Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File:                     941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier:          NUSPC9X5JznXe22fscJ7D3HIRlvWmBdkpiTCYtBx3+Q=
Subject key identifier:   CF:0C:84:11:50:BC:A6:4B:04:1D:2B:3D:61:B4:D5:41:D9:A1:79:4D
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer:       /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial:       182498168F947E65FF6789A1C95C57FA1B64F829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number:          0193
Signing time:             Tue 06 May 2025 06:01:16 +0000
Manifest this update:     Tue 06 May 2025 05:56:14 +0000
Manifest next update:     Wed 07 May 2025 08:12:14 +0000
Files and hashes:         1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: SaMTX0x/bbiNf6keIbfiXzimiv2ZyXdAKMKdaY4k7D8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 08:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:24:98:16:8f:94:7e:65:ff:67:89:a1:c9:5c:57:fa:1b:64:f8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
        Validity
            Not Before: May  6 05:56:14 2025 GMT
            Not After : May  7 08:12:14 2025 GMT
        Subject: CN=CF0C841150BCA64B041D2B3D61B4D541D9A1794D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:01:e9:53:10:f0:c0:89:bd:c4:ea:1d:ce:
                    6e:32:18:7d:57:79:31:ac:bc:cd:71:3d:bb:de:83:
                    3a:a2:f9:8f:00:45:51:e0:e2:32:db:ab:ac:97:6c:
                    07:5f:9f:2c:9d:b0:c9:91:6c:c7:b6:65:36:e9:28:
                    d1:26:ff:7a:44:09:a1:9b:be:bc:f4:98:68:1a:b2:
                    55:8c:fa:84:4a:31:c4:53:41:78:2c:27:1e:e5:40:
                    d6:60:87:01:cd:69:28:86:7d:7c:df:38:5d:a8:c7:
                    f9:0c:d3:e0:f9:26:dc:07:1f:11:25:74:79:da:45:
                    16:e4:23:fc:87:79:ac:5e:ae:5f:c4:c5:1f:78:31:
                    29:32:30:a8:79:5e:e4:57:ae:72:79:48:08:fb:e6:
                    6d:97:66:2d:56:8d:fe:15:35:cd:d8:ee:d9:4e:12:
                    16:c1:ee:a1:cc:06:45:0a:3e:22:44:3e:79:ae:f7:
                    a8:da:a4:99:bd:8b:2a:49:c9:e4:62:c6:55:f3:09:
                    1c:3b:20:58:ce:b2:c5:ef:12:69:68:66:a3:e7:02:
                    bf:9c:9e:95:95:5a:dd:c6:d9:a2:54:e8:b9:08:a7:
                    a3:ca:96:b5:1e:2f:a2:dd:50:13:1c:82:49:30:c7:
                    92:10:62:d0:e5:01:96:32:f4:5d:1a:d8:9b:7a:a1:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:84:11:50:BC:A6:4B:04:1D:2B:3D:61:B4:D5:41:D9:A1:79:4D
            X509v3 Authority Key Identifier:
                keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:42:ac:e7:32:1f:31:11:99:ef:e5:e5:ce:2e:98:79:4f:
         c9:cc:89:37:9c:a1:16:ff:a0:2e:c2:43:9d:ec:23:a4:f0:98:
         08:03:25:0f:e0:e0:f7:df:c3:59:e5:aa:38:46:4a:16:d5:a8:
         8b:c6:2c:3d:ee:25:0a:13:63:c8:64:a8:b9:8f:df:e3:17:8e:
         d6:90:f6:d5:b3:e1:41:c5:88:c8:15:1d:c2:c4:69:b9:1b:ec:
         44:61:03:58:29:81:b3:41:3f:0e:42:9a:6b:57:23:53:11:61:
         2f:41:d3:3f:0c:22:04:43:c2:2a:aa:5a:42:f0:17:fb:f6:c2:
         03:12:a3:f9:1d:3f:38:0a:39:24:4b:51:62:33:9a:3e:e9:81:
         45:09:8f:94:2f:63:78:95:31:85:bf:10:1c:c2:38:fc:fb:7e:
         26:0a:22:19:8b:bc:a8:27:30:b3:68:b4:e2:6c:aa:f1:42:a1:
         a2:76:c0:ea:47:33:95:ec:70:45:93:a2:3e:cc:4e:5d:18:42:
         76:90:18:0a:95:82:3c:ac:87:ac:e7:49:e5:61:79:f2:54:59:
         5d:d9:18:e7:15:68:5b:09:dd:22:52:e6:d6:99:4f:d0:82:3e:
         81:7e:95:50:98:6a:ad:bf:45:f2:8e:dd:1d:1b:41:6c:e3:9d:
         34:cc:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:26:53 2025 by rpki-client