Manifest

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          EQTEQI8j7Iq7ZBb9UQw1mNwqXCEfKxbT9ssNsXr46Ic=
Subject key identifier:   50:D6:B5:62:75:D1:7A:01:30:F7:A4:90:B5:D6:36:71:4E:30:8E:DA
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       128472A16F7EA8276E9229864FF216D252841827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0403
Signing time:             Tue 13 Oct 2026 19:00:11 +0000
Manifest this update:     Tue 13 Oct 2026 18:55:09 +0000
Manifest next update:     Wed 14 Oct 2026 22:05:09 +0000
Files and hashes:         1: AS205789.asa (hash: /7z1VFs/12FI71f+ipRY/+yO7m103RFsrpd08AesJSw=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: HUZ/BJ+KRnh9yS4b7lu+66v1w6Xkw1AsC9B1SNfwVN0=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:84:72:a1:6f:7e:a8:27:6e:92:29:86:4f:f2:16:d2:52:84:18:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Oct 13 18:55:09 2026 GMT
            Not After : Oct 14 22:05:09 2026 GMT
        Subject: CN=50D6B56275D17A0130F7A490B5D636714E308EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:3c:5e:33:f2:9b:58:e8:83:80:d3:1f:62:
                    9e:67:cc:67:bd:17:1f:d8:92:7c:7b:4d:44:a3:13:
                    34:c8:4b:32:be:ac:02:a1:8e:73:03:36:34:40:5a:
                    02:ce:88:bd:44:50:cf:9f:80:9a:cc:60:2c:54:b2:
                    12:80:ca:e6:6b:46:08:80:7d:8a:96:43:46:06:24:
                    7e:cc:bf:da:9d:51:f0:7a:a5:88:3c:a3:fc:fa:c7:
                    66:27:cd:9b:d8:d1:49:bf:a3:a7:d8:5b:e2:bd:84:
                    5a:10:3e:a5:1c:74:d7:1f:ec:b8:bf:40:6f:6f:c0:
                    5f:c9:fd:65:94:b2:f3:9f:c3:a6:93:9c:a0:05:5a:
                    a0:f4:39:dc:a4:b7:a8:eb:d5:db:d9:10:37:b7:f0:
                    82:d0:4e:5f:93:b7:1d:4c:31:8e:16:09:42:69:8c:
                    bb:38:92:89:e7:30:f9:42:82:f1:b2:77:8c:17:62:
                    07:b9:03:32:af:f6:aa:82:43:e6:98:6b:19:79:a7:
                    95:65:fe:b6:6e:04:e8:7c:4f:75:0c:24:75:76:bb:
                    1e:90:79:3e:49:5c:ee:77:36:a0:ae:a9:ad:d2:14:
                    4a:cb:90:fc:fa:e8:85:98:bf:0c:46:03:8a:30:8c:
                    3b:ff:dc:ff:a5:7b:80:ee:53:0b:a2:09:eb:7f:6c:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D6:B5:62:75:D1:7A:01:30:F7:A4:90:B5:D6:36:71:4E:30:8E:DA
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b1:69:a4:87:63:b0:25:46:b6:2c:bd:a5:8f:2a:b1:be:23:
         b0:3d:02:2f:5c:59:03:ad:6d:f6:ec:4b:60:66:fc:05:b8:37:
         b3:f2:71:89:fb:76:25:c6:86:62:3e:05:c5:35:56:e6:bb:b9:
         20:c1:05:95:7b:4b:60:63:09:5a:86:3d:a6:64:71:5e:27:dc:
         92:bb:1f:02:27:cc:70:6f:1c:27:de:c0:06:d5:fe:92:f5:8b:
         b5:a0:c1:bd:f1:21:88:32:5c:4a:69:60:ee:02:a0:39:60:d3:
         cb:21:d7:a7:54:0f:63:11:cf:ca:ea:0f:8b:6d:37:24:28:c8:
         66:d7:4f:36:87:40:58:4c:77:25:88:80:2c:b0:82:90:92:44:
         29:29:f7:97:15:c7:50:08:7a:b5:14:fa:c8:f3:a1:ef:68:4c:
         b9:2d:81:ba:11:a4:ad:e8:cf:5c:91:51:f8:00:c2:b0:54:fb:
         54:fe:45:21:79:9e:e6:d4:9d:ce:16:4d:af:7f:25:0b:2a:ad:
         bb:cb:12:94:a0:80:ee:a8:ad:c0:29:43:92:5d:de:16:9a:c7:
         29:3b:bf:cc:d1:53:a1:7c:3b:80:a1:95:0e:8e:af:4b:61:27:
         48:41:4f:e9:1e:8f:7b:f8:a4:06:af:72:36:cb:6a:d4:ef:38:
         a3:14:ec:da
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEoRyoW9+qCdukimGT/IW0lKEGCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNTFkNzc2M2U0ZTZiYzQ0ODg3YTc4NzNjNDQyNTgw
YTk1MjgzMzAeFw0yNjEwMTMxODU1MDlaFw0yNjEwMTQyMjA1MDlaMDMxMTAvBgNV
BAMTKDUwRDZCNTYyNzVEMTdBMDEzMEY3QTQ5MEI1RDYzNjcxNEUzMDhFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAjxeM/KbWOiDgNMfYp5nzGe9
Fx/Yknx7TUSjEzTISzK+rAKhjnMDNjRAWgLOiL1EUM+fgJrMYCxUshKAyuZrRgiA
fYqWQ0YGJH7Mv9qdUfB6pYg8o/z6x2YnzZvY0Um/o6fYW+K9hFoQPqUcdNcf7Li/
QG9vwF/J/WWUsvOfw6aTnKAFWqD0Odykt6jr1dvZEDe38ILQTl+Ttx1MMY4WCUJp
jLs4konnMPlCgvGyd4wXYge5AzKv9qqCQ+aYaxl5p5Vl/rZuBOh8T3UMJHV2ux6Q
eT5JXO53NqCuqa3SFErLkPz66IWYvwxGA4owjDv/3P+le4DuUwuiCet/bBzHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUUNa1YnXRegEw96SQtdY2cU4wjtowHwYDVR0j
BBgwFoAUFhUdd2Pk5rxEiHp4c8RCWAqVKDMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzEv
MTYxNTFENzc2M0U0RTZCQzQ0ODg3QTc4NzNDNDQyNTgwQTk1MjgzMy5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ZoVWRkMlBrNXJ4RWlIcDRjOFJDV0FxVktETS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wYTQ2MzdkZjViYTc0M2Zl
YTFiNDgyYmU4MjM1ODE4Zi8xLzE2MTUxRDc3NjNFNEU2QkM0NDg4N0E3ODczQzQ0
MjU4MEE5NTI4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxsWmkh2OwJUa2LL2ljyqxviOwPQIvXFkD
rW327EtgZvwFuDez8nGJ+3YlxoZiPgXFNVbmu7kgwQWVe0tgYwlahj2mZHFeJ9yS
ux8CJ8xwbxwn3sAG1f6S9Yu1oMG98SGIMlxKaWDuAqA5YNPLIdenVA9jEc/K6g+L
bTckKMhm1082h0BYTHcliIAssIKQkkQpKfeXFcdQCHq1FPrI86HvaEy5LYG6EaSt
6M9ckVH4AMKwVPtU/kUheZ7m1J3OFk2vfyULKq27yxKUoIDuqK3AKUOSXd4Wmscp
O7/M0VOhfDuAoZUOjq9LYSdIQU/pHo97+KQGr3I2y2rU7zijFOza
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:40:08 2026 by rpki-client