Manifest

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
File:                     B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json)
Hash identifier:          Mv4MHgei+c0zH1dx99L7DRDTMdap0QzLIv721YsAgBE=
Subject key identifier:   99:74:6C:A5:17:0E:2B:67:0F:84:26:00:3E:DA:93:CB:85:2A:0C:B8
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       4E4EEC4334159A54E086ED1B014E019616185B07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
Manifest number:          03FF
Signing time:             Tue 13 Oct 2026 01:24:02 +0000
Manifest this update:     Tue 13 Oct 2026 01:19:01 +0000
Manifest next update:     Wed 14 Oct 2026 03:19:01 +0000
Files and hashes:         1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: vSJfPsrpaAl9b7WghsiXA66PKsTY/odtagve2McGD7w=)
                          2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nO1YT0HdU2m72ueMZYtU7pGui3eQWYc9n6VJnhvZh24=)
                          3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 4QQNsk8lBa8O942cPNbgOsUIiLitH/4e3K7Oj090cpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:ec:43:34:15:9a:54:e0:86:ed:1b:01:4e:01:96:16:18:5b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Oct 13 01:19:01 2026 GMT
            Not After : Oct 14 03:19:01 2026 GMT
        Subject: CN=99746CA5170E2B670F8426003EDA93CB852A0CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:56:54:4f:1b:81:3d:33:ea:ff:8f:51:f6:
                    21:9d:48:75:48:2a:1d:b1:5c:05:24:0c:11:5c:b0:
                    21:77:06:e7:66:fd:a1:4b:39:1c:cf:6e:7d:65:95:
                    13:04:45:33:07:64:57:a2:cd:4a:5a:a7:8c:1c:9e:
                    00:f8:2b:aa:68:ff:bc:fa:e7:00:84:81:97:2e:dd:
                    17:30:dc:3c:66:0a:d4:6d:13:8c:4f:98:ad:6d:1a:
                    c6:1b:72:c1:0b:2c:80:a7:c2:35:bb:7e:f1:eb:58:
                    0e:3c:9f:3d:22:4e:89:cb:df:42:cd:9f:1a:6e:86:
                    cb:a8:ef:33:21:61:7f:35:c3:40:93:ec:3d:9b:ec:
                    29:fe:c9:42:e3:e7:b1:1e:2e:15:77:1a:33:8d:42:
                    a9:46:f5:00:35:f8:46:b7:b4:85:24:32:c1:34:f4:
                    3e:38:78:eb:5a:20:52:ed:01:f4:95:8c:33:b4:0b:
                    65:c5:dd:19:12:57:ce:3a:1c:f3:c7:76:10:8e:1e:
                    c5:f4:31:0a:8c:19:89:aa:b2:fb:95:91:12:d6:06:
                    d5:24:2d:4b:9f:f5:62:71:a6:02:0f:59:03:bc:a2:
                    6e:19:1e:f8:b7:c3:ef:b3:84:69:1a:93:08:cc:f6:
                    7c:04:a8:2f:e8:37:e0:38:fa:e4:14:25:88:dd:8b:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:74:6C:A5:17:0E:2B:67:0F:84:26:00:3E:DA:93:CB:85:2A:0C:B8
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:ff:65:65:32:af:a3:6d:c4:1e:ce:bf:53:b0:12:d8:4a:
         42:92:ff:0b:3a:9f:f6:69:10:19:e0:9c:a7:bd:5f:09:f6:7a:
         a1:9f:7e:de:f2:1d:da:e4:47:eb:e7:f1:ec:cf:a6:49:6f:b5:
         0e:39:3e:5e:7f:03:0a:ac:9d:d1:fa:0e:f0:24:a0:3a:cf:18:
         1e:73:39:73:4c:3d:af:69:f4:9f:44:46:cc:ca:79:ca:a9:eb:
         8a:02:d0:ab:c6:9b:a2:91:f5:c7:a6:7f:0d:c4:64:ad:fb:bd:
         b2:85:04:42:f9:ec:4a:e4:82:51:de:db:e7:d6:66:18:3b:ef:
         58:d8:c7:5e:1a:df:2d:6f:1c:b1:b7:14:23:82:e8:fe:48:1a:
         13:5b:3f:76:3c:f6:f3:00:49:4d:ef:da:a3:8c:73:60:22:47:
         7c:21:67:38:31:58:c2:db:0a:ef:63:60:8c:3d:fd:35:93:33:
         77:81:68:8c:1d:4d:cd:1e:a6:e8:86:20:d5:20:0b:7c:7f:e1:
         e2:87:e8:db:9c:ff:fa:4f:ec:6d:00:3f:25:23:e3:fd:f1:68:
         6a:8a:29:91:b5:02:ea:2d:be:eb:3b:89:90:08:ac:a1:76:24:
         59:88:ee:22:f2:f4:ea:46:e9:ad:69:41:b4:b4:7f:ee:2d:bf:
         d0:46:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:42:35 2026 by rpki-client