiZjA1ZmNhOTY1OWEwODgx
ZDcwMDMwHhcNMjYwODE0MTQwMDUzWhcNMjYwODE1MTQwMDUzWjAzMTEwLwYDVQQD
EyhlYmVlOWNkZTViMTJlOGMwNTAyYmNhOTE3Nzc2YzY3NTMyNjVhMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZtl00icaZK3pcBUtLfg4K3EU//W
Ie4+Q1O7m8NDxDlYs5ovOXkGTw7r3E4xb4yl5riOARbH/uLzeo4Y7h/2uUGvDwEK
EbSarU4zGo0jsjG/ZLYVFTItCZwlxiTaSZH209RfzdtpVvd7k5NYh4BZ4QdFtyeY
4RttJhy/1XcVmmh4CoP4db1dB0OjYjSxtexJC413+UGvgjDoDEKaU+6lEZIwc3ww
rh7EJfstE8PODJFhvq9+kaANcpuTJK9wh+CdfyofIxKwQgqZdC4qpNgl4LbP3ZIm
HFtW0YW5il5gn7hAqsnM73uFMh9j2UIAUUC4ubpyEB9pSnq4C4ldY+jskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvunN5bEujAUCvKkXd2xnUyZaJYMB8GA1UdIwQY
MBaAFNOS+PyYbp8dPkvwX8qWWaCIHXADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTkt
MWJiNzE2NDI3Y2E5LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTktMWJiNzE2NDI3Y2E5
LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8gO5jgp
qITZeVbvQP1cmLGYCoo117IKzsGAVvpLccfwiwbKnISYAcMB3OCLzRcUrZPFpsdR
SCby/S6DWKGQZg6DeNK62dEHL0QMW/xN20C8D4fz4RuMwZM7YJaw5Yg1BKWR3lrx
dAZAkYpK6JJo1UaBXPrpWqD32Gahx0sQm1SP/v99w7IfOTx4LA9ub2DxB9wyiNw0
W7lCwKEb3mqZ+9tYfNhVGOrqwKH27MBUwCAhyGVlCCKr4FpP3xXQqQ1mhiMv4eaI
A6dhxXKF8nqSwt/sK9Kh7IMGEX72BvCdbDp0Q/cJY1CaxoLE6vb65P7+q9Cf1eSz
4SUVpUw/Xe/qPg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:04 2026 by rpki-client