Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File:                     K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier:          7EKHOEKWdkYCUBAnNpmXYl4+PChXysJ0Jw2bQ6hggm0=
Subject key identifier:   93:BB:F5:CE:C1:E2:8E:99:A1:3A:ED:D9:63:8F:88:DC:51:D0:72:2D
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer:       /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial:       0197B74589CB6365A8592FFFFD3533B18A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number:          0560
Signing time:             Sat 28 Jun 2025 16:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:17 +0000
Files and hashes:         1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: FydZx9Le9+Jot2BXiHt0xQlRdh8Y6iCkIk09yIklGtY=)
                          2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:89:cb:63:65:a8:59:2f:ff:fd:35:33:b1:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
        Validity
            Not Before: Jun 28 16:01:17 2025 GMT
            Not After : Jun 29 16:01:17 2025 GMT
        Subject: CN=93bbf5cec1e28e99a13aedd9638f88dc51d0722d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:29:18:64:60:7b:f8:bc:dc:5e:2e:17:80:
                    88:af:28:df:64:50:7f:9f:da:ca:5a:14:d1:d2:53:
                    83:10:48:e1:7f:e4:6c:c6:4d:3d:81:28:56:5a:22:
                    76:d5:56:4d:52:8a:f3:d2:3a:34:e1:4f:b5:d9:a9:
                    45:38:da:b8:b0:15:5e:e7:1a:a6:33:b7:b7:90:76:
                    f0:c2:81:c9:1c:ef:d7:63:29:22:0f:de:66:47:20:
                    ea:f4:a6:d5:9b:27:d5:aa:dc:18:96:a3:e1:bc:81:
                    66:f8:cc:1c:fd:3f:4c:d2:7e:65:bc:03:7b:4a:7c:
                    e3:c9:52:9d:0f:87:38:b7:56:6c:44:06:4e:bf:5b:
                    bb:a3:91:20:d9:6f:31:be:76:63:3e:9f:d0:dd:9b:
                    43:bd:e2:85:ae:d4:08:b0:4f:f7:3a:55:14:bc:b6:
                    43:2d:34:14:17:70:5e:1b:6d:02:6a:10:63:4f:d2:
                    db:9e:8c:78:db:01:ca:4e:c8:ee:5b:a7:61:6d:57:
                    f5:ad:93:82:98:de:ab:b7:10:cf:36:d6:15:be:ca:
                    d6:46:2b:a6:a7:54:5d:62:17:b0:eb:f5:6b:88:0c:
                    74:9d:cf:57:8c:e2:a8:e3:17:93:21:6d:d0:fd:dd:
                    1e:ea:c2:a8:0e:c4:7c:01:3b:e0:75:ed:b4:08:2c:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:F5:CE:C1:E2:8E:99:A1:3A:ED:D9:63:8F:88:DC:51:D0:72:2D
            X509v3 Authority Key Identifier:
                keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:53:9f:e1:96:20:c8:2a:64:69:70:de:08:8c:ec:bc:6e:
         b7:c8:f0:27:6e:89:87:c3:1b:83:59:08:b8:ac:5e:44:d1:f5:
         41:dd:c9:16:ff:59:85:f2:5e:8a:6c:3b:cc:e0:e9:1f:ca:8a:
         4f:ec:90:78:9a:6f:be:8c:17:fd:27:ca:df:57:fe:97:ab:45:
         86:ce:66:0c:b3:4e:03:af:4b:1a:ea:6b:71:16:13:0a:b2:7c:
         6a:33:67:3a:42:41:0e:11:37:39:e0:b9:c0:3f:9f:c4:68:6a:
         99:b5:38:9c:72:6b:48:ba:1e:df:e2:ec:f2:8e:e7:4b:3a:e5:
         6c:2c:56:37:74:2f:93:a2:2b:fc:74:47:1a:e6:b2:c9:39:35:
         f6:d1:2c:03:8b:c5:91:c4:3f:5f:ee:9c:7e:8d:92:5f:e7:36:
         dc:21:30:fb:0c:4f:e9:5d:99:fd:dc:1a:63:2a:37:d7:c9:3e:
         bf:c2:fc:e8:46:7a:fe:0c:59:4d:27:8f:0a:a7:a5:6e:e5:46:
         b7:22:83:80:dd:ea:fd:81:2f:56:d8:11:fd:a5:39:f2:09:5c:
         e6:d8:22:b2:be:ee:e3:23:b4:94:a9:81:2d:e7:1b:88:1a:cd:
         c1:ff:bb:d4:ee:70:8c:2d:06:7e:eb:8d:99:94:47:a2:80:db:
         b0:69:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:15 2025 by rpki-client