Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
File:                     kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft (raw, json)
Hash identifier:          JUS7v7A4mmbu5ojFLoKlLM+3EC2ERylzcL7ADPrfjnE=
Subject key identifier:   A2:F4:B7:4E:6D:DD:6C:D5:EA:94:5C:7B:89:F5:48:54:E1:8A:02:D4
Authority key identifier: 93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60
Certificate issuer:       /CN=932692e8eb740235501c11080900858e332f1060
Certificate serial:       01976C2AA9B87ECF88C92B062017C89F89D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
Manifest number:          10
Signing time:             Sat 14 Jun 2025 02:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:24 +0000
Files and hashes:         1: kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl (hash: IuIkQ5jQn7BsXB9+no28/0PJIwShOiO90uU/KIXhat8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a9:b8:7e:cf:88:c9:2b:06:20:17:c8:9f:89:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932692e8eb740235501c11080900858e332f1060
        Validity
            Not Before: Jun 14 02:00:24 2025 GMT
            Not After : Jun 15 02:00:24 2025 GMT
        Subject: CN=a2f4b74e6ddd6cd5ea945c7b89f54854e18a02d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:d7:96:c4:99:89:37:72:38:30:e0:53:d9:
                    2b:a5:6a:00:97:f9:0a:9d:9e:46:ff:02:1f:c8:29:
                    0a:ec:90:1a:be:95:5d:d9:41:bf:f8:ff:d4:94:5d:
                    ba:71:62:4a:b8:d5:bb:6f:cc:86:50:3c:d8:d7:49:
                    c3:fb:41:56:96:e1:f9:4c:5b:d5:ee:d8:f5:70:b9:
                    b4:76:34:31:0a:62:2b:40:71:2f:45:9a:4c:19:95:
                    af:ec:6d:1b:34:25:94:83:2e:5f:e7:f7:99:e5:24:
                    9e:a6:70:d7:af:3b:f4:8f:b3:2b:d2:85:c6:5e:a2:
                    cb:f6:dc:b7:07:4a:6e:a4:1e:6a:4f:20:35:05:7c:
                    ef:44:de:c1:0b:c6:75:dd:77:4f:0f:16:6e:79:98:
                    ed:ed:57:73:79:73:6e:40:90:c1:97:22:32:3e:48:
                    d9:18:7d:a2:a0:60:5b:a2:56:f5:e1:df:8d:c0:24:
                    94:8e:cd:19:5b:2f:d2:45:e5:32:9a:ab:83:5b:fc:
                    34:2c:75:ae:90:43:20:89:91:56:ea:16:b6:94:d3:
                    79:b0:70:df:e9:52:ab:96:7d:bd:b0:77:fb:09:40:
                    a0:d9:58:93:e5:c6:0f:04:18:76:0f:e1:ef:ec:f7:
                    63:32:78:2f:70:4b:5d:2a:b8:b7:5d:4c:18:85:b0:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:B7:4E:6D:DD:6C:D5:EA:94:5C:7B:89:F5:48:54:E1:8A:02:D4
            X509v3 Authority Key Identifier:
                keyid:93:26:92:E8:EB:74:02:35:50:1C:11:08:09:00:85:8E:33:2F:10:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyaS6Ot0AjVQHBEICQCFjjMvEGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/804c83-2bdd-4067-83f4-8f24c14af0ae/1/kyaS6Ot0AjVQHBEICQCFjjMvEGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:5b:3f:b4:e0:42:e8:21:4d:08:9c:50:44:54:d6:92:e4:
         ed:14:f0:b1:63:ce:d5:ee:78:5d:88:97:30:96:eb:97:1d:49:
         10:09:19:ad:c2:1d:ae:4c:d9:46:8f:cc:da:c0:3d:fa:70:30:
         42:26:f1:1c:ce:8d:82:a1:50:60:57:70:60:bf:47:11:72:33:
         16:38:89:70:72:45:32:38:80:01:59:25:6c:da:e8:59:1a:7f:
         df:88:b4:f1:fb:62:02:26:54:8b:9b:b4:3a:a1:c4:34:77:ac:
         9c:51:6f:08:cf:8d:7f:e0:79:d0:20:9e:77:6c:a9:4a:fc:1d:
         2a:98:32:d7:a9:2f:db:38:7b:0f:0e:c0:a2:f2:a4:25:6f:99:
         6d:65:ce:6c:bc:f5:4c:68:ed:f0:fe:42:22:d4:56:ad:fb:13:
         f5:8c:85:8d:04:8b:ed:fb:2b:88:ec:36:dc:8e:64:20:5b:23:
         98:ce:7d:e5:0e:f6:aa:ef:51:be:6c:90:2d:13:40:1e:53:6f:
         bd:e9:28:e6:72:df:30:44:ae:02:87:47:6c:00:86:1d:c4:5f:
         21:e7:b2:93:0e:b8:0c:96:b0:02:ae:d1:a7:e5:72:eb:65:cd:
         a4:f4:87:3d:9a:e2:cb:1b:fe:07:b6:da:95:e3:62:c3:c5:b9:
         27:97:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:17 2025 by rpki-client