Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          P6jPPsNIe5CxKq8xCChJ9zq2FU9vUaR/+gnpTkwoD88=
Subject key identifier:   5F:C7:7E:7E:6F:47:CF:8A:A9:52:01:BC:F9:D5:4F:D4:7E:9F:FD:8C
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       019748FA16E92647773795EF76B742234F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 06:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:38 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: znl7SbkEm4p+xDx5KUAuug5vqxLUU4UT9phvaxwvG58=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:16:e9:26:47:77:37:95:ef:76:b7:42:23:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Jun  7 06:00:38 2025 GMT
            Not After : Jun  8 06:00:38 2025 GMT
        Subject: CN=5fc77e7e6f47cf8aa95201bcf9d54fd47e9ffd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:18:15:81:f7:46:da:8b:89:36:9e:81:fc:
                    11:28:d9:44:8c:bf:8f:5c:b1:b8:54:d5:ac:a6:60:
                    73:c4:1c:af:1b:7e:a9:b4:d2:1f:3b:2e:8a:cc:a0:
                    ed:a6:41:03:d9:3b:3e:79:9d:36:95:10:8d:c6:e0:
                    aa:ac:b5:d7:51:6b:61:4b:02:ad:a4:cd:44:5a:d3:
                    8e:48:24:d5:7e:93:15:aa:e5:8a:e0:b4:4c:1b:07:
                    68:10:d1:af:fb:17:87:e8:2e:0a:af:7d:93:76:39:
                    9d:dc:61:37:66:2e:e0:d8:3a:e8:8a:de:d6:34:10:
                    5a:fa:ff:e4:e4:63:3f:a3:8f:e0:cf:6e:e9:71:93:
                    f1:0e:61:77:ff:96:7b:33:a8:83:1f:42:b0:14:94:
                    89:ee:fd:5a:c0:1a:1e:a1:c0:4c:08:69:66:bf:56:
                    5e:00:cf:f4:21:59:4d:1a:2f:3b:57:e2:c4:63:a4:
                    26:d6:d3:6e:dc:54:0b:01:0a:2b:b9:91:6c:f5:4f:
                    23:fb:85:3e:8f:ef:af:8c:25:de:3c:90:8e:e8:6e:
                    26:38:fe:06:fa:a7:e2:57:88:86:8b:85:e6:05:4f:
                    c6:d9:e1:f5:93:a5:1d:cb:45:8b:49:24:23:14:76:
                    51:bf:40:29:b5:75:0c:a1:32:f2:40:1e:25:31:73:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:7E:7E:6F:47:CF:8A:A9:52:01:BC:F9:D5:4F:D4:7E:9F:FD:8C
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:b0:e9:dc:fa:41:10:aa:4c:fe:22:d3:e5:b9:ea:2a:bc:
         32:9c:da:5e:3a:03:cc:cb:a2:2f:19:8e:89:ab:c2:6e:d3:f6:
         f0:2f:40:5e:87:4e:d3:fe:c0:7a:38:b9:88:39:de:3e:4a:3d:
         b0:23:d9:0b:1d:fb:69:68:eb:3f:e4:43:5e:c2:c9:e1:1c:da:
         7f:ca:70:fe:82:19:89:2e:82:37:6e:ef:d4:c0:cb:49:b6:af:
         9f:67:5b:0a:ad:21:6e:08:0c:c7:fe:8e:7e:b4:6b:82:47:dc:
         cc:49:0a:86:18:67:2f:b5:d3:79:19:24:19:da:d1:be:5c:e0:
         bb:32:45:f5:af:09:90:9c:c6:87:69:46:51:08:e5:ca:09:0c:
         ea:52:2b:f0:88:6b:9e:88:29:43:bf:29:68:63:c9:8f:a4:59:
         be:3d:6e:8c:dd:ce:7b:a6:ed:cf:4f:09:6a:f4:0b:59:07:32:
         e1:e6:ff:f7:6f:57:fc:8c:41:ca:fe:8c:68:08:f2:71:40:92:
         cc:c4:9f:43:af:e0:94:c6:bf:36:10:6c:bb:f5:65:4a:22:d5:
         28:7a:f6:15:0e:9c:00:16:12:2e:e3:25:b7:77:00:14:c2:7f:
         36:a2:30:dc:44:16:18:e1:ef:04:e8:ab:29:4a:4b:6f:26:92:
         d5:e7:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:14:27 2025 by rpki-client