Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File:                     RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier:          AESBdyzhIVYjRjys50KyRydWCGE0lKsn1ihRtY3YVpk=
Subject key identifier:   06:3B:E6:C0:FA:A6:1B:2D:F6:57:64:4C:AF:12:68:0B:F5:B6:2F:4D
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       0199FC217A31CC1E21D3BB72D0415F84142F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number:          1519
Signing time:             Sun 19 Oct 2025 11:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:16 +0000
Files and hashes:         1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: ea7O9HpvZkLFyIonaizLNG1j3fT6JWdUM1adwAe0kJw=)
                          2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:7a:31:cc:1e:21:d3:bb:72:d0:41:5f:84:14:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Oct 19 11:01:16 2025 GMT
            Not After : Oct 20 11:01:16 2025 GMT
        Subject: CN=063be6c0faa61b2df657644caf12680bf5b62f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:77:1c:13:e0:af:cf:a0:a2:43:32:29:74:
                    32:fd:66:3e:5d:30:00:ac:a5:85:0b:05:e0:21:cd:
                    5f:5c:c7:cb:0f:78:f4:91:fb:88:6e:c5:61:06:7e:
                    65:f0:3e:d8:cf:3a:77:f0:c3:33:9b:65:79:97:d2:
                    c8:af:16:c0:31:2a:f9:c5:4f:1a:1a:83:d2:e6:24:
                    aa:12:ef:0c:ed:9f:f9:6d:82:2d:36:fb:61:e3:a7:
                    b0:b7:5e:d8:7b:71:fa:b8:c3:b4:89:5b:ae:5f:79:
                    68:eb:29:e5:c4:be:80:df:73:b6:60:87:4b:81:05:
                    10:06:be:6c:ab:38:43:a7:b2:e4:05:2e:92:95:e8:
                    27:83:b1:16:fc:68:8a:33:37:94:06:d4:09:31:16:
                    48:4d:cf:70:b6:21:be:f7:b8:bb:4d:dd:c4:67:88:
                    aa:89:c6:b7:09:a1:13:10:fd:3b:44:84:6a:2d:fd:
                    3c:54:4c:ce:b8:8a:d5:f4:75:c9:e1:73:e2:99:f4:
                    19:10:b1:a3:c4:df:3c:66:85:5d:d4:40:e4:70:08:
                    c2:99:89:b2:be:bc:a3:00:89:40:83:de:85:19:b2:
                    05:f4:4b:00:98:17:8f:36:ca:6b:c0:85:d1:9b:39:
                    b0:45:93:e8:e6:d9:0f:68:99:6f:6c:00:eb:fe:fb:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:E6:C0:FA:A6:1B:2D:F6:57:64:4C:AF:12:68:0B:F5:B6:2F:4D
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:38:5b:0e:b5:af:e2:d5:27:b9:7e:c7:ff:99:67:0f:fe:
         95:22:ce:c1:20:f5:ff:f1:62:53:b9:be:17:fe:7f:cf:4e:57:
         d4:5d:ab:5d:84:1d:c4:17:ed:93:dc:9a:00:ff:bc:2a:ee:03:
         39:eb:b9:ad:21:6e:71:e9:14:fe:34:f5:44:3d:04:23:cd:64:
         e6:de:72:64:12:42:f2:b9:8e:87:d0:87:b3:22:26:93:0b:8b:
         f4:fa:27:35:da:ba:3d:e2:28:7a:c6:58:dc:67:f8:32:ca:36:
         da:41:df:91:9b:33:f3:23:ba:bd:6f:3a:62:12:69:d7:5e:7c:
         ce:d7:bc:ca:e7:45:95:e0:4a:a0:bd:56:36:94:63:3e:cc:43:
         5f:c0:2f:70:6d:a0:d3:b5:82:03:60:2a:64:bc:d2:9b:d5:00:
         80:61:09:f2:88:8c:7f:a7:ad:3f:5c:ec:01:5c:a1:b9:b3:b0:
         ff:be:88:2b:76:82:8e:03:91:0b:b1:4f:96:33:37:2c:6e:17:
         10:56:db:c2:e9:95:a3:e3:11:ba:32:1b:f6:a1:2a:8a:3b:83:
         73:6b:59:2b:c5:1d:6d:4f:5f:3f:a6:7a:4f:0a:16:ac:3b:8c:
         ad:fe:44:24:8a:03:5a:f2:f2:f8:13:fd:15:62:00:f6:16:5b:
         b0:75:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:31 2025 by rpki-client