Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File:                     KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier:          s/z0zs9xt05fXMnqNYuNfGW2u1d068xaXUWF4+LRQ8s=
Subject key identifier:   C9:81:82:39:78:3C:45:ED:28:76:26:56:D4:1E:D8:E6:9B:55:B3:10
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer:       /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial:       01975C49B4115E46BE9C797C0201128C4D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number:          1583
Signing time:             Wed 11 Jun 2025 00:00:23 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:23 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:23 +0000
Files and hashes:         1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: HuaGwcT3c8gaXYsQxvivj0k19W0J63/xxxHPqJ2I3CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:49:b4:11:5e:46:be:9c:79:7c:02:01:12:8c:4d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
        Validity
            Not Before: Jun 11 00:00:23 2025 GMT
            Not After : Jun 12 00:00:23 2025 GMT
        Subject: CN=c9818239783c45ed28762656d41ed8e69b55b310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:40:8a:6f:99:92:7d:9d:39:40:a2:5d:9b:
                    70:f5:5f:64:0c:fb:b4:fa:56:d1:9b:4a:31:4d:d3:
                    87:89:e3:7b:24:13:b6:e2:d7:7f:6f:99:95:0b:73:
                    a4:84:10:da:4b:d5:34:8c:c9:f2:1f:e6:27:38:15:
                    d4:74:08:1a:04:01:66:fd:02:25:eb:b4:54:eb:66:
                    24:7a:9f:6e:01:f5:6d:31:00:da:bb:08:6b:82:85:
                    ad:d7:6d:8a:8f:14:64:04:4f:d3:a9:60:c7:81:83:
                    58:a1:f4:ae:10:1a:79:10:c2:d1:2a:a2:ab:1f:30:
                    0e:71:55:4e:b2:33:b2:94:f4:c4:99:1b:d3:31:a9:
                    3d:e1:23:90:95:f7:9f:a2:5e:23:3a:20:76:8c:00:
                    12:4a:af:08:20:c9:36:69:ef:fb:fd:4e:0e:b0:a6:
                    a8:1b:61:c2:14:01:3a:ff:26:69:56:b9:4b:90:c8:
                    45:ea:42:17:e9:f7:52:1d:43:48:5c:51:63:82:8d:
                    1b:7d:a7:13:62:1b:dd:06:ff:15:9b:3c:35:7d:12:
                    85:ba:2c:f1:15:57:58:2d:81:3c:4a:91:8b:d3:a3:
                    f5:8f:cd:eb:5c:91:e6:c5:a7:88:8b:d1:aa:c3:e7:
                    15:36:2b:ec:bc:ba:d3:f5:98:ae:67:ff:95:29:b3:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:82:39:78:3C:45:ED:28:76:26:56:D4:1E:D8:E6:9B:55:B3:10
            X509v3 Authority Key Identifier:
                keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:fc:20:b2:d6:fa:d0:aa:e3:27:69:b1:7b:78:dc:44:16:
         e4:69:81:7c:2e:f1:5c:3d:29:a8:4f:71:44:d1:55:62:00:a5:
         7d:8a:61:a1:96:a9:c9:c7:7f:5a:2e:76:11:ec:83:6e:2c:b6:
         01:78:a6:bd:ee:aa:64:d4:f7:ca:9a:7c:67:bf:f5:6a:f5:ea:
         ad:db:56:e8:5a:4d:17:9d:5f:c2:2a:a8:3f:de:e5:b0:d0:2b:
         60:9e:7e:75:b0:89:ea:1a:7e:7a:b8:9f:21:60:58:45:1a:e8:
         90:3d:cb:fc:b7:81:76:78:53:b6:7f:6f:da:56:75:a8:5b:a5:
         2c:a4:6a:88:28:73:dd:25:93:f6:b9:3f:27:19:59:f0:63:90:
         54:a4:d4:de:0d:55:09:09:a4:dc:59:a7:e4:1b:89:c8:9e:9b:
         d3:4c:56:b5:a4:f9:b5:9a:b7:cd:d5:60:d6:07:40:e1:2f:ca:
         d1:bb:4a:1d:46:7b:ee:49:85:1f:71:b6:af:e2:65:63:c8:91:
         4e:c6:9d:93:20:38:47:25:48:27:df:c7:fa:d9:70:cd:b5:d8:
         54:58:81:84:98:07:97:ea:ac:ef:32:69:e5:78:16:3e:07:01:
         b3:87:42:58:dd:59:e2:39:dc:05:08:4e:b0:1f:b1:c1:5a:8f:
         a4:8a:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:05:04 2025 by rpki-client