Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File:                     KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier:          l5IVac4Hnu6Gh0Ei91UikmbFAvYwdcUFAu1yponcoco=
Subject key identifier:   47:17:FE:2A:6E:BD:6D:25:19:D3:33:B3:04:AE:27:62:F2:4E:71:06
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer:       /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial:       0197B8906E519CA92ADB1E617992A28AB979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number:          03BC
Signing time:             Sat 28 Jun 2025 22:02:42 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:42 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:42 +0000
Files and hashes:         1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: GI8elARdDGxmawfxMMzvbUN2jxXCJ8HFUQXyBHwCgrs=)
                          2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:6e:51:9c:a9:2a:db:1e:61:79:92:a2:8a:b9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
        Validity
            Not Before: Jun 28 22:02:42 2025 GMT
            Not After : Jun 29 22:02:42 2025 GMT
        Subject: CN=4717fe2a6ebd6d2519d333b304ae2762f24e7106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:06:71:84:40:47:7e:ef:38:08:f7:57:88:
                    82:3c:58:f8:6e:3d:f5:48:fc:36:dc:fa:91:ae:2b:
                    57:56:ec:0b:30:bb:3a:8e:b3:29:fe:a0:5f:4d:15:
                    e1:d3:1b:00:b0:9f:40:28:d3:96:d6:8e:9a:c5:6d:
                    fc:d0:7a:1e:7a:9e:f9:ab:52:44:dc:29:40:24:e5:
                    ac:00:54:af:66:9f:6e:c0:7a:4c:48:35:cc:14:13:
                    58:48:03:39:53:50:32:28:cb:73:71:8c:5c:f7:49:
                    bb:5a:cb:3e:cf:5d:6a:22:fa:59:ca:0e:12:05:66:
                    62:43:d7:89:c0:ff:7d:ba:99:2b:79:5a:ec:7c:d5:
                    73:10:7b:47:57:8f:b8:d4:05:86:61:83:d4:58:af:
                    42:51:dd:c2:86:8c:6e:1b:37:37:27:9a:b2:fc:14:
                    b0:f4:96:02:b3:0a:6b:c2:50:d5:8f:f0:90:a4:2f:
                    0c:f4:ea:4b:cf:0c:56:2f:a8:9b:0a:76:0e:72:5e:
                    9b:31:5d:33:23:c1:6a:08:c5:56:6a:17:9d:94:e2:
                    0a:6d:0e:4c:b1:18:48:a6:de:c2:b3:92:33:15:0f:
                    7e:bf:b3:7b:99:d0:7b:1b:f8:b5:55:0a:5c:76:df:
                    d9:6a:84:8d:18:96:c0:35:20:27:1b:e8:52:f6:d6:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:FE:2A:6E:BD:6D:25:19:D3:33:B3:04:AE:27:62:F2:4E:71:06
            X509v3 Authority Key Identifier:
                keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:9d:a4:07:3d:8a:9f:c1:5e:58:1a:9c:82:ac:cd:c3:1e:
         b5:8a:86:a9:9a:88:b4:be:f5:ad:ac:a1:b2:4c:79:a2:a9:e0:
         02:ff:7a:da:3b:42:da:09:52:97:19:e3:49:e9:49:ca:7a:b9:
         dc:1f:7d:fe:95:85:3e:3e:58:f4:8f:2e:2e:f1:07:ea:1a:e8:
         8a:64:c2:d4:67:18:e2:c3:b8:8d:f2:c1:ec:c5:01:ff:16:3e:
         34:96:b3:a3:58:0f:6a:71:74:69:c6:74:07:43:68:df:0e:67:
         65:e8:d8:72:be:d4:e9:01:3e:d7:75:ec:3f:a9:0c:25:a9:d3:
         28:62:0a:0d:5e:e4:ce:76:b6:88:b7:fa:98:5b:00:9d:a4:a1:
         2c:ad:d0:a5:76:5f:c4:77:de:1e:37:1f:d2:5c:9c:59:4a:7b:
         17:6e:35:87:8e:33:b4:6d:17:ce:35:37:7e:15:49:b7:29:17:
         89:73:e5:0e:bd:9e:d0:59:ae:1b:36:5f:d0:82:75:39:cc:7b:
         28:53:56:bb:55:9d:99:e9:23:59:e5:0c:c1:0c:74:a6:74:33:
         45:48:4a:ef:7f:91:37:95:2e:c6:45:ab:e3:a3:6d:b6:66:d1:
         98:d9:d6:cc:3b:48:d0:35:26:40:24:05:15:d4:b7:7c:2d:d8:
         42:46:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:28 2025 by rpki-client