Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
File:                     FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json)
Hash identifier:          hDEOsfYB2jOXsOPPgywtWW9Y7G+koXFVoSoML3EZhHM=
Subject key identifier:   4E:1D:AF:A3:61:68:32:74:20:80:E0:B8:7E:B2:26:A3:32:B1:77:02
Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
Certificate issuer:       /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Certificate serial:       37EF5592F885C82C055B5166EEFBECE9626DECB9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
Manifest number:          0255
Signing time:             Mon 20 Oct 2025 02:46:19 +0000
Manifest this update:     Mon 20 Oct 2025 02:41:19 +0000
Manifest next update:     Tue 21 Oct 2025 06:16:19 +0000
Files and hashes:         1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: 8Ur5/yvIDa6ujhDMzws9Z3HXXhQbDglzDUeC1pWC7uc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:55:92:f8:85:c8:2c:05:5b:51:66:ee:fb:ec:e9:62:6d:ec:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
        Validity
            Not Before: Oct 20 02:41:19 2025 GMT
            Not After : Oct 21 06:16:19 2025 GMT
        Subject: CN=4E1DAFA3616832742080E0B87EB226A332B17702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:54:cc:43:5d:a1:62:54:eb:b7:be:2a:f8:
                    51:b8:13:14:d6:48:97:2a:c9:33:09:f7:bc:da:7e:
                    cf:5b:62:19:6d:d4:e5:f7:55:ff:78:9f:eb:a0:b9:
                    97:98:bc:15:9f:70:f7:35:6d:c6:38:9c:d1:c5:c3:
                    3e:f3:31:e8:25:dd:f4:d5:97:74:e9:16:be:f7:19:
                    2c:54:e9:70:2b:97:e8:06:00:8d:9b:dd:48:ce:a3:
                    15:6c:9f:b9:cf:6a:30:d7:e2:07:b9:5d:1b:9e:a1:
                    08:ad:28:29:fa:9a:67:b4:89:db:23:d7:6d:68:fb:
                    bf:8f:7f:15:d9:07:3d:cc:5f:9f:28:0c:b0:15:8e:
                    66:aa:d8:fd:5b:bf:57:38:c7:c9:37:9e:d3:a8:6d:
                    85:f4:0c:13:2d:65:db:23:e8:53:0e:92:87:4d:b2:
                    d6:ad:41:c4:19:7c:70:f9:ea:7e:9d:83:90:98:ce:
                    18:c4:ef:11:36:9d:d0:0f:95:7e:e5:23:46:ba:fb:
                    e4:84:e8:c9:46:f7:82:0e:14:c6:b3:3c:33:14:d9:
                    0d:73:67:d7:6d:3a:d5:de:e8:63:7e:d8:cc:73:35:
                    83:62:f1:1e:38:f6:95:b3:15:89:71:64:5e:47:5a:
                    6b:51:8b:49:87:0a:0e:1e:24:12:38:d5:4a:38:9b:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:AF:A3:61:68:32:74:20:80:E0:B8:7E:B2:26:A3:32:B1:77:02
            X509v3 Authority Key Identifier:
                keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:0f:eb:b9:43:98:d9:64:99:65:b5:46:53:78:72:a5:cf:
         81:b9:b3:7b:85:ca:39:6d:a5:52:24:2f:d1:27:a8:77:38:79:
         75:cb:fb:81:22:00:cc:fb:49:7b:a8:2d:b0:02:7a:4e:80:fc:
         05:99:6f:61:6b:45:e0:e4:92:a8:d3:e4:ca:aa:86:2f:50:fd:
         5c:5b:a3:17:d8:2e:50:76:2f:b8:65:48:88:88:7b:55:91:23:
         ea:2e:b3:fe:ec:38:6b:07:d5:c3:eb:81:77:84:8f:5d:0a:91:
         aa:84:08:48:c5:df:a7:79:4d:12:07:0a:15:ba:ba:aa:64:32:
         2b:5e:53:17:60:28:13:e7:a1:28:e9:49:9b:30:ff:18:4c:fe:
         1f:e7:7a:39:09:27:d0:63:f0:5e:68:87:1c:9d:b1:c8:fb:37:
         22:b4:cc:6f:46:e6:88:91:4a:3e:65:06:eb:3f:aa:a7:78:4b:
         3b:db:8f:4c:e0:38:d0:38:84:05:e9:44:fc:44:d0:dd:e6:01:
         3d:3f:a3:93:97:a8:bc:03:d7:fd:2f:ae:c9:b4:83:90:1c:50:
         06:53:b3:a0:02:ae:f8:88:53:73:7a:9e:41:ba:a2:76:6c:73:
         7e:45:64:f0:33:25:2d:f5:c8:bf:75:da:2f:ab:9c:0f:18:d3:
         4b:53:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:20 2025 by rpki-client