Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File:                     kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier:          m9thIEJFJ3TtO8+BPNwC0WRhJmLQ17rYh/CMf0RvMVM=
Subject key identifier:   7B:DB:E7:3E:6D:48:5A:5A:E0:21:51:4B:C6:EA:53:74:D6:7A:11:BC
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer:       /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial:       0198733D5FC4ECCC1BC897DC0544F8F32187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number:          04F1
Signing time:             Mon 04 Aug 2025 04:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:58 +0000
Files and hashes:         1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: zKc4flqWiyEPEAS6IXoCg5WrEJRlLwtKdusCia73loA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:5f:c4:ec:cc:1b:c8:97:dc:05:44:f8:f3:21:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
        Validity
            Not Before: Aug  4 04:00:58 2025 GMT
            Not After : Aug  5 04:00:58 2025 GMT
        Subject: CN=7bdbe73e6d485a5ae021514bc6ea5374d67a11bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:b7:d7:db:3c:05:dc:ac:a7:82:32:a0:2d:
                    ef:ef:be:5e:ae:bb:ee:f9:d4:8c:97:65:72:82:8c:
                    eb:d0:54:d9:a1:fc:35:41:77:93:8d:81:90:cb:4f:
                    66:8c:1e:75:12:79:49:24:95:75:3e:89:ea:77:13:
                    12:f0:df:fe:c7:8d:90:2d:1d:ed:0b:06:2c:d6:9b:
                    e0:a7:b6:10:d4:04:9e:72:67:4f:1a:28:39:de:16:
                    5e:46:15:bd:16:6a:3d:6b:ea:6d:ca:b9:1f:51:c9:
                    62:c7:ce:ae:68:d1:b3:b9:5e:c2:9b:91:56:5e:eb:
                    62:de:9d:b5:60:52:2c:0e:e7:b3:12:d0:9a:26:fb:
                    7d:20:b5:86:98:a7:bf:3d:a3:d3:1c:31:0c:be:c3:
                    32:27:0d:47:c8:38:fc:8f:73:6d:90:6b:31:11:86:
                    d0:dc:1c:6a:9d:11:d7:43:a6:c8:fe:ed:3e:b7:e8:
                    1e:4c:90:c2:ef:bf:6a:df:c3:63:34:6b:d7:29:98:
                    93:96:21:8e:ee:ed:61:75:99:d1:1f:62:5a:39:34:
                    a2:c6:dc:40:71:4d:ee:6c:f1:aa:dc:82:dc:bb:47:
                    e6:0e:c5:ee:5c:db:e1:98:27:d9:fb:18:30:10:3e:
                    8d:55:ad:9d:63:8a:f7:2d:78:bc:a5:5a:73:d3:fe:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:E7:3E:6D:48:5A:5A:E0:21:51:4B:C6:EA:53:74:D6:7A:11:BC
            X509v3 Authority Key Identifier:
                keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:fe:fa:f7:d9:e1:25:e3:b2:83:e5:79:b8:a0:cc:19:f1:
         46:fc:10:33:9b:44:8a:bd:64:bc:b0:ec:9c:b0:e1:4f:ae:97:
         cd:e5:1b:2a:0c:75:3e:f4:9b:20:42:3e:00:e7:f4:f4:a4:c0:
         61:ad:ec:0a:e7:ab:d3:c4:6f:c4:28:ae:ba:5e:05:c1:ee:d5:
         58:9c:59:9f:d3:b9:1f:b3:a5:b8:ed:ce:04:0a:49:69:36:5a:
         f7:f9:40:68:58:35:f9:5c:2e:30:8a:61:ae:52:bb:91:25:66:
         b8:5c:7a:91:fe:d5:d7:86:a3:3a:79:a9:b3:6f:11:26:84:53:
         ac:be:58:5a:a0:63:58:b0:65:0f:00:78:a1:f5:b7:33:12:66:
         28:d2:b2:9d:84:ed:3a:55:4c:87:41:4f:d3:a0:b9:e0:41:dc:
         a0:02:07:6d:02:ad:c5:7e:3d:7f:e1:4d:7a:b7:c8:5e:be:ab:
         00:01:2e:72:09:63:55:63:5b:ae:40:18:c7:f3:b6:29:65:cd:
         8b:03:c8:4f:da:5a:5d:5c:4f:96:14:ae:6a:bd:9f:17:18:bb:
         05:ef:7f:bd:2c:4b:5f:87:21:b5:4e:64:12:58:63:36:bc:3a:
         0d:df:cd:5a:bc:94:df:ed:74:b2:85:3a:b4:cb:b7:70:bd:60:
         a3:50:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:01 2025 by rpki-client