Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File:                     05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier:          frIN9eFAyOgrniPP3rR4ZNZIe552OoUDbW6mPe5/rhQ=
Subject key identifier:   A9:AA:F7:2A:37:3F:98:83:DE:8E:4A:D8:2D:74:F4:08:3D:95:2C:83
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer:       /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial:       0199FC59098042D56F1E89AC154B1BE3AEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:57 +0000
Files and hashes:         1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: CH0MJ6GO4MhIhi2gEBzg4QK9hm1G187aX53MmK94SBc=)
                          2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:09:80:42:d5:6f:1e:89:ac:15:4b:1b:e3:ae:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
        Validity
            Not Before: Oct 19 12:01:57 2025 GMT
            Not After : Oct 20 12:01:57 2025 GMT
        Subject: CN=a9aaf72a373f9883de8e4ad82d74f4083d952c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:31:c6:d6:d4:97:16:f0:c3:31:86:e5:1b:
                    5f:6d:d5:95:47:cf:4e:92:31:4f:3e:da:5b:e4:34:
                    ed:1d:86:0b:e0:63:f3:37:5f:c2:7e:1e:df:21:6a:
                    92:79:5d:5c:a4:29:41:a0:a6:00:d2:02:5f:8c:fa:
                    13:ee:30:e0:1f:be:07:8e:21:51:95:a1:7e:34:ee:
                    d0:80:d7:0b:ad:f7:54:23:a9:a2:e6:0b:a8:04:5f:
                    3b:e8:1a:e1:96:fb:15:97:83:33:d1:0a:d1:1f:f8:
                    af:53:74:54:3d:57:1e:95:f7:b8:38:ac:f3:f6:6f:
                    85:d7:cd:92:b0:80:f9:f5:c1:02:66:c0:05:5c:02:
                    59:73:0b:f8:4f:b0:dd:89:7e:0d:9c:2f:a5:ff:d6:
                    0a:d7:e2:0b:a9:41:c4:71:d0:fd:ac:e2:7e:77:1b:
                    ae:6d:10:ec:22:7d:fc:46:7a:4f:a2:53:5b:ea:c4:
                    6c:c2:bd:c8:fa:4c:18:11:0d:af:3c:04:5b:3c:a9:
                    1b:8b:39:ae:aa:59:19:9a:ab:00:64:e5:81:2a:7e:
                    c3:a6:9f:b7:bb:45:3d:f3:96:15:f0:19:67:c7:73:
                    a4:1b:af:0d:2e:e2:38:4b:0a:87:a5:fd:ed:f1:73:
                    bf:fe:da:d1:f5:83:b6:b3:da:be:37:cc:f4:08:a1:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AA:F7:2A:37:3F:98:83:DE:8E:4A:D8:2D:74:F4:08:3D:95:2C:83
            X509v3 Authority Key Identifier:
                keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:07:6a:d3:10:9a:88:a3:5b:95:d3:28:48:ba:4c:fb:df:7c:
         90:dc:5c:fc:36:ff:5e:96:91:30:bf:4c:43:bf:fe:55:d0:41:
         92:c7:39:bc:57:73:15:27:77:17:4f:44:77:42:84:92:aa:c1:
         54:5e:30:da:1a:d2:82:33:51:7e:b6:01:8a:63:ce:df:7b:7a:
         14:a1:32:05:70:c1:a9:bd:78:37:e6:54:2e:54:44:2c:13:92:
         0a:6c:11:c5:21:07:ce:ee:c6:0b:75:c2:8e:74:61:c3:ef:78:
         a7:a6:d2:3b:db:64:45:99:cf:4f:41:3a:66:6b:c7:8e:78:d8:
         2d:6e:f7:6c:87:65:8e:b6:9c:af:32:01:d1:ea:1c:56:cb:c4:
         1f:a9:ba:00:2b:3b:8f:6c:6f:2f:30:f9:16:28:5a:9f:fa:30:
         99:0b:aa:62:ed:33:43:ad:a3:c9:49:f5:87:5e:07:81:ca:33:
         cd:e1:df:ca:1b:af:db:30:74:cb:e5:f5:0d:d2:39:03:ce:2b:
         a2:0f:17:72:f3:75:5d:ff:f7:03:37:31:c9:d7:44:e1:3b:ca:
         02:fa:07:e9:33:bd:ca:b3:6b:82:3b:cd:93:fe:a4:68:24:66:
         e6:df:07:8f:61:d3:7c:1b:a1:d4:89:3b:43:78:84:0c:72:0c:
         7d:83:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:21 2025 by rpki-client