Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File:                     KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier:          znhaAvLyAeFbljP68vTar/zQERREHbvpuHcCbu9GO8o=
Subject key identifier:   BD:C6:A3:41:2B:DD:A3:31:FB:B5:B1:78:98:3F:19:31:42:B5:16:A4
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer:       /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial:       0197586CEECC825C180F05ED9952432F7E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number:          1581
Signing time:             Tue 10 Jun 2025 06:00:23 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:23 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:23 +0000
Files and hashes:         1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: dEiUyGxJwsDnspHy/+MF+gV5GniD1wgeEslqjcixQ/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6c:ee:cc:82:5c:18:0f:05:ed:99:52:43:2f:7e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
        Validity
            Not Before: Jun 10 06:00:23 2025 GMT
            Not After : Jun 11 06:00:23 2025 GMT
        Subject: CN=bdc6a3412bdda331fbb5b178983f193142b516a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:86:90:ce:60:87:6b:a5:0e:9d:8a:7f:6e:
                    cf:4f:05:38:41:a0:7c:d2:2f:24:30:77:68:1c:7a:
                    2c:27:4c:b5:28:fc:f9:4c:93:a3:69:95:db:50:b9:
                    1b:75:21:81:c8:8e:b1:16:d0:63:7d:c7:30:0e:be:
                    c1:2e:ed:3c:67:4d:44:67:6c:b2:40:43:73:77:e7:
                    25:cd:d7:85:3b:da:89:38:d3:a7:13:d8:66:83:38:
                    91:23:13:f2:ca:0d:f5:fb:bc:e0:95:34:33:b6:f5:
                    54:81:ee:34:0e:83:40:87:21:e5:6f:00:04:e2:7c:
                    65:6e:43:2c:a4:7c:96:2b:45:ea:6d:86:9e:96:52:
                    00:9d:fc:d4:8f:b4:aa:52:4f:15:c3:f7:9a:8a:45:
                    94:5b:b3:79:0d:93:d9:0a:ac:3f:18:7e:52:f8:4f:
                    26:d5:01:d3:53:4a:49:84:17:e3:49:79:ab:39:f5:
                    f8:f5:d7:d5:f4:d5:14:b6:66:38:25:be:30:56:44:
                    ae:0f:82:61:48:e3:2c:c0:4d:18:3c:0d:3b:d8:57:
                    f8:dd:79:8d:b6:d3:e4:28:26:9f:3e:76:86:f7:18:
                    f2:90:a2:99:92:78:ca:60:2a:08:e2:5a:66:24:96:
                    b9:79:b0:ab:57:5e:9a:3d:2d:55:c0:5c:b1:1e:24:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:A3:41:2B:DD:A3:31:FB:B5:B1:78:98:3F:19:31:42:B5:16:A4
            X509v3 Authority Key Identifier:
                keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:82:fa:d8:15:32:99:5f:db:20:df:d0:9a:8f:db:ff:7a:4d:
         e3:0b:f5:b0:83:cf:e3:3d:b4:fe:f8:c0:40:9e:4d:95:c6:65:
         a2:00:fe:cd:6c:8c:d5:fe:0d:0f:e8:5d:22:23:fa:6b:7e:7f:
         57:42:62:29:c0:80:b8:f9:4e:30:c5:e0:12:4f:ed:d0:cd:a4:
         2f:3a:57:90:63:96:49:7c:21:ab:e6:ee:d9:ad:ef:0f:94:bf:
         61:12:38:2e:cd:12:57:a9:b0:eb:eb:11:a8:0a:70:40:2d:ea:
         e3:a1:e1:85:6a:7f:dd:f9:66:54:f5:0f:c5:8d:47:b3:d1:90:
         0b:d0:11:da:87:ec:0b:72:e3:e7:01:e9:fd:eb:d0:e0:ba:02:
         7a:52:e6:4f:93:be:63:29:b3:bc:78:94:58:b4:f2:5a:21:2d:
         3f:6c:6d:7c:a1:8b:07:12:77:bd:9c:f4:28:85:df:a7:ed:58:
         ca:f0:26:e5:c2:08:13:8b:24:d4:26:50:7b:0c:a0:1f:0a:3f:
         0e:6d:93:91:69:a4:2c:0c:39:81:df:98:54:ac:ea:4f:1f:89:
         03:04:63:92:dc:99:7f:c3:b5:16:7f:b4:41:90:96:53:e4:65:
         57:c8:b3:c8:22:c3:d3:9c:e0:36:6c:34:a5:36:71:9b:6a:c4:
         2a:ae:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:09:42 2025 by rpki-client