Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File:                     RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier:          wH06phrK6IOa5GG/xByNB5tXFuf/GH8Sao9VmewRbm8=
Subject key identifier:   BD:BC:51:50:13:A8:74:D9:40:DE:8C:3D:E9:5F:90:BD:08:2F:49:4F
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       01987DC14FC15492BF2947C6491760389A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number:          1453
Signing time:             Wed 06 Aug 2025 05:01:17 +0000
Manifest this update:     Wed 06 Aug 2025 05:01:17 +0000
Manifest next update:     Thu 07 Aug 2025 05:01:17 +0000
Files and hashes:         1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: 9Za9DkeoZ/QJsc8+PQFFXyiSfj1us9RZyIJsSDH7GMA=)
                          2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c1:4f:c1:54:92:bf:29:47:c6:49:17:60:38:9a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Aug  6 05:01:17 2025 GMT
            Not After : Aug  7 05:01:17 2025 GMT
        Subject: CN=bdbc515013a874d940de8c3de95f90bd082f494f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:42:c4:86:7c:ae:71:3e:4e:fd:a1:9d:93:
                    08:83:21:a9:9c:e6:c3:98:36:71:8a:03:5d:22:f2:
                    d5:ea:fa:c3:6b:43:e9:9c:91:16:47:7c:31:5a:2a:
                    12:de:b7:ac:8d:0c:ea:37:72:66:28:d0:19:a1:12:
                    a6:59:4d:a1:dc:0c:64:00:09:92:c9:3d:62:f0:e7:
                    fe:17:37:6f:55:55:79:f4:65:9c:8d:34:0d:c6:55:
                    ea:0a:6b:3a:33:0f:77:30:c1:ca:40:ff:18:99:47:
                    d3:c5:ad:30:a2:ad:67:b0:4b:19:c7:1f:ee:4a:41:
                    a3:7c:46:bb:44:00:c2:10:5e:5c:f1:1f:5c:c8:b3:
                    28:52:f1:00:97:60:c4:a5:be:34:12:95:1e:d4:69:
                    a4:d8:0a:47:aa:a1:40:5f:77:95:1d:87:a5:ce:03:
                    b5:15:68:52:aa:49:a8:76:d5:5b:d6:9c:a5:f9:3a:
                    4f:96:64:3d:d0:7c:7b:36:0d:96:3b:1b:ab:b1:a1:
                    72:d6:cd:1d:cd:d4:0c:2e:ca:38:cb:b9:4e:5c:a5:
                    a4:31:5a:10:72:2a:89:41:ac:be:21:30:f1:b2:c4:
                    a9:f4:3a:30:b1:f7:5e:97:44:1a:2f:86:6e:90:6b:
                    fa:cd:94:4f:b4:00:e4:fc:c0:af:c1:a2:39:a6:cd:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:51:50:13:A8:74:D9:40:DE:8C:3D:E9:5F:90:BD:08:2F:49:4F
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:e7:4e:2a:75:d1:8c:38:37:fa:97:52:96:e5:f4:08:dd:
         ee:15:85:36:e4:e2:a0:91:d7:d8:05:f8:c8:70:a4:4b:bf:68:
         15:66:ea:1e:35:5c:2b:41:03:89:f7:b2:29:c2:97:37:88:be:
         c0:81:14:7f:e0:26:6e:ea:63:03:be:f5:49:1f:35:36:80:c4:
         a7:83:5f:87:f5:a1:ea:ca:a4:ff:2a:9a:45:fe:02:67:69:04:
         7a:ae:dd:61:e0:5f:7a:54:0d:45:e1:46:e0:f4:98:59:a9:92:
         5a:38:8c:b1:8d:18:07:a5:28:ac:0f:cf:26:ef:f2:98:bc:45:
         5c:d2:92:73:20:09:4c:10:9f:cf:df:d9:6b:e5:9f:d7:ae:68:
         e2:53:f4:8f:3d:0d:a1:e9:17:92:50:37:4f:75:bd:6c:35:b4:
         64:06:f3:a2:cc:ac:87:c0:fe:d7:80:f6:55:f2:72:ef:7b:c9:
         e1:0e:fe:07:53:82:78:49:a8:90:65:85:79:57:63:d7:19:7f:
         c4:56:ce:ae:f0:af:90:86:69:e8:ad:0d:f4:9f:43:f1:b8:3a:
         b6:5a:e5:91:86:a3:62:4b:65:d0:dd:c1:f8:00:e6:08:83:ea:
         43:18:27:e5:30:57:4c:c2:38:b7:05:96:26:05:3c:7a:e1:87:
         93:8d:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:02 2025 by rpki-client