Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File:                     Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier:          mgnHyS3i9BtJDQC6LA/kGTdudyPGkID9MuBs7O/DWkU=
Subject key identifier:   18:EF:AF:2C:7C:DB:5A:35:B6:15:22:35:BF:87:A3:CC:E4:D4:A3:FA
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer:       /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial:       0197B6A18C427E6EE34DB68441CA3C77B7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number:          0E6A
Signing time:             Sat 28 Jun 2025 13:02:09 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:09 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:09 +0000
Files and hashes:         1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: Pgw6PnHoNr14PSWzquAhTsJWCSpcUGSDdUDHmGhlhpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8c:42:7e:6e:e3:4d:b6:84:41:ca:3c:77:b7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
        Validity
            Not Before: Jun 28 13:02:09 2025 GMT
            Not After : Jun 29 13:02:09 2025 GMT
        Subject: CN=18efaf2c7cdb5a35b6152235bf87a3cce4d4a3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:67:f9:73:b5:af:99:73:80:9e:25:4b:60:
                    b3:fe:23:37:6a:f7:92:fe:96:2e:8e:4b:54:4c:18:
                    21:d1:90:30:f2:fc:d6:da:3a:bd:19:da:a5:ed:02:
                    33:3e:d2:95:bb:0c:8b:6a:95:7d:56:b9:47:5f:e8:
                    8d:7c:d3:ff:d3:68:c9:7a:e3:1e:a3:9d:d1:0e:ba:
                    5c:dd:f5:57:ef:7b:d0:0b:6f:3c:43:cb:96:d7:9e:
                    6b:2c:0b:b5:23:30:f4:9e:5f:71:2e:bb:66:be:e0:
                    b9:9c:cf:8e:cb:3e:6b:b2:68:2a:9b:2e:8a:80:ca:
                    f5:2d:75:a0:f7:25:8f:3f:43:af:2b:26:22:89:b8:
                    1b:79:8c:c6:b6:32:80:58:b2:56:5d:3f:be:f9:09:
                    02:f0:49:57:93:c9:39:cb:1e:f6:06:99:75:4e:06:
                    a7:25:f0:39:cb:d9:c8:ab:18:40:72:8f:5e:a2:95:
                    64:73:87:b9:54:71:ab:37:10:cb:78:6b:5e:c7:ab:
                    a4:5d:2a:ff:b6:f0:0e:07:60:fd:de:ad:93:0a:f2:
                    d0:c6:94:86:cb:39:43:1f:5e:4f:83:e6:b2:ce:a9:
                    fd:cd:0c:06:84:97:da:24:8d:17:a4:7d:c7:14:46:
                    9b:5c:19:f4:bb:e4:f5:32:49:a9:e2:ef:08:dd:34:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:AF:2C:7C:DB:5A:35:B6:15:22:35:BF:87:A3:CC:E4:D4:A3:FA
            X509v3 Authority Key Identifier:
                keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:a4:de:3f:82:0e:40:47:eb:68:5d:7f:09:3a:ec:fb:86:
         07:e7:8b:d0:4c:d7:10:20:d3:c3:da:13:fb:d9:d0:5b:17:22:
         58:1e:d2:a1:18:a1:35:aa:28:52:1d:c4:f7:16:f7:70:48:01:
         bb:f0:2c:88:bb:ff:79:30:e6:ed:1f:40:5b:c5:41:6a:ce:26:
         b7:46:06:b5:dc:40:80:9c:f7:51:a1:93:21:58:b6:d6:a5:aa:
         e8:ee:09:49:0f:cc:96:14:c4:df:f6:71:7f:a9:72:e0:a4:72:
         51:56:c5:d6:e1:66:71:c1:4d:ce:70:05:bb:1a:82:5d:5e:53:
         fb:48:f9:f1:13:bb:88:6b:b0:da:a1:56:28:f6:9b:81:42:71:
         74:ae:09:0a:b7:b7:e8:22:5a:f0:26:de:1b:e9:97:62:5b:2a:
         d0:0e:1f:be:1b:f3:fd:d4:87:99:b0:d3:c3:77:4a:75:1c:f9:
         b0:1d:d4:8d:aa:b2:47:74:cd:f0:1b:cd:ba:94:7b:b8:f8:fd:
         38:d6:f2:f0:ed:ce:c7:9a:a5:a8:34:ed:1b:6f:b9:7c:b4:c6:
         69:eb:a4:ac:0f:01:35:66:bf:d5:9e:bc:d5:f8:d6:a0:c1:55:
         c0:88:78:8f:06:ee:b0:06:40:0b:29:50:69:ce:be:fa:a3:80:
         c6:e0:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:00 2025 by rpki-client