Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File:                     KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier:          cPK48b09eMkRRK0zZvORCbcyJcBqbLIGE3wYC6UfLFI=
Subject key identifier:   83:60:42:CF:FE:4D:79:80:B2:33:81:82:DB:79:81:0F:A2:06:F1:15
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer:       /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial:       0198469B14A2DFC67DBFE4499C570E12315A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number:          06D6
Signing time:             Sat 26 Jul 2025 12:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:25 +0000
Files and hashes:         1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: W94KylDp5/SdnMzm8FUG4SfgOjaxlecbf7CGN64QoPE=)
                          2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:14:a2:df:c6:7d:bf:e4:49:9c:57:0e:12:31:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
        Validity
            Not Before: Jul 26 12:00:25 2025 GMT
            Not After : Jul 27 12:00:25 2025 GMT
        Subject: CN=836042cffe4d7980b2338182db79810fa206f115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:a4:c6:f3:3b:34:52:00:dd:13:ed:67:70:
                    87:6d:e0:97:73:cf:bb:5f:8b:d5:4f:c5:2b:3b:ba:
                    ea:a2:2f:3a:0f:f4:ce:01:f3:c5:ed:b9:36:6c:10:
                    47:7a:2f:59:7e:27:28:5d:00:6b:20:2a:79:21:dc:
                    db:27:12:8e:8d:f2:3e:a2:19:6e:2f:7f:13:15:7b:
                    95:99:aa:87:3e:bd:52:80:bc:c2:34:7e:24:3f:f9:
                    89:ae:65:61:3a:34:a0:19:37:c1:db:e3:f0:0b:26:
                    48:80:53:cf:06:86:a4:03:f7:0e:d7:f2:a2:63:3e:
                    ab:78:6f:05:80:c4:ec:fe:2f:57:b4:b8:7a:21:5b:
                    6d:e8:c2:6a:dc:40:c5:6a:e3:25:26:db:2d:78:58:
                    89:f3:ef:37:cd:b4:2c:b4:69:d9:4d:f3:86:42:fa:
                    ad:9c:06:c5:44:29:56:c9:ae:75:20:10:fe:41:b2:
                    c2:0b:c5:94:e4:f7:09:6f:83:b9:4f:5f:9e:b0:f6:
                    32:44:41:24:d4:61:10:c7:81:32:26:e3:a5:bc:a8:
                    8a:6a:8a:62:6e:2c:bc:70:26:b1:fa:25:6b:3b:a5:
                    ef:5c:8f:3e:8a:d7:81:98:22:96:54:be:6a:09:66:
                    97:71:93:81:32:e0:ba:60:aa:58:4d:a4:2d:33:20:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:60:42:CF:FE:4D:79:80:B2:33:81:82:DB:79:81:0F:A2:06:F1:15
            X509v3 Authority Key Identifier:
                keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:73:8e:e1:94:23:a0:da:a8:f5:9b:f6:7d:a3:1d:20:c8:
         d2:84:5b:c8:57:e8:bf:df:d9:5c:10:2d:b0:46:89:17:95:f2:
         c2:f0:f0:36:de:66:5b:d9:8a:26:69:08:91:70:38:76:70:b5:
         92:e2:1e:5b:ab:32:17:6f:23:a5:7c:01:8d:9f:3b:56:08:76:
         ed:3e:78:b6:23:13:e9:6c:41:a5:95:21:b9:3a:5a:a3:bc:5f:
         1a:7d:11:a4:33:3b:41:51:6d:fd:20:51:4b:2c:71:96:dc:ee:
         78:b0:2b:1c:d5:96:54:41:8b:f8:13:0f:c7:b6:3b:d4:a1:17:
         69:ee:00:10:d2:34:c8:86:98:de:59:61:2e:ac:fa:55:68:ba:
         42:03:6e:3d:95:fa:1f:c2:7e:90:13:7e:1a:36:28:a3:26:82:
         27:fe:64:ab:94:44:54:1e:cd:73:22:83:70:ca:99:45:82:fa:
         10:ec:1b:3d:65:52:30:b6:39:a9:8b:a2:a5:9b:d5:58:87:a4:
         9e:6c:af:23:cf:f3:f9:74:c3:bc:b6:83:74:de:a6:4e:a4:6b:
         4a:0e:3a:b9:29:bc:01:c4:f4:a0:c1:29:0a:fc:bd:d0:17:9a:
         3b:72:3a:03:04:ab:cf:37:1d:88:d1:09:63:f5:a3:e7:4c:46:
         bf:d6:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:47 2025 by rpki-client