Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          9mWW4+rWr3vlNvtLdzjvC9gviMnTgJM+NsIOC1EoVuY=
Subject key identifier:   6F:3B:B7:76:12:EB:8B:12:3E:4D:D3:EE:64:47:00:FE:31:2F:95:EC
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       37C4E29FED16F8C7128BC0E6E2FEC5F699D67EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0258
Signing time:             Sun 19 Oct 2025 11:24:50 +0000
Manifest this update:     Sun 19 Oct 2025 11:19:50 +0000
Manifest next update:     Mon 20 Oct 2025 12:54:50 +0000
Files and hashes:         1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: uZV6oqkwUkCJkk908wPd99WwWpbwvo6UYeKjYWSbVP8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c4:e2:9f:ed:16:f8:c7:12:8b:c0:e6:e2:fe:c5:f6:99:d6:7e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Oct 19 11:19:50 2025 GMT
            Not After : Oct 20 12:54:50 2025 GMT
        Subject: CN=6F3BB77612EB8B123E4DD3EE644700FE312F95EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:a8:08:3e:9a:ce:0a:14:62:fe:48:1b:7b:
                    96:a8:d2:d5:bc:f3:58:4c:b5:41:50:3c:88:22:66:
                    96:23:14:00:4f:47:65:8f:f5:4b:23:34:da:b6:f2:
                    ab:c0:ab:57:6a:6c:5b:d7:60:d5:8d:c7:80:26:d4:
                    d0:e8:07:f4:69:55:ce:cc:f1:2a:ee:f8:6f:b7:43:
                    d7:47:6c:02:4e:bd:a5:da:e9:39:a3:a7:ed:f6:e9:
                    fb:08:e7:19:d8:00:ab:25:b1:cb:59:61:bc:86:e6:
                    41:fe:14:71:a8:b7:f6:a5:fd:6e:7b:84:0a:b5:33:
                    ac:34:10:67:ef:fd:02:3b:c2:9b:25:3f:c4:2d:d1:
                    8b:5a:36:ec:f1:30:6c:89:7e:5f:df:b7:b2:3a:e7:
                    95:3f:fe:2f:21:cb:b4:05:eb:b1:0b:56:41:9c:f4:
                    09:eb:e0:e0:8a:bd:04:69:13:3a:c8:68:ee:2c:e7:
                    04:cc:c6:03:98:f5:cd:a9:63:87:72:da:d7:33:a1:
                    eb:51:23:66:9a:19:f6:7b:43:96:94:44:a0:03:23:
                    0d:55:00:8f:8a:0e:44:be:73:c5:ea:db:60:e9:7f:
                    62:5f:f1:3f:0b:c5:fd:f3:a1:6a:0c:6a:cf:6e:6c:
                    40:9c:cc:0f:e7:56:cb:06:a9:a3:c2:78:0d:d3:9d:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3B:B7:76:12:EB:8B:12:3E:4D:D3:EE:64:47:00:FE:31:2F:95:EC
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:4b:16:f0:fa:d2:51:5f:36:ba:81:77:4d:16:b3:24:86:
         64:78:e5:a1:e3:72:b9:36:6a:8b:74:dd:58:d7:d9:52:fe:8d:
         5c:cb:1a:76:17:c1:b2:d4:51:ef:ba:df:8f:c6:81:2b:db:ef:
         dc:28:ba:b9:0b:27:e9:a2:62:c8:17:23:d4:a1:16:00:f1:34:
         59:41:97:2e:5b:ce:25:c2:e4:81:c0:3e:9e:af:dc:99:31:95:
         84:be:68:14:5a:94:23:ba:62:37:50:36:9b:7c:3d:e0:71:6a:
         8a:6f:4c:e9:cb:fb:bd:d0:d0:76:59:59:f2:fa:42:0a:0f:fd:
         a8:f1:ec:87:40:a5:88:95:3f:30:25:ca:73:11:42:e4:ee:a5:
         5c:f9:04:50:0d:c4:7d:11:50:7c:6b:9b:7d:09:25:06:76:46:
         f6:c6:4e:c2:0b:5b:d0:45:87:b9:55:61:78:d3:a2:7c:3c:ab:
         f9:08:d0:93:38:d9:dd:fb:0e:c7:80:00:28:6a:75:5f:47:62:
         f5:73:82:8d:e4:2e:f9:a1:db:c1:f7:ac:bf:6f:c1:cb:71:f3:
         00:14:a5:07:e0:f5:ad:13:28:22:5a:d3:82:d8:45:32:90:31:
         67:cb:1a:c5:9a:10:a8:79:6a:4c:32:6a:05:66:ef:40:cd:f8:
         37:39:8d:11
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUN8Tin+0W+McSi8Dm4v7F9pnWftswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNTFkNzc2M2U0ZTZiYzQ0ODg3YTc4NzNjNDQyNTgw
YTk1MjgzMzAeFw0yNTEwMTkxMTE5NTBaFw0yNTEwMjAxMjU0NTBaMDMxMTAvBgNV
BAMTKDZGM0JCNzc2MTJFQjhCMTIzRTRERDNFRTY0NDcwMEZFMzEyRjk1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhKgIPprOChRi/kgbe5ao0tW8
81hMtUFQPIgiZpYjFABPR2WP9UsjNNq28qvAq1dqbFvXYNWNx4Am1NDoB/RpVc7M
8Sru+G+3Q9dHbAJOvaXa6Tmjp+326fsI5xnYAKslsctZYbyG5kH+FHGot/al/W57
hAq1M6w0EGfv/QI7wpslP8Qt0YtaNuzxMGyJfl/ft7I655U//i8hy7QF67ELVkGc
9Anr4OCKvQRpEzrIaO4s5wTMxgOY9c2pY4dy2tczoetRI2aaGfZ7Q5aURKADIw1V
AI+KDkS+c8Xq22Dpf2Jf8T8Lxf3zoWoMas9ubECczA/nVssGqaPCeA3TnWW5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbzu3dhLrixI+TdPuZEcA/jEvlewwHwYDVR0j
BBgwFoAUFhUdd2Pk5rxEiHp4c8RCWAqVKDMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzEv
MTYxNTFENzc2M0U0RTZCQzQ0ODg3QTc4NzNDNDQyNTgwQTk1MjgzMy5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ZoVWRkMlBrNXJ4RWlIcDRjOFJDV0FxVktETS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wYTQ2MzdkZjViYTc0M2Zl
YTFiNDgyYmU4MjM1ODE4Zi8xLzE2MTUxRDc3NjNFNEU2QkM0NDg4N0E3ODczQzQ0
MjU4MEE5NTI4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtnUsW8PrSUV82uoF3TRazJIZkeOWh43K5
NmqLdN1Y19lS/o1cyxp2F8Gy1FHvut+PxoEr2+/cKLq5CyfpomLIFyPUoRYA8TRZ
QZcuW84lwuSBwD6er9yZMZWEvmgUWpQjumI3UDabfD3gcWqKb0zpy/u90NB2WVny
+kIKD/2o8eyHQKWIlT8wJcpzEULk7qVc+QRQDcR9EVB8a5t9CSUGdkb2xk7CC1vQ
RYe5VWF406J8PKv5CNCTONnd+w7HgAAoanVfR2L1c4KN5C75odvB96y/b8HLcfMA
FKUH4PWtEygiWtOC2EUykDFnyxrFmhCoeWpMMmoFZu9Azfg3OY0R
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:08 2025 by rpki-client