Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File:                     RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier:          zV89ZOgZ9ThovLU/REPhLwAmn00KYv8q/dYv6M8AELw=
Subject key identifier:   7D:5A:B2:4C:18:25:A9:4F:2A:EC:47:43:5E:C4:8C:99:F6:06:A6:A6
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       0197B6D76DCE6D6058B437F29FEF95ED84D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number:          13EC
Signing time:             Sat 28 Jun 2025 14:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:00 +0000
Files and hashes:         1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: CbP/yFMkqwRjq1ACkSiHsNLk1A7HepjydHB8r47tAIw=)
                          2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:6d:ce:6d:60:58:b4:37:f2:9f:ef:95:ed:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Jun 28 14:01:00 2025 GMT
            Not After : Jun 29 14:01:00 2025 GMT
        Subject: CN=7d5ab24c1825a94f2aec47435ec48c99f606a6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:ba:74:c6:9a:37:55:bc:29:aa:2a:28:b9:
                    c0:a9:38:b1:f4:dc:be:0e:f4:24:51:e8:da:48:c4:
                    1e:c3:41:aa:c5:60:8d:32:b6:b9:0f:70:66:b0:a3:
                    f7:ca:0c:53:60:9a:59:7a:0a:b1:28:c2:33:17:da:
                    16:59:8f:8c:be:2e:ea:a5:77:6f:38:6f:76:be:8b:
                    c8:4f:a5:49:09:89:6c:22:24:e5:de:e1:85:6d:42:
                    00:bc:67:0e:60:2d:5a:d5:7f:ca:a5:75:98:b4:7c:
                    54:f8:94:9d:6b:02:b3:1c:b8:21:a4:82:3e:ae:74:
                    72:62:bc:56:ad:89:ce:96:02:09:5f:95:91:0b:3d:
                    ff:fb:ca:d6:c8:98:c9:46:83:8b:ae:fa:a8:8c:dc:
                    f3:20:53:38:a3:76:40:e1:2e:36:b2:5d:a0:00:d5:
                    b8:e7:d2:7d:fc:7e:a1:2f:95:42:36:ec:dd:1f:72:
                    06:03:5d:54:a4:23:1c:14:7e:d6:68:c2:f4:35:0d:
                    e7:39:66:59:04:42:66:cd:57:3c:b5:8b:93:0a:20:
                    8b:4e:a6:8a:c5:97:89:ef:7a:ff:00:cb:4b:b3:c8:
                    8f:0c:a5:93:c4:f4:a2:0e:8f:5a:01:76:ec:50:a7:
                    f4:82:1a:19:a6:7d:a4:1b:7f:f2:3a:5c:6e:86:9d:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:B2:4C:18:25:A9:4F:2A:EC:47:43:5E:C4:8C:99:F6:06:A6:A6
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:9a:bd:a4:fe:e9:4b:57:61:89:f0:07:d1:c1:6a:7d:93:
         2e:a4:ac:b4:71:b3:19:b5:36:95:c4:19:7a:69:e1:80:1e:df:
         49:13:87:11:83:79:a5:92:5d:79:cb:50:7b:69:67:16:39:d8:
         80:83:a0:92:ea:88:5d:c9:4e:bd:07:b4:81:34:f7:e0:d7:27:
         40:69:5a:72:a0:35:42:c7:d4:ef:ab:de:57:38:70:6c:21:0d:
         07:02:73:c7:57:98:0b:1c:b2:fa:f1:fc:b0:63:dd:3e:94:5b:
         79:0f:60:cc:d4:e1:e5:32:c7:09:6c:b2:4c:ba:a1:47:e9:20:
         a8:71:da:9e:40:0b:f7:29:c6:0d:cf:d8:6b:20:9a:27:f4:b6:
         2a:33:d3:24:01:4c:8d:52:cb:be:9b:43:d2:fd:10:e7:66:cf:
         42:85:54:2a:22:ce:ba:f9:3b:aa:03:59:7d:5b:f2:38:90:40:
         46:dc:5e:ba:2e:16:b0:e7:35:95:2a:23:a1:ca:64:2f:0e:ab:
         0e:ab:25:75:6c:46:2e:ce:82:fe:c9:de:10:99:ea:31:24:1f:
         0c:08:94:7d:31:5a:60:0c:ee:88:f8:4c:fb:6b:22:32:77:ce:
         96:24:f8:e2:5e:cf:d5:82:1d:99:af:c8:6e:f9:65:ae:c4:2c:
         d4:80:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:44 2025 by rpki-client