Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File:                     941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier:          6FlilrV+KDmxVVfAOxnQzPM/4zpP31HnafrXTMvQOlw=
Subject key identifier:   6F:61:99:2B:46:5D:13:4C:45:F2:A9:50:CD:C8:13:95:2B:CF:30:08
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer:       /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial:       770BCB19A4C94456169FD27A967CA84C9AB3DC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number:          0307
Signing time:             Wed 25 Mar 2026 18:07:24 +0000
Manifest this update:     Wed 25 Mar 2026 18:02:22 +0000
Manifest next update:     Thu 26 Mar 2026 18:47:22 +0000
Files and hashes:         1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: BcbNxNeKwLbe8Mr6YzR7uDUj30E8gKJrMuqedhHaKLk=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0b:cb:19:a4:c9:44:56:16:9f:d2:7a:96:7c:a8:4c:9a:b3:dc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
        Validity
            Not Before: Mar 25 18:02:22 2026 GMT
            Not After : Mar 26 18:47:22 2026 GMT
        Subject: CN=6F61992B465D134C45F2A950CDC813952BCF3008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:1c:0d:c9:92:bd:bb:05:6c:6e:a6:d0:a7:
                    7f:2a:34:f6:71:99:67:e4:9c:0a:af:0c:05:67:80:
                    6e:c2:34:58:28:69:57:98:df:98:68:2f:14:8f:f9:
                    dd:11:be:57:e7:4b:63:7d:ac:c5:07:19:5a:0f:85:
                    8b:bf:29:c0:18:29:93:43:8f:02:aa:5b:03:0b:83:
                    24:21:05:19:66:97:89:c1:c7:60:6f:0c:4b:50:26:
                    6d:5f:7f:6a:a6:00:bf:a6:f3:b5:30:4f:42:5b:97:
                    2c:12:5e:b6:d7:8e:f0:0e:f2:e3:9b:dc:4b:cd:2d:
                    c4:5f:e6:c1:c5:24:6a:1d:ba:24:6a:a1:0d:cd:d1:
                    57:6e:00:15:5a:da:44:15:a8:b9:16:f2:13:bc:e8:
                    98:b6:34:a4:b4:67:fb:22:d6:fa:53:85:7f:7c:00:
                    22:ab:5d:25:83:59:ca:b3:58:56:8e:0a:40:7a:04:
                    a9:36:5b:1e:3d:ae:79:21:c8:6e:e8:bc:a6:84:a7:
                    06:da:17:3e:d5:a9:07:12:67:a6:07:e8:76:c4:f1:
                    43:a0:f7:6b:90:27:2d:e1:ad:33:0d:28:bf:31:5e:
                    86:eb:0e:71:40:1a:0b:79:11:e5:f3:be:42:6a:b4:
                    24:0a:b2:7b:6d:68:a9:92:fe:2d:0b:1f:a0:a4:f1:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:61:99:2B:46:5D:13:4C:45:F2:A9:50:CD:C8:13:95:2B:CF:30:08
            X509v3 Authority Key Identifier:
                keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:1e:7c:ba:ec:88:78:53:67:da:3b:d4:ab:79:1c:b2:08:
         0a:65:2b:25:e3:d5:b8:08:84:c8:d8:30:01:a3:c5:b1:2d:af:
         22:79:17:d8:3b:bf:07:bc:39:aa:39:70:32:08:1a:b0:eb:b1:
         20:c9:c8:a1:79:24:22:7a:41:35:88:13:61:b5:49:5e:fd:c4:
         f2:80:01:d8:75:5b:7a:7a:71:3a:d5:56:4e:d0:65:63:37:6b:
         bd:43:bc:15:b9:a1:54:2e:4b:57:f2:2c:6e:6f:d2:7e:1f:ad:
         a9:d2:2c:54:53:c2:e2:95:17:fa:e8:36:fa:35:78:b8:82:91:
         6a:24:c5:f6:eb:91:4d:fd:0e:32:22:11:f2:7e:9e:5c:9a:24:
         c9:9a:9b:54:49:b5:0a:3a:b7:a8:13:59:67:36:c2:77:35:9e:
         ce:b0:5c:6d:36:a7:89:1b:df:ce:2e:c4:a4:16:fd:2e:80:c8:
         e8:74:bb:dd:e3:74:3f:47:81:3c:24:57:be:2d:aa:2e:56:67:
         58:66:32:6c:83:4d:38:83:32:7b:6e:d7:be:12:b6:a8:03:cb:
         75:a5:06:3d:7b:e9:48:39:81:de:df:c1:44:63:1d:d5:0f:27:
         36:5c:9e:45:30:9d:aa:b9:c0:66:1d:90:ba:28:22:f0:cb:bc:
         76:4a:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:39 2026 by rpki-client