Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File:                     KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier:          BfC0MgQ+j9LqGYd0Np4repYHDuj4IeB4mcVGomxiYbE=
Subject key identifier:   A6:0D:CA:A3:EB:1A:84:EC:B6:6C:BE:28:2E:E3:ED:5D:04:5E:EB:37
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer:       /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial:       01976DAB3932EC4624A4FF70FE46803C7BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 09:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:27 +0000
Files and hashes:         1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: kR3jQS8I4TCcj7Zw0aChzZxqri1w4arw8Z8zCY46ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:39:32:ec:46:24:a4:ff:70:fe:46:80:3c:7b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
        Validity
            Not Before: Jun 14 09:00:27 2025 GMT
            Not After : Jun 15 09:00:27 2025 GMT
        Subject: CN=a60dcaa3eb1a84ecb66cbe282ee3ed5d045eeb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:3b:51:50:b3:c5:a0:90:9f:df:e2:5f:32:
                    01:a5:b7:c5:14:f1:fb:33:ba:91:be:21:40:de:00:
                    3c:d1:ff:f7:4d:12:62:74:d5:cb:aa:95:55:fb:8c:
                    b0:38:70:a0:88:89:22:cb:8f:ae:66:6c:87:39:32:
                    4d:63:a1:f7:e5:58:76:42:27:98:ea:02:6c:18:17:
                    98:7e:7b:c1:07:02:f9:bc:37:f4:72:87:d2:cf:70:
                    33:b7:10:f1:4f:87:d3:44:45:d7:53:98:af:af:89:
                    62:83:9f:f6:d7:32:bc:8f:32:31:58:0d:92:fb:d0:
                    66:7c:db:70:a5:d2:05:cf:ac:0e:12:39:f3:d2:f5:
                    45:69:7c:69:b7:ee:da:23:08:2e:73:02:c8:e2:07:
                    b8:1d:7e:95:97:f5:2f:a5:a3:39:a1:33:8a:98:cd:
                    c6:a6:b9:d6:9f:d0:4c:b2:21:07:29:47:55:5a:82:
                    d1:20:fc:df:67:84:5c:f8:5f:c0:92:ca:5c:4a:c3:
                    44:da:85:01:7f:95:6f:dc:e4:45:41:b8:31:df:8d:
                    f2:e6:88:33:d5:02:a6:71:e1:5f:b4:45:32:6a:98:
                    ec:e6:bb:47:db:0c:c9:cd:c2:7c:f5:35:14:0f:a1:
                    d9:63:c5:bc:61:5e:87:97:d5:4d:58:b0:51:6f:e2:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:CA:A3:EB:1A:84:EC:B6:6C:BE:28:2E:E3:ED:5D:04:5E:EB:37
            X509v3 Authority Key Identifier:
                keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:69:1d:08:26:9e:87:6f:c2:9e:71:07:c3:c1:d3:bc:50:
         fc:d2:58:ca:2b:d9:3c:99:b7:96:3d:c8:40:0f:07:22:f0:18:
         b0:ef:87:9f:e7:9f:36:da:eb:b1:87:28:77:fc:d1:c6:15:4a:
         ff:04:e5:f9:5e:91:72:84:ab:59:88:b6:09:e8:b0:e2:e0:7f:
         1f:2c:74:47:fb:b9:58:2f:3d:30:37:fa:96:79:b4:ae:5b:dc:
         2d:dd:0f:95:b1:39:1e:99:30:f6:af:1c:0b:4d:f3:25:97:0d:
         81:ed:9b:b8:4e:81:de:95:2e:c3:ea:6f:b6:a5:5d:08:bd:27:
         e6:26:ee:f9:2e:24:1c:4a:74:df:5a:f1:0a:8f:4b:99:7c:f3:
         df:cd:89:6d:5b:10:5d:88:25:e0:ad:4a:a7:be:73:68:70:3e:
         dd:a6:9d:55:fd:0e:97:ce:e0:b6:9f:48:85:0d:8b:a8:f0:1c:
         c5:5f:1e:9d:65:7f:1c:f3:ce:f1:55:b8:b7:c3:b1:fd:10:2c:
         e1:c2:35:18:16:28:93:01:9f:02:3d:de:f5:59:2f:db:ba:0b:
         f4:b0:b7:0b:0e:e3:8c:e1:7c:f3:35:37:39:3d:d5:6c:06:4a:
         ce:c1:0b:41:9a:d9:e8:cf:ec:88:44:1f:42:40:6d:c3:cd:63:
         61:9d:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:27 2025 by rpki-client