Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          QirP7tUBqWnjjEPEdwNgC/4Fcxw6eqj9m8YjedCb9AY=
Subject key identifier:   B7:30:E3:F4:81:3A:A8:2A:1E:5F:29:03:EE:A4:1B:84:7F:F5:5E:F7
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       0197B70E923109CA3AD14DC8142FC5DA3E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:14 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: RAEehwB1gl7438y1vu9riIh+CXvTZulZpLXCwymB/9k=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:92:31:09:ca:3a:d1:4d:c8:14:2f:c5:da:3e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Jun 28 15:01:14 2025 GMT
            Not After : Jun 29 15:01:14 2025 GMT
        Subject: CN=b730e3f4813aa82a1e5f2903eea41b847ff55ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:df:29:d8:37:f9:81:06:ba:08:df:02:9a:
                    51:15:b9:fb:ea:ab:4d:79:78:5a:5d:62:39:67:28:
                    a6:10:3a:f0:7a:76:33:6f:66:be:1f:6e:59:ff:e7:
                    bc:21:07:55:35:18:30:f9:1c:49:75:13:37:f9:f3:
                    f0:e3:c8:ae:40:aa:72:c7:b2:cd:f2:8b:58:54:2b:
                    4e:56:c2:51:be:c5:9f:2c:51:79:3e:35:2c:ea:48:
                    0f:d9:f1:d1:4c:47:42:9f:80:54:a6:8b:09:a4:90:
                    21:d7:2f:4e:d5:f8:f2:e8:48:28:8f:70:c1:98:67:
                    97:f6:74:b0:d9:5b:99:bc:32:26:a1:b8:4c:23:8a:
                    df:75:93:a4:d0:a6:8a:04:d0:60:02:4b:c6:6c:36:
                    50:30:2a:bb:0e:68:33:94:5f:5b:e7:57:2f:a3:cb:
                    0c:b0:f0:79:df:14:af:ae:f5:75:a1:78:ea:3b:da:
                    ff:cf:5c:e8:95:37:aa:d8:ae:45:18:77:39:92:e0:
                    ee:10:b5:9a:61:63:8b:8f:9d:a7:90:d8:d0:f0:14:
                    bf:10:18:fb:6e:e7:37:ea:69:89:07:e2:8a:e9:e1:
                    71:9f:a2:7e:f8:b0:96:1e:e4:b8:d7:59:79:eb:f0:
                    ce:a6:03:13:40:31:09:57:7b:c3:f9:29:14:d4:d4:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:30:E3:F4:81:3A:A8:2A:1E:5F:29:03:EE:A4:1B:84:7F:F5:5E:F7
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:69:86:bd:26:ba:30:83:39:cf:4b:5c:1b:1f:cb:24:6c:
         3f:f1:f4:f5:1b:63:07:6b:5b:f5:4a:d5:74:5c:e9:4f:54:0f:
         e7:a4:28:e1:34:1a:a1:78:ac:21:a1:6b:4f:85:a2:c7:bf:c0:
         eb:f2:a8:28:65:fb:ad:81:e8:59:69:fc:ce:f2:77:6d:d4:ab:
         38:56:98:5d:b0:6b:c3:06:1f:57:69:b3:b1:39:52:b9:ec:45:
         a4:45:25:59:11:8f:93:50:cc:97:df:d3:f0:7c:64:18:6a:41:
         ed:a4:21:85:f3:53:99:4c:de:ba:15:ca:ea:b1:a0:64:67:23:
         0a:57:9c:9f:60:8d:3b:f8:b1:1f:c4:c3:87:fe:3e:73:9a:b3:
         f8:0e:d2:70:17:7b:aa:b4:24:d8:dc:d0:e6:54:18:54:15:2a:
         c8:4c:6d:2e:6e:38:e5:ab:12:ba:ab:0d:c7:69:cb:47:5b:27:
         10:d1:2c:86:86:14:86:93:c3:b6:49:fd:64:ba:a2:da:a2:5f:
         9d:0a:b2:fe:3f:46:6d:d6:ed:9a:b3:99:c6:87:32:26:dd:96:
         99:53:21:f6:60:7c:3c:01:ca:72:8d:53:50:67:a8:65:21:5c:
         12:c9:57:f3:49:fd:04:21:1e:b7:18:98:4a:87:33:78:b4:82:
         8d:89:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:50 2025 by rpki-client