Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          G0fg4j+oNEXPNhVI1+1bumAY0NZEUZJKxfVfvkGcm2Y=
Subject key identifier:   20:37:9E:22:1B:75:AE:7C:B9:FE:59:F8:1F:A4:BA:E4:41:3F:80:B6
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       019E1FB58896E6707D41381F545AB446DC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 05:00:51 +0000
Manifest this update:     Wed 13 May 2026 05:00:51 +0000
Manifest next update:     Thu 14 May 2026 05:00:51 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: K281kaDCVFFRbJGo16juuOD3692LRlaUPOj1o5080bw=)
                          2: J6w8kCSUOVu4x3FnMkUHc1W5sqg.roa (hash: VngHqJ/oUhKVw9dv5QbYyRcEHNNlzn2oilRidIcUrHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:88:96:e6:70:7d:41:38:1f:54:5a:b4:46:dc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: May 13 05:00:51 2026 GMT
            Not After : May 14 05:00:51 2026 GMT
        Subject: CN=20379e221b75ae7cb9fe59f81fa4bae4413f80b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:da:a2:0d:b6:ee:89:98:b1:80:be:c6:f1:
                    36:9c:01:fc:b5:d2:75:cc:ab:a0:b3:cf:91:2b:f9:
                    7a:69:ed:4d:a4:51:65:12:0f:79:32:19:b6:38:c0:
                    29:ea:1e:76:c9:3a:a5:ff:42:8d:20:30:37:c9:40:
                    ad:15:37:94:64:ed:5b:73:89:6f:e6:46:1e:d6:76:
                    41:a3:30:9c:ad:34:5b:00:f4:89:7e:a4:b3:16:40:
                    86:ba:4d:2d:d6:a1:81:eb:e5:ba:98:92:a8:43:73:
                    7a:a0:dc:4b:c5:c2:c3:3d:67:5a:ef:45:be:9a:0f:
                    80:40:63:21:ae:89:10:93:28:8d:ac:41:b6:3a:9f:
                    6b:40:5c:c5:10:85:4a:f9:b2:a3:45:e0:6a:f2:99:
                    59:95:18:5d:1e:0c:2d:11:c0:7b:04:6b:78:34:db:
                    bd:ad:b9:b0:f6:2d:3c:8c:a6:64:52:a3:36:98:44:
                    14:0b:6a:23:2a:32:84:48:fd:ca:53:d0:a4:74:b3:
                    f4:09:c4:6e:8d:7f:6c:21:a1:60:4a:c5:e1:0a:e3:
                    7e:13:1c:36:f0:51:87:73:b1:34:50:b5:1e:a0:15:
                    c2:36:df:98:81:a3:32:fa:fa:16:b1:56:dd:d2:ee:
                    bc:25:af:dc:5f:92:ce:ac:c7:72:ea:6a:d1:12:88:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:37:9E:22:1B:75:AE:7C:B9:FE:59:F8:1F:A4:BA:E4:41:3F:80:B6
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:7a:41:d3:30:fb:39:cf:da:d6:4e:7d:c5:81:87:17:57:
         6c:a6:8a:d3:df:78:da:40:cc:9e:4d:9e:af:b3:65:e4:d0:bd:
         93:ad:51:ef:4b:7f:96:4b:13:0e:51:d9:45:52:a8:05:b2:ea:
         1a:35:bb:2c:bb:49:1c:59:1f:a9:8e:96:d3:c4:99:a1:31:02:
         0c:76:2c:b1:fb:ce:23:ab:cf:25:fd:c7:b5:d6:45:6f:c7:c8:
         ef:2e:b3:dd:20:fe:99:89:eb:54:d5:b4:ae:48:f3:3a:07:de:
         e4:ee:7c:3b:b8:d0:7c:fe:00:8b:dc:0d:fa:08:9f:f9:af:3f:
         f7:a2:93:92:72:89:93:c2:5d:23:78:a3:af:24:15:ba:28:47:
         88:1e:6b:bd:4a:d2:67:14:8d:13:0c:ce:79:e7:e9:c7:d3:01:
         a2:2a:a1:f3:e6:64:90:c9:32:23:3f:91:7c:d1:38:8b:db:88:
         01:2c:05:cd:97:2c:6a:82:99:ef:e2:a9:92:17:4d:a4:eb:d3:
         00:ec:aa:88:84:36:7b:6c:cd:e2:43:9b:8a:e9:14:56:6d:7e:
         24:2d:3a:8a:12:b5:32:a0:e6:5a:90:6a:33:d1:2b:32:57:c5:
         a5:f7:a8:44:e6:39:97:fd:88:b7:4b:df:69:1b:a9:14:05:55:
         3b:70:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:54 2026 by rpki-client