Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          kGU+gunxDBQZ0IdNe4X0wh8crNHwp3qhvmL/iO8KWQY=
Subject key identifier:   B5:42:E7:5C:D0:7A:94:1F:BB:AE:DC:7C:25:04:4A:41:FD:D3:56:F4
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       5A1CE165EB315EE11C806DBE97311009EB101681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          0347
Signing time:             Wed 13 May 2026 14:32:02 +0000
Manifest this update:     Wed 13 May 2026 14:27:02 +0000
Manifest next update:     Thu 14 May 2026 17:55:02 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: B2RgHbYqkMrAYCUfxK5yf9+kquRpwKKx+vz92rama3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1c:e1:65:eb:31:5e:e1:1c:80:6d:be:97:31:10:09:eb:10:16:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: May 13 14:27:02 2026 GMT
            Not After : May 14 17:55:02 2026 GMT
        Subject: CN=B542E75CD07A941FBBAEDC7C25044A41FDD356F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:71:c6:d6:74:e9:5c:18:b0:f9:39:f9:6c:
                    6a:07:34:f2:45:ea:b4:56:3e:d2:03:fd:bc:bc:f4:
                    a0:4c:65:ef:3c:a8:05:59:40:3d:46:b8:21:af:be:
                    21:84:75:b5:5f:e7:4b:98:98:6d:a9:35:fd:d5:1e:
                    ca:89:a3:ea:91:6b:ba:0c:db:9e:08:94:b2:71:ab:
                    ce:90:88:b2:c3:9f:1b:3b:9e:fc:1c:74:83:d8:94:
                    d1:01:dc:8d:78:2f:39:89:50:b9:c8:b2:f4:b4:4b:
                    e8:1e:f3:99:bf:93:ef:31:e1:46:e1:58:9e:f5:19:
                    2e:c0:fc:d6:d2:a5:24:73:1f:37:11:e0:9a:29:e2:
                    e4:2f:a4:a6:c2:ca:96:c4:0d:41:a3:10:8b:0d:65:
                    bd:6d:09:5a:a7:ae:4b:a7:9a:88:3d:18:d4:16:28:
                    63:60:57:54:b3:fb:a8:95:ef:d5:c1:08:4c:d6:87:
                    e1:e4:92:b2:4f:00:5c:13:89:67:b7:b0:a2:3d:0d:
                    29:49:f0:10:a1:c3:c8:be:19:d9:72:c6:09:60:3d:
                    72:7e:36:4e:51:a8:c3:ff:49:b7:ab:8e:6a:f1:38:
                    89:95:ce:ca:1f:02:10:2d:87:14:bb:3e:f3:b3:a5:
                    c2:d1:e2:66:ce:8a:9e:75:4d:20:a5:5f:72:1f:77:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:42:E7:5C:D0:7A:94:1F:BB:AE:DC:7C:25:04:4A:41:FD:D3:56:F4
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:38:4e:1c:fe:8a:0b:93:95:14:7e:5c:fc:c1:68:2e:59:
         f3:0e:08:0b:74:68:0e:06:55:70:63:84:6d:c3:7c:6a:98:55:
         cb:b1:bd:6e:55:20:c3:0d:d3:8a:1b:d6:43:f4:9e:e5:05:45:
         02:52:47:b6:8d:ca:52:9b:fd:68:2e:1a:63:e4:dc:30:d2:0d:
         13:44:24:3a:ff:30:cc:dc:5e:1f:93:05:00:6d:f5:3a:a7:ab:
         2e:f0:d6:13:7d:9d:97:d2:c3:78:be:bb:46:7a:b6:ec:e5:d4:
         df:22:a8:2f:01:22:67:8a:66:44:91:fc:18:67:93:61:8b:d3:
         bd:58:a0:6c:67:23:16:cf:cf:3f:34:28:bc:1b:d2:cd:44:8b:
         d4:77:b9:87:4d:ab:ab:41:b5:ec:59:11:b5:57:52:8e:be:71:
         b6:1f:6c:b2:28:b2:06:ec:13:94:4a:cb:c5:61:d4:c3:58:b6:
         52:13:9e:88:b0:bb:2b:83:3f:a7:d1:73:e3:b1:e0:7f:2e:78:
         3e:31:c6:41:b7:18:2d:7f:77:f3:46:8d:3d:a7:02:bb:f4:ea:
         0a:75:20:80:00:50:04:f2:b5:38:f9:a3:05:8f:d6:29:6a:29:
         7d:5b:7a:30:e0:ce:6e:e5:75:80:57:2d:80:b5:2e:13:c0:bb:
         35:4e:79:60
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWhzhZesxXuEcgG2+lzEQCesQFoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYyM2JiODc0MzExNmQ4NmIxM2I5YmQ5ZTUzNDAyMzk4
YjdhMWVlMDAeFw0yNjA1MTMxNDI3MDJaFw0yNjA1MTQxNzU1MDJaMDMxMTAvBgNV
BAMTKEI1NDJFNzVDRDA3QTk0MUZCQkFFREM3QzI1MDQ0QTQxRkREMzU2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/XHG1nTpXBiw+Tn5bGoHNPJF
6rRWPtID/by89KBMZe88qAVZQD1GuCGvviGEdbVf50uYmG2pNf3VHsqJo+qRa7oM
254IlLJxq86QiLLDnxs7nvwcdIPYlNEB3I14LzmJULnIsvS0S+ge85m/k+8x4Ubh
WJ71GS7A/NbSpSRzHzcR4Jop4uQvpKbCypbEDUGjEIsNZb1tCVqnrkunmog9GNQW
KGNgV1Sz+6iV79XBCEzWh+HkkrJPAFwTiWe3sKI9DSlJ8BChw8i+GdlyxglgPXJ+
Nk5RqMP/SberjmrxOImVzsofAhAthxS7PvOzpcLR4mbOip51TSClX3Ifd2NzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUtULnXNB6lB+7rtx8JQRKQf3TVvQwHwYDVR0j
BBgwFoAUBiO7h0MRbYaxO5vZ5TQCOYt6HuAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzEv
MDYyM0JCODc0MzExNkQ4NkIxM0I5QkQ5RTUzNDAyMzk4QjdBMUVFMC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JpTzdoME1SYllheE81dlo1VFFDT1l0Nkh1QS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV80ZDVjMzA5YWUxMWE0NDll
YTg0MDdhY2UxZjc5MDFmMC8xLzA2MjNCQjg3NDMxMTZEODZCMTNCOUJEOUU1MzQw
MjM5OEI3QTFFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/GDhOHP6KC5OVFH5c/MFoLlnzDggLdGgO
BlVwY4Rtw3xqmFXLsb1uVSDDDdOKG9ZD9J7lBUUCUke2jcpSm/1oLhpj5Nww0g0T
RCQ6/zDM3F4fkwUAbfU6p6su8NYTfZ2X0sN4vrtGerbs5dTfIqgvASJnimZEkfwY
Z5Nhi9O9WKBsZyMWz88/NCi8G9LNRIvUd7mHTaurQbXsWRG1V1KOvnG2H2yyKLIG
7BOUSsvFYdTDWLZSE56IsLsrgz+n0XPjseB/Lng+McZBtxgtf3fzRo09pwK79OoK
dSCAAFAE8rU4+aMFj9Ypail9W3ow4M5u5XWAVy2AtS4TwLs1Tnlg
-----END CERTIFICATE-----
Generated at Wed May 13 17:50:54 2026 by rpki-client