Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          MZ11vRVsBiK8H9juOlYNWM43XgthDKxFyDRKyX8dK2s=
Subject key identifier:   53:46:10:B9:ED:CC:06:BB:97:5D:08:4C:52:9B:CD:AB:F4:0C:B0:34
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       16042D2E24116838E7FB7A93F400C61A995D09F1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          030A
Signing time:             Thu 26 Mar 2026 21:28:25 +0000
Manifest this update:     Thu 26 Mar 2026 21:23:23 +0000
Manifest next update:     Sat 28 Mar 2026 01:12:23 +0000
Files and hashes:         1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
                          2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: 5a/b+ib6cy0F+WQ1tmrwGMyThHUzOER20bfgc/NgcV8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:04:2d:2e:24:11:68:38:e7:fb:7a:93:f4:00:c6:1a:99:5d:09:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: Mar 26 21:23:23 2026 GMT
            Not After : Mar 28 01:12:23 2026 GMT
        Subject: CN=534610B9EDCC06BB975D084C529BCDABF40CB034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:26:4f:34:e4:e5:7f:d8:4d:15:63:6d:5b:
                    41:09:62:20:73:3b:4e:01:e0:23:03:22:f1:27:c5:
                    e1:3d:1a:fc:95:be:3f:18:be:a5:a4:0e:92:bd:a8:
                    17:35:3e:bd:0d:c0:26:95:d6:64:f0:44:b5:0c:cc:
                    f4:4e:84:63:d7:c3:2e:f5:d5:6b:6d:d2:79:85:f8:
                    a9:e2:b6:09:55:5c:21:f1:32:5c:62:2f:9a:a3:5b:
                    62:8f:ef:74:9f:8f:e6:c2:63:f1:09:73:b2:9e:69:
                    62:bb:df:65:b8:b1:ed:50:2a:56:f0:7d:ae:0b:d3:
                    92:7a:02:93:28:71:83:36:83:ab:42:25:2b:33:59:
                    d7:2f:b6:17:1a:95:7a:e5:e6:58:ea:83:72:a3:f8:
                    01:25:cf:97:ae:51:47:5e:d2:fa:d2:e6:e1:38:54:
                    25:59:20:6c:2a:0a:ac:d1:30:f3:dc:d8:cf:df:8f:
                    d7:80:45:0e:4f:91:dc:cb:a3:3c:6b:c1:45:97:8a:
                    c1:1e:2f:82:38:8a:a5:2a:3a:91:25:fe:cd:18:14:
                    7b:d7:5c:b6:59:0f:6d:ad:22:3b:9f:f6:f5:da:0d:
                    53:fc:92:3d:8c:23:e4:40:fe:6f:ad:40:f3:81:31:
                    c8:03:c7:fd:2e:85:91:fd:38:a7:f4:d1:a4:dd:fa:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:10:B9:ED:CC:06:BB:97:5D:08:4C:52:9B:CD:AB:F4:0C:B0:34
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:81:8d:3b:dd:30:9b:96:2f:de:76:98:47:bc:63:07:36:1b:
         28:c1:d5:7e:0f:96:1e:53:c2:b4:21:61:36:49:fb:01:cb:aa:
         1d:b2:d3:1b:03:58:ed:29:ee:c1:20:46:61:65:4f:b2:eb:3c:
         b5:52:9c:24:00:5d:04:61:ee:e8:b0:3b:67:ca:f2:10:f6:35:
         65:12:9b:46:6c:7b:c1:78:c2:6f:d0:20:8d:20:aa:83:40:e2:
         15:21:76:50:39:d1:2f:8f:28:93:0d:99:e6:bb:92:b0:a6:c0:
         6e:88:7f:12:3c:58:69:b5:70:33:55:3d:41:30:69:08:0d:05:
         37:71:57:4f:68:88:16:aa:27:d2:1b:11:d4:80:78:34:70:88:
         64:ea:03:78:6a:ec:fe:79:22:18:f0:c1:7a:a0:89:24:73:91:
         0b:e2:a4:d5:c1:1c:f9:0c:8f:a3:94:a7:3e:53:10:58:dc:fd:
         59:f7:17:55:9d:b3:34:a1:54:cc:25:e4:34:69:31:84:66:63:
         86:c1:e9:ce:a1:55:53:79:db:f6:12:58:4a:1c:37:9b:64:ef:
         91:f9:8f:d3:c6:83:3e:21:f2:29:6b:00:55:91:9d:3c:65:41:
         97:1b:16:1b:14:83:bc:30:fb:b3:f7:9b:bb:6c:c6:dc:c6:19:
         24:ec:66:d5
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUFgQtLiQRaDjn+3qT9ADGGpldCfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE
RUEwODc3NzAeFw0yNjAzMjYyMTIzMjNaFw0yNjAzMjgwMTEyMjNaMDMxMTAvBgNV
BAMTKDUzNDYxMEI5RURDQzA2QkI5NzVEMDg0QzUyOUJDREFCRjQwQ0IwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusCZPNOTlf9hNFWNtW0EJYiBz
O04B4CMDIvEnxeE9GvyVvj8YvqWkDpK9qBc1Pr0NwCaV1mTwRLUMzPROhGPXwy71
1Wtt0nmF+KnitglVXCHxMlxiL5qjW2KP73Sfj+bCY/EJc7KeaWK732W4se1QKlbw
fa4L05J6ApMocYM2g6tCJSszWdcvthcalXrl5ljqg3Kj+AElz5euUUde0vrS5uE4
VCVZIGwqCqzRMPPc2M/fj9eARQ5PkdzLozxrwUWXisEeL4I4iqUqOpEl/s0YFHvX
XLZZD22tIjuf9vXaDVP8kj2MI+RA/m+tQPOBMcgDx/0uhZH9OKf00aTd+v27AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUU0YQue3MBruXXQhMUpvNq/QMsDQwHwYDVR0j
BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv
QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD
RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl
MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4
RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAISBjTvdMJuWL952mEe8
Ywc2GyjB1X4Plh5TwrQhYTZJ+wHLqh2y0xsDWO0p7sEgRmFlT7LrPLVSnCQAXQRh
7uiwO2fK8hD2NWUSm0Zse8F4wm/QII0gqoNA4hUhdlA50S+PKJMNmea7krCmwG6I
fxI8WGm1cDNVPUEwaQgNBTdxV09oiBaqJ9IbEdSAeDRwiGTqA3hq7P55IhjwwXqg
iSRzkQvipNXBHPkMj6OUpz5TEFjc/Vn3F1WdszShVMwl5DRpMYRmY4bB6c6hVVN5
2/YSWEocN5tk75H5j9PGgz4h8ilrAFWRnTxlQZcbFhsUg7ww+7P3m7tsxtzGGSTs
ZtU=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:42:34 2026 by rpki-client