Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File:                     KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier:          awXjKqGl4mZFctt/gcLvq85NXwHEmfnz0qlWRMnnVOU=
Subject key identifier:   62:74:DA:15:EE:91:75:91:81:B5:D1:FD:BF:29:51:70:DD:15:41:3F
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer:       /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial:       01984588539ADA9570F8656DE21A0AEFCE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number:          0405
Signing time:             Sat 26 Jul 2025 07:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:18 +0000
Files and hashes:         1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: 6kqsnupNN7B5Gk6KyCeWaIwvRb7Vp1Ch90YrTd28qdo=)
                          2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:53:9a:da:95:70:f8:65:6d:e2:1a:0a:ef:ce:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
        Validity
            Not Before: Jul 26 07:00:18 2025 GMT
            Not After : Jul 27 07:00:18 2025 GMT
        Subject: CN=6274da15ee91759181b5d1fdbf295170dd15413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:ae:36:78:ec:62:66:61:9a:97:8c:1a:cc:
                    1c:37:0a:55:be:b4:3a:4e:77:08:87:07:89:c4:ca:
                    0c:47:56:75:40:4b:8b:41:d9:99:98:92:dd:ce:b8:
                    0e:23:f3:d0:9a:63:13:cc:61:74:96:73:d3:6d:70:
                    87:aa:23:15:53:86:fd:1b:a6:89:a7:90:89:89:44:
                    f4:c6:ff:73:cf:83:7d:da:11:be:03:64:43:bc:8f:
                    88:ce:5c:71:af:a6:fa:a3:50:48:8f:49:9d:77:5f:
                    e6:b4:2c:1e:00:56:9a:46:4c:73:ac:2b:c5:f8:6a:
                    c5:f8:9d:69:e1:ff:d3:8c:e4:21:24:a5:76:35:a0:
                    cf:b2:b7:73:ff:76:25:96:73:59:d7:4e:fe:62:08:
                    75:57:d1:29:0b:47:4c:5e:6a:f6:13:8c:d0:89:c8:
                    85:61:35:c8:34:67:e8:33:97:83:a0:44:b9:b7:f0:
                    f5:d9:34:07:1b:48:a6:9f:28:d4:a8:35:55:98:b1:
                    b7:f3:76:ce:bf:dd:04:15:d5:40:23:d1:3d:7e:15:
                    eb:03:ac:eb:38:c5:19:be:c0:59:cb:e8:da:d7:03:
                    a6:bb:dc:4e:27:bf:56:aa:64:51:1b:7b:f9:2e:e4:
                    36:c1:d2:f0:b5:ae:4f:48:4a:a6:9a:5e:ef:73:0b:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:74:DA:15:EE:91:75:91:81:B5:D1:FD:BF:29:51:70:DD:15:41:3F
            X509v3 Authority Key Identifier:
                keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:72:8c:86:51:29:be:63:c7:dc:1c:0b:44:38:a2:b9:d2:
         0f:2c:5d:04:63:0b:7d:37:31:af:99:e5:5b:f6:c2:75:f3:62:
         38:a9:c3:4a:39:43:8d:7c:68:87:1f:50:0c:45:9b:6b:42:50:
         a8:8b:60:a5:b6:8c:9f:bf:69:5e:e1:d2:c2:c3:9c:49:6e:16:
         cd:ac:6c:c0:44:2a:16:02:fc:76:df:84:9c:1f:41:47:42:b7:
         1d:45:33:c4:b7:41:69:41:57:58:44:b9:e5:b7:26:a4:0d:3b:
         5a:02:2d:30:ab:2b:2e:0c:ef:61:c3:60:b2:74:06:8f:4e:9e:
         3f:d1:e9:ff:15:e9:3c:da:a6:fe:79:14:08:d6:8d:a6:f6:15:
         ed:60:0c:23:a1:cd:72:5f:4f:18:7d:a0:d2:50:92:76:8a:2d:
         9c:27:6c:af:9e:70:03:b8:58:be:6b:08:99:d7:08:d6:50:b0:
         2c:0b:4a:0b:92:ee:cd:43:4c:f1:75:13:55:fe:6b:12:14:7a:
         65:fc:9f:d6:15:4a:67:ca:33:fc:6c:c6:24:41:cd:b9:66:4e:
         61:6c:8c:27:94:42:14:da:25:36:71:d0:e2:be:b9:8c:43:16:
         75:58:7b:e4:6a:d9:85:39:b2:fe:0b:a4:c6:8b:61:8a:72:9b:
         58:72:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:30 2025 by rpki-client