Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File:                     knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier:          LV71ltFNUOZGqVGn3J23nNnlVqeoDsdvKoPaOEUw7KY=
Subject key identifier:   F9:15:C8:3C:A5:9E:D5:C9:AC:5F:98:D7:37:CF:A4:F7:BA:B1:FB:FE
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer:       /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial:       0199FB464030A76235E5977CE3C2C3D52D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number:          028A
Signing time:             Sun 19 Oct 2025 07:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:49 +0000
Files and hashes:         1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
                          2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: yLRXvKTcVjHz1Dgcg3tKRdcnHsF4AhL7yvNvHu7h9IY=)
                          3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:40:30:a7:62:35:e5:97:7c:e3:c2:c3:d5:2d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
        Validity
            Not Before: Oct 19 07:01:49 2025 GMT
            Not After : Oct 20 07:01:49 2025 GMT
        Subject: CN=f915c83ca59ed5c9ac5f98d737cfa4f7bab1fbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:f9:f4:86:a6:bc:b7:06:90:1e:f4:e5:23:
                    00:59:23:be:6e:59:ca:9e:e6:ce:83:fd:a7:43:8d:
                    f5:6a:dc:a8:4f:36:a0:bf:c3:88:d4:8a:96:d6:e1:
                    d6:f0:ee:ee:8e:db:c2:5e:5e:28:84:cd:41:a8:c1:
                    ba:52:f7:28:31:1a:f4:97:9e:6a:b1:f8:7e:c4:61:
                    7e:ce:28:9f:d5:d5:f0:0f:c7:ed:ec:a0:32:92:02:
                    29:84:07:76:9c:49:57:84:db:ff:80:14:d9:fa:cf:
                    32:e5:ee:c4:fc:f5:80:1e:02:02:73:5d:83:e6:0f:
                    8a:5a:a7:16:da:3f:01:01:5d:18:4d:50:1e:b2:77:
                    f9:e8:34:82:76:7a:a9:ec:00:b0:ff:8e:74:33:98:
                    47:94:c7:7e:e5:1b:8c:35:02:67:f5:8f:0c:0a:bd:
                    1f:80:bd:d7:bf:cc:ef:2e:73:0a:3c:53:c8:1c:52:
                    25:b6:d8:a7:9f:31:b7:ff:96:e7:7b:a3:e6:c7:57:
                    d2:a4:b7:5c:b9:44:ad:f9:c8:ce:2a:dd:86:f1:e1:
                    0f:66:82:9e:c0:8e:b1:26:92:3f:ea:3d:6e:e0:81:
                    e1:5c:7b:de:9e:e8:ad:8d:7f:b9:0a:38:57:33:28:
                    39:6e:cf:d7:6d:3a:bf:5b:72:8b:2f:8b:39:13:64:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:C8:3C:A5:9E:D5:C9:AC:5F:98:D7:37:CF:A4:F7:BA:B1:FB:FE
            X509v3 Authority Key Identifier:
                keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:07:0b:a9:1d:c6:83:9c:90:b5:a3:40:6b:85:48:d0:9a:
         64:7c:1f:14:cd:49:3c:6c:31:7a:ba:f4:51:fa:7d:10:19:05:
         75:68:5b:1b:27:bb:2b:7c:c5:a6:c9:49:7f:1d:9c:77:b2:81:
         5f:d7:bd:66:5a:7b:2b:0e:8d:c4:66:09:3c:69:3a:1c:ab:a0:
         35:56:6b:ac:fd:87:20:c7:6a:40:a3:eb:5d:5e:3f:c8:a9:ac:
         c2:43:a3:6f:ca:fd:f9:ea:f9:13:2d:9b:80:1c:cc:16:20:92:
         52:86:ce:12:16:bc:38:cc:a0:12:02:b3:22:c3:59:d6:fc:bf:
         e3:4d:79:c8:27:33:a2:13:6d:bd:54:63:41:a0:fd:9e:69:c3:
         b2:e3:17:95:c3:8a:7b:23:89:8d:9c:97:c3:69:8a:c1:e7:64:
         8f:49:bb:e1:bd:d7:a4:ef:5b:48:ba:62:d4:72:1a:81:91:5d:
         ff:4e:27:6a:5e:96:d1:09:d8:16:36:37:bf:32:c4:14:db:28:
         47:03:62:80:96:7c:d3:07:7f:44:9a:c2:6c:8a:00:01:0d:4d:
         04:5d:c9:cc:6a:4d:21:62:e5:2a:43:7e:99:3f:54:ce:7f:7e:
         9d:86:00:48:58:05:46:b8:29:c6:2a:79:2e:99:5c:da:10:98:
         08:fc:7a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RkAwp2I15Zd848LD1S2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E3ZjNhYTYxYjIyNDExODIzNWUzMjAxMWVkZWNiZTNm
NmE2NDkwHhcNMjUxMDE5MDcwMTQ5WhcNMjUxMDIwMDcwMTQ5WjAzMTEwLwYDVQQD
EyhmOTE1YzgzY2E1OWVkNWM5YWM1Zjk4ZDczN2NmYTRmN2JhYjFmYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv359IamvLcGkB705SMAWSO+blnK
nubOg/2nQ431atyoTzagv8OI1IqW1uHW8O7ujtvCXl4ohM1BqMG6UvcoMRr0l55q
sfh+xGF+ziif1dXwD8ft7KAykgIphAd2nElXhNv/gBTZ+s8y5e7E/PWAHgICc12D
5g+KWqcW2j8BAV0YTVAesnf56DSCdnqp7ACw/450M5hHlMd+5RuMNQJn9Y8MCr0f
gL3Xv8zvLnMKPFPIHFIlttinnzG3/5bne6Pmx1fSpLdcuUSt+cjOKt2G8eEPZoKe
wI6xJpI/6j1u4IHhXHvenuitjX+5CjhXMyg5bs/XbTq/W3KLL4s5E2TzcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkVyDylntXJrF+Y1zfPpPe6sfv+MB8GA1UdIwQY
MBaAFJJ6fzqmGyJBGCNeMgEe3svj9qZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMt
NTAxYzcxYzQzYjA5LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMtNTAxYzcxYzQzYjA5
LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmIHC6kd
xoOckLWjQGuFSNCaZHwfFM1JPGwxerr0Ufp9EBkFdWhbGye7K3zFpslJfx2cd7KB
X9e9Zlp7Kw6NxGYJPGk6HKugNVZrrP2HIMdqQKPrXV4/yKmswkOjb8r9+er5Ey2b
gBzMFiCSUobOEha8OMygEgKzIsNZ1vy/4015yCczohNtvVRjQaD9nmnDsuMXlcOK
eyOJjZyXw2mKwedkj0m74b3XpO9bSLpi1HIagZFd/04nal6W0QnYFjY3vzLEFNso
RwNigJZ80wd/RJrCbIoAAQ1NBF3JzGpNIWLlKkN+mT9Uzn9+nYYASFgFRrgpxip5
Lplc2hCYCPx6UQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:27 2025 by rpki-client