Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File:                     B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier:          6YS7p3Sxjozhk8tPZYH5FEcj8fkhDTrWZ0J+Rz88ffg=
Subject key identifier:   74:E9:F6:7A:14:15:FE:90:74:5C:E9:56:BB:06:79:65:83:F8:6D:25
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer:       /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial:       0CED29F026192337B6C05AECA043CF36D295F862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number:          0308
Signing time:             Wed 25 Mar 2026 08:33:54 +0000
Manifest this update:     Wed 25 Mar 2026 08:28:51 +0000
Manifest next update:     Thu 26 Mar 2026 12:17:51 +0000
Files and hashes:         1: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: 3lKLOc0uQj7gZ08dtBVU/3gvlMXsNmYyvZFOBP4vwfs=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ed:29:f0:26:19:23:37:b6:c0:5a:ec:a0:43:cf:36:d2:95:f8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
        Validity
            Not Before: Mar 25 08:28:51 2026 GMT
            Not After : Mar 26 12:17:51 2026 GMT
        Subject: CN=74E9F67A1415FE90745CE956BB06796583F86D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:b5:38:bd:4f:6c:c0:21:8b:a1:c8:3f:49:
                    e9:e1:6c:8d:37:84:28:45:51:78:59:7c:bd:b6:06:
                    76:ef:c1:a2:75:3a:f9:39:6b:ad:83:3d:e5:35:47:
                    45:d2:9f:73:00:60:01:69:22:c5:5a:db:aa:3d:2f:
                    85:6c:d9:71:eb:6f:92:db:eb:0e:3b:f8:28:00:04:
                    a3:69:c7:70:33:ff:5d:46:92:d4:e5:8a:a7:eb:a9:
                    4c:9b:05:85:57:b4:bb:53:67:94:e8:50:05:91:76:
                    3b:15:70:a3:b2:b4:1e:49:2d:f5:eb:3d:56:75:84:
                    cd:ee:75:88:59:4b:9a:40:a0:bb:a6:74:d5:08:0f:
                    71:97:8a:c6:fe:ea:8b:3f:9d:7c:81:33:4c:1f:17:
                    23:10:7b:56:69:3b:da:81:db:41:3a:cd:db:8c:72:
                    53:44:0d:6b:62:05:bf:03:8c:ce:7e:87:31:50:7a:
                    86:b9:cc:96:7d:09:59:e0:29:d4:a1:92:ed:3e:1e:
                    0e:0f:0d:84:f8:d8:42:30:ea:9f:a3:6e:f0:76:55:
                    24:52:47:f3:eb:4f:80:6a:99:35:4b:96:91:38:84:
                    f9:3b:17:ab:c4:bf:94:ca:2c:73:e7:e3:78:e7:16:
                    97:e8:00:3c:7f:08:45:47:ef:d3:07:38:c3:cd:50:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:F6:7A:14:15:FE:90:74:5C:E9:56:BB:06:79:65:83:F8:6D:25
            X509v3 Authority Key Identifier:
                keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:33:03:a8:c6:0d:d6:b1:40:1a:74:5a:f6:aa:b4:ee:11:e5:
         e7:3e:4d:a9:9a:fd:39:43:13:84:69:c7:2a:bc:5e:b7:65:16:
         f2:bc:1f:04:3e:61:62:cb:5a:d5:2c:8a:2b:81:f2:f5:dc:a6:
         0c:b7:7c:8c:06:60:b4:81:c5:58:d5:66:dd:11:2c:fa:7f:ea:
         0b:6c:1a:cf:6a:2f:7f:91:c8:a6:51:a1:e4:69:88:d2:b9:11:
         b2:9d:2c:25:4c:92:03:71:6d:93:b2:fb:23:36:e6:5d:59:d1:
         8f:03:6d:dd:0d:2a:ba:8e:91:c2:58:0c:d5:a3:0a:7e:b1:e7:
         2d:86:38:fa:3c:17:11:20:eb:93:af:c0:52:0f:5f:03:0c:e2:
         c0:c1:a4:2a:8e:be:07:84:60:a3:4d:1c:d4:13:b4:df:41:0a:
         39:9d:0e:c2:2b:df:df:bd:aa:e1:b4:e7:45:ed:e2:5f:45:62:
         15:49:b2:9e:cb:2b:c9:ea:11:6b:99:7e:f3:7f:f0:bb:c8:cf:
         f8:e4:10:f2:3c:c6:c6:60:95:98:aa:ed:a6:96:0b:8c:ca:84:
         40:91:09:f0:ae:71:f3:b5:61:0f:e5:c8:2a:cf:af:88:17:8b:
         f0:7c:8f:6e:3a:8a:cd:64:a4:fc:3b:e8:6e:e2:64:9e:ec:8f:
         ca:0f:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:57 2026 by rpki-client