Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File:                     2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier:          1JCwcJyoYfUWvDX3hjyEJTQhyJTj6Tss0uPsB9xFQLU=
Subject key identifier:   8A:26:44:84:64:5D:0D:6E:1A:88:CA:9C:A4:45:04:AA:CD:91:32:D1
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer:       /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial:       01974C699155F594BE79426A400433461F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number:          09E6
Signing time:             Sat 07 Jun 2025 22:01:16 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:16 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:16 +0000
Files and hashes:         1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: 78iE/ePZDifEaT+52sKDLMbklquOyj2RomQuzAO3Gp8=)
                          2: Pz6k83CSFf4CwoCzfq-E_4QuJkM.roa (hash: Yi7bnBLtpl6BWUzAuBFtj4QFE/dVNDobJF3M3VD/k5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:91:55:f5:94:be:79:42:6a:40:04:33:46:1f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
        Validity
            Not Before: Jun  7 22:01:16 2025 GMT
            Not After : Jun  8 22:01:16 2025 GMT
        Subject: CN=8a264484645d0d6e1a88ca9ca44504aacd9132d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:f4:ef:ab:16:dc:0a:59:4a:fb:c6:0b:c8:
                    f2:40:dc:b9:b0:6e:93:d4:b9:79:36:12:ee:f0:1d:
                    12:1f:70:10:cc:da:6a:f0:02:95:24:fa:20:4f:0e:
                    1e:d5:e9:3e:48:e2:bf:a5:f8:d5:21:66:eb:a7:79:
                    64:33:ef:24:10:ec:e0:1d:cf:6b:99:67:bf:f2:17:
                    59:51:9b:16:a2:c0:40:89:0f:3a:ef:8d:b2:9d:28:
                    08:0c:3f:1d:be:db:f4:2b:b4:fb:58:e6:0c:d8:49:
                    61:4d:08:4b:3b:c7:20:0e:ce:31:13:74:be:41:f6:
                    37:03:fb:ef:27:92:2e:97:f6:89:0e:e6:51:29:c7:
                    a5:65:55:cb:4f:fe:8b:b0:1e:91:c8:df:44:6f:24:
                    7f:1b:46:f8:68:23:41:1f:ee:fd:37:ac:b6:58:4f:
                    57:fd:1b:2c:4b:93:aa:8d:6b:04:df:32:b8:1c:68:
                    0f:56:9d:60:41:e2:14:cd:7d:23:96:cc:58:90:01:
                    1e:bc:dc:14:40:e1:bf:3a:32:12:0e:32:15:b4:b5:
                    ac:94:8e:22:9c:60:18:ed:56:10:63:68:31:44:85:
                    ea:7f:14:3a:09:ef:9a:8a:a1:b2:1b:69:cd:0d:8e:
                    38:70:b5:42:45:83:b2:4f:bc:ac:cf:52:90:8f:2e:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:26:44:84:64:5D:0D:6E:1A:88:CA:9C:A4:45:04:AA:CD:91:32:D1
            X509v3 Authority Key Identifier:
                keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:ec:f9:8e:da:b6:f3:10:64:ea:e8:a9:28:97:99:a8:13:
         f7:65:e1:62:6f:31:f9:18:93:7b:cf:d5:4b:30:79:2f:b4:e2:
         11:57:ec:78:bf:12:45:1a:db:d5:78:30:5c:da:86:7f:63:ad:
         b2:86:93:b5:67:61:c5:52:99:4d:18:d3:96:8d:ea:9a:17:3a:
         55:dd:98:12:7f:66:c9:71:5a:14:36:a1:04:c2:a9:b4:6d:24:
         aa:f1:43:67:08:20:c1:da:cf:fa:aa:f8:ee:d8:b2:1a:93:a8:
         84:2b:fd:08:e1:de:ab:d2:90:96:d0:69:0e:82:07:c1:13:de:
         1c:55:46:6a:f8:26:84:22:47:e1:45:13:cf:5c:bf:bc:8b:de:
         19:9b:5c:99:ec:49:bd:05:d9:85:4e:56:2b:17:af:f5:2a:1e:
         16:2d:b2:61:e2:f9:d1:48:80:fa:7c:ec:14:0c:04:5b:9d:b9:
         50:01:90:d5:bf:dd:b8:a3:a1:4d:f4:09:50:db:92:b5:fe:ca:
         11:23:4f:e8:b7:9d:e7:00:98:bd:21:98:67:39:af:dd:bc:7e:
         e3:97:0c:4b:0a:27:25:b1:79:58:a0:01:41:d1:f1:28:32:3f:
         2b:dc:4d:31:78:51:ef:8c:72:77:a2:7e:7a:ae:95:20:b2:ef:
         cf:34:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:16:28 2025 by rpki-client