Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File:                     6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier:          tjd7GwrZiN8dO1U1mR0L3SJUz1w7g/KKx2vSLl0XUF0=
Subject key identifier:   96:E0:7F:78:25:8A:A4:CC:72:01:38:5F:D9:CA:21:A5:52:B0:58:A3
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer:       /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial:       0975C2A5C822033ED9A3C45401BC296B91F9BA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number:          0255
Signing time:             Sun 19 Oct 2025 20:35:39 +0000
Manifest this update:     Sun 19 Oct 2025 20:30:39 +0000
Manifest next update:     Tue 21 Oct 2025 00:19:39 +0000
Files and hashes:         1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: hpqaECBmREW8HE3bNtqVn2ZpZT3EWfseavbbz1FEVSU=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:c2:a5:c8:22:03:3e:d9:a3:c4:54:01:bc:29:6b:91:f9:ba:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
        Validity
            Not Before: Oct 19 20:30:39 2025 GMT
            Not After : Oct 21 00:19:39 2025 GMT
        Subject: CN=96E07F78258AA4CC7201385FD9CA21A552B058A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:85:e2:83:ef:18:82:a2:43:fe:f9:99:3f:
                    22:90:14:ad:b5:02:99:67:e7:ad:11:fc:68:18:91:
                    d0:e4:08:3c:19:25:92:71:bc:07:f9:53:f0:ef:bd:
                    77:17:f9:80:75:60:7e:6f:b3:cd:a9:83:61:56:13:
                    69:a9:1d:0a:4e:fe:4d:19:ee:3a:98:d5:22:e0:b9:
                    cf:1f:64:d2:1a:29:31:a5:f0:ac:74:6d:ca:63:08:
                    02:b9:a8:41:18:a2:d5:ce:e9:b3:57:ae:77:17:75:
                    f0:80:cc:56:38:dd:39:79:a9:41:e0:5c:50:96:6b:
                    97:fd:60:7a:48:e0:d9:ec:ad:bd:03:23:f2:60:5b:
                    14:1d:ce:c6:2f:fd:b0:52:40:10:82:9c:61:86:3f:
                    dc:4c:fe:ef:bf:a0:ea:ee:6e:10:31:54:3f:d4:f3:
                    99:83:80:a8:8d:b4:3a:eb:4b:65:b8:b3:fa:c2:51:
                    7d:0f:59:bc:c6:b5:75:f5:ba:10:4c:73:f2:e6:c1:
                    da:86:94:41:87:32:77:11:43:bf:d1:8e:83:a2:1d:
                    cd:82:03:e5:3e:51:e9:7a:cc:40:ab:49:ee:92:2c:
                    50:7a:39:3b:32:87:33:af:15:7c:41:8c:3d:02:75:
                    1e:00:29:b1:5c:f4:1c:d0:83:0d:70:e4:53:ea:05:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E0:7F:78:25:8A:A4:CC:72:01:38:5F:D9:CA:21:A5:52:B0:58:A3
            X509v3 Authority Key Identifier:
                keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:68:d5:bd:55:e2:73:6a:68:a4:06:3e:fa:d0:2c:a8:3f:
         26:12:e0:c7:fc:a0:f0:8f:31:ab:5c:8b:d5:e3:9d:05:f3:a7:
         87:1d:b5:2b:a1:6b:bf:53:2a:cf:d9:11:03:4a:3b:1a:b3:b9:
         8c:1e:7f:6e:86:cc:27:07:c6:f7:4b:3b:f5:69:97:e7:70:87:
         19:15:72:a1:1e:4d:56:d4:7c:61:35:c1:f9:8e:65:fe:e3:99:
         00:5e:79:c6:3f:58:ab:b8:b8:36:2a:ae:f2:0a:be:19:49:86:
         04:df:28:8d:7a:e3:4b:36:9c:03:73:2d:36:4a:50:02:ed:21:
         8b:be:dc:2e:3d:06:d0:5b:f6:e5:30:67:99:7b:71:7e:12:f1:
         83:d2:6e:8e:c8:21:74:a5:9d:41:7c:44:40:39:10:0a:1f:3a:
         c4:85:2c:4b:c2:95:76:68:bc:81:23:73:7e:fa:a5:3e:32:81:
         ad:23:e8:55:0f:c0:d2:e5:51:33:a4:80:5d:7d:c1:d8:15:be:
         56:71:1d:51:db:8f:53:86:4a:fe:75:16:a5:60:a1:d9:59:c2:
         e7:92:27:64:c3:08:c4:1a:02:67:d6:18:d3:20:1a:d5:d1:26:
         8e:bd:10:4e:b6:f8:6b:4f:ff:67:57:4f:f9:19:ea:f8:c4:de:
         60:f4:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:29 2025 by rpki-client