Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File:                     ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier:          hpLMu8V44mZMGgNPizoGdlXmFWj4dSpNYhbUdBsYXbw=
Subject key identifier:   AD:67:06:EB:64:93:64:2E:8A:BC:78:8B:08:E0:38:03:7F:59:E2:24
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer:       /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial:       019765F1CD542B9EF1FEAE061493524382F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number:          0880
Signing time:             Thu 12 Jun 2025 21:00:34 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:34 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:34 +0000
Files and hashes:         1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: UnojNS3yqWXXYDWSGvnelm1a4V7Z16yKGWj6/H+2fHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:cd:54:2b:9e:f1:fe:ae:06:14:93:52:43:82:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
        Validity
            Not Before: Jun 12 21:00:34 2025 GMT
            Not After : Jun 13 21:00:34 2025 GMT
        Subject: CN=ad6706eb6493642e8abc788b08e038037f59e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:12:e6:86:b4:33:cc:0f:15:97:e8:39:56:
                    d2:88:c6:6a:31:44:fc:be:35:a3:6a:5f:53:1b:25:
                    ea:87:41:09:2f:ee:6d:e4:0d:41:d8:b5:92:97:af:
                    ba:97:e2:4f:67:86:20:c5:23:43:f9:62:7b:b7:43:
                    0c:3a:4d:0d:fd:57:22:3f:42:00:01:14:fb:0f:39:
                    b0:e8:07:cc:c6:91:94:52:b7:5e:6c:6d:1b:19:bc:
                    1e:2e:5f:fe:9b:72:73:14:5b:12:be:2c:66:82:a0:
                    5d:6d:58:a4:b8:60:ed:db:a8:6b:eb:3f:18:9f:6b:
                    ee:4b:90:00:92:1a:d4:aa:6c:73:10:3e:a4:41:8d:
                    1b:f3:c1:60:f1:72:62:21:65:e1:f4:6a:e8:4b:e9:
                    b8:54:aa:11:f5:bf:49:e0:13:88:00:b1:c7:ae:8b:
                    96:b7:ab:7d:3d:3b:30:33:38:a5:d9:65:ee:9b:24:
                    05:77:8b:69:97:3b:24:88:65:29:1f:39:f7:d4:6e:
                    54:49:90:e7:af:b5:08:34:74:c6:a8:58:27:93:36:
                    74:85:54:be:f1:98:c9:d5:47:5d:3a:47:bf:74:b3:
                    47:8f:40:08:b1:54:cd:4b:13:67:d8:5c:43:34:88:
                    fd:a7:a1:10:ff:cc:6a:58:aa:dd:a8:88:68:95:ac:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:67:06:EB:64:93:64:2E:8A:BC:78:8B:08:E0:38:03:7F:59:E2:24
            X509v3 Authority Key Identifier:
                keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:64:38:8b:2d:4d:8e:85:65:5e:5e:df:12:28:a5:9c:16:
         d7:8e:0e:42:8e:82:62:7b:33:74:a5:b2:0b:57:df:94:b0:7c:
         d7:4e:db:29:41:7d:53:91:0b:1a:df:b0:8a:53:e9:81:64:0e:
         0f:7a:1c:a1:f4:0f:b6:84:7c:29:dd:49:ae:f7:f4:fc:b1:39:
         d4:bc:f5:d8:cb:c3:0a:74:38:e3:c3:17:4a:13:cb:8d:71:b0:
         06:65:b4:a7:02:16:bb:4c:42:e6:ec:fe:69:ba:d1:b5:71:3c:
         3a:8e:73:3e:00:18:e0:fb:a7:73:56:4e:c9:c9:6e:0c:f1:06:
         fd:1d:cd:13:d4:0f:41:6d:81:12:ff:4e:3c:f0:c5:ba:35:1d:
         6a:d8:75:36:61:be:3d:b2:bc:29:50:7d:4d:16:67:b4:73:b4:
         ed:ac:46:28:6c:79:38:7c:ba:af:60:96:1d:fc:52:39:c0:c5:
         ca:fd:67:7d:75:e0:72:29:1a:9c:2c:a0:77:95:67:dd:a6:35:
         e2:3a:4d:27:6c:79:80:fb:bf:35:83:c1:13:26:2a:fa:52:0e:
         03:99:76:00:0c:16:33:9d:1e:65:be:3d:1f:4b:30:d7:41:ed:
         5c:2d:85:4e:ee:85:75:bb:92:65:10:7c:93:25:27:32:c3:59:
         61:37:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:57:55 2025 by rpki-client