Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
File:                     KY60_lwZ8pLyiSTL8VVaj1do2CY.mft (raw, json)
Hash identifier:          cRFEGTnTjgicniGxpuedhOldqCvfuAf7AQ8497B/lh8=
Subject key identifier:   8B:2D:40:59:03:A0:35:5B:63:2A:21:7B:10:58:EA:B7:3E:0A:5A:97
Authority key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Certificate issuer:       /CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Certificate serial:       01984964F55DD559BF5D30686724F7C40C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 01:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:09 +0000
Files and hashes:         1: KY60_lwZ8pLyiSTL8VVaj1do2CY.crl (hash: ie+qB/6dNX6qniJqqWLwjtfeoXc5mQCl5ho6kNsouhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:64:f5:5d:d5:59:bf:5d:30:68:67:24:f7:c4:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
        Validity
            Not Before: Jul 27 01:00:09 2025 GMT
            Not After : Jul 28 01:00:09 2025 GMT
        Subject: CN=8b2d405903a0355b632a217b1058eab73e0a5a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:28:1e:77:1f:c6:df:63:19:ae:ec:75:c7:
                    cd:9b:71:58:14:88:5c:18:60:10:6d:1a:2c:6e:33:
                    61:af:90:c6:11:62:5b:fe:3c:8a:5f:79:b5:21:39:
                    18:ec:cb:63:9c:8b:f2:77:3b:32:8d:c6:6c:26:f8:
                    26:8d:16:26:2c:7d:6c:0c:f4:65:f3:b8:0f:0f:7c:
                    de:91:21:8f:9e:b2:e7:b9:15:37:aa:b4:10:5e:48:
                    db:85:e9:c7:99:d8:40:46:69:6e:ee:9f:04:58:33:
                    bc:4e:46:e1:a8:dc:9d:62:de:fe:a9:86:72:15:e7:
                    58:3c:80:3f:d4:f8:4b:5c:e5:39:f8:c4:bf:73:c4:
                    b5:96:d2:7f:62:c4:9a:1d:63:1b:42:78:f1:00:e0:
                    84:71:f3:69:26:41:9e:cd:50:30:5d:b8:eb:03:67:
                    ed:da:24:34:79:a8:2e:ff:06:55:67:b6:6c:f3:2c:
                    57:7e:4d:d5:45:92:8e:e6:50:74:2b:f1:c9:ab:be:
                    4b:3e:36:f4:61:f8:d4:42:ba:87:5c:52:bd:a2:0b:
                    86:2d:3b:c6:d7:86:0b:ea:96:aa:26:c0:92:6c:07:
                    03:67:91:7a:6a:da:e8:94:0a:11:78:f4:b2:ab:76:
                    5e:59:d8:64:c0:62:32:66:96:cf:0d:eb:7f:2d:89:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2D:40:59:03:A0:35:5B:63:2A:21:7B:10:58:EA:B7:3E:0A:5A:97
            X509v3 Authority Key Identifier:
                keyid:29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bb:2e:e1:5e:0d:fc:8e:24:5e:8f:84:6a:a8:3b:19:17:9b:
         53:3a:5c:a0:2c:9c:6e:1c:6f:68:24:33:02:50:f3:52:82:02:
         e0:94:59:5d:71:8c:ab:19:71:16:5f:48:fa:30:a3:30:3c:92:
         7d:42:e3:5c:b0:40:cb:d6:f2:15:ec:40:e1:3f:34:2c:5c:e2:
         15:48:50:8e:3d:1b:3d:69:e1:52:b0:29:b2:50:50:93:2b:a4:
         74:19:5f:a5:44:6b:b3:a2:7f:63:72:6c:93:30:d0:47:6b:30:
         d0:bf:b0:b4:d8:55:9b:7d:01:83:b9:83:e0:82:04:6a:10:6c:
         17:9c:c0:6d:d8:a1:5f:99:55:cf:7b:62:0f:da:a4:4a:5e:68:
         31:98:78:95:90:a8:0c:30:c1:b7:e1:60:a9:e5:f5:9d:86:18:
         3b:9e:a3:6f:21:12:c2:6c:6c:05:9f:5b:51:44:28:29:70:2a:
         2f:e9:3b:95:1d:7e:38:c4:c9:8b:ce:a0:8e:04:34:b7:9a:35:
         0e:29:ab:09:9b:80:06:57:75:2f:d3:23:ed:1a:50:d8:35:ca:
         46:ef:d3:eb:6a:a3:8c:06:df:07:1b:5d:d6:9a:40:23:f4:a4:
         ef:e5:b4:a6:d3:23:3b:46:31:dc:40:98:e9:2a:b7:73:c9:86:
         fd:80:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:01 2025 by rpki-client