Manifest

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/1/02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.mft
File:                     02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.mft (raw, json)
Hash identifier:          3gyuOr3hPppNDPJKMG1oACLeklSaXIiyLLRyirJqTWQ=
Subject key identifier:   24:62:83:2A:16:64:1C:34:B8:E8:77:DC:BA:2F:C4:1C:5F:82:92:FF
Authority key identifier: 02:B9:B2:F1:93:C2:FE:F4:AB:99:1D:FA:4E:64:6F:E3:2D:81:0F:18
Certificate issuer:       /CN=02b9b2f193c2fef4ab991dfa4e646fe32d810f18
Certificate serial:       045AE68A09414A29D92A2D2746A0A3FBAF53361D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Army8ZPC_vSrmR36TmRv4y2BDxg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/1/02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.mft
Manifest number:          2A
Signing time:             Fri 25 Sep 2026 00:39:50 +0000
Manifest this update:     Fri 25 Sep 2026 00:34:50 +0000
Manifest next update:     Sat 26 Sep 2026 02:35:50 +0000
Files and hashes:         1: 02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.crl (hash: eLgqocJXsjAAxxa716gWS2OyT27o0YOSkFk3o3QK88I=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/1/02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/1/02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Army8ZPC_vSrmR36TmRv4y2BDxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:e6:8a:09:41:4a:29:d9:2a:2d:27:46:a0:a3:fb:af:53:36:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b9b2f193c2fef4ab991dfa4e646fe32d810f18
        Validity
            Not Before: Sep 25 00:34:50 2026 GMT
            Not After : Sep 26 02:35:50 2026 GMT
        Subject: CN=2462832A16641C34B8E877DCBA2FC41C5F8292FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:42:7d:75:bf:65:7a:ed:3f:47:7c:f2:9e:
                    dc:c5:91:9a:b5:86:dd:88:1a:16:06:24:49:09:19:
                    5f:08:2f:3a:49:22:fb:7c:d7:e5:07:3f:d8:82:5b:
                    cd:1c:cd:1d:5d:d6:39:de:9d:89:f6:8b:4d:2d:b4:
                    48:3c:26:75:be:bf:dc:b5:30:95:a3:60:23:0d:9e:
                    d7:16:b0:c2:e6:cf:1a:59:40:fc:65:88:e4:6c:25:
                    3b:f4:f3:41:32:de:28:4b:d1:74:48:d0:49:15:36:
                    b9:14:50:c4:31:c7:ab:56:b1:e2:ab:21:d8:e7:4f:
                    91:3b:66:3b:55:27:12:cb:ed:58:48:5e:11:9a:bf:
                    f6:b9:7a:79:13:25:5e:4b:ad:e0:53:38:ab:41:84:
                    1c:a0:f2:fd:3d:79:60:06:2f:50:0f:c2:ba:2f:72:
                    d3:3b:7c:39:7a:c2:88:c3:b3:80:0f:5e:6c:8d:e9:
                    93:0d:16:19:fe:a0:9a:76:16:67:95:2b:d3:8e:d3:
                    05:8b:bc:2f:2f:6d:f7:0c:d9:cb:6a:5f:ec:26:dd:
                    6b:96:b3:01:89:10:1e:12:e7:4b:61:26:24:8d:39:
                    22:19:29:87:94:ee:da:14:53:6a:d4:37:49:65:b2:
                    63:f0:5e:8b:34:2b:7f:e1:f7:2c:70:40:a5:f0:94:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:83:2A:16:64:1C:34:B8:E8:77:DC:BA:2F:C4:1C:5F:82:92:FF
            X509v3 Authority Key Identifier:
                keyid:02:B9:B2:F1:93:C2:FE:F4:AB:99:1D:FA:4E:64:6F:E3:2D:81:0F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/1/02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Army8ZPC_vSrmR36TmRv4y2BDxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/1/02B9B2F193C2FEF4AB991DFA4E646FE32D810F18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:46:e3:5a:6f:12:75:1e:e9:1e:80:c9:94:6e:76:1c:c8:03:
         f8:3f:f2:4b:db:a5:6f:2e:d9:f3:cc:48:bd:b1:bc:0c:ad:98:
         19:2f:34:4c:b3:2b:e1:a4:df:97:83:c8:1a:cb:a2:3c:26:97:
         ad:6d:bc:ca:97:f6:fc:5f:b0:33:4f:0f:56:6d:2f:c0:a3:42:
         5e:cc:63:c4:e1:11:17:c5:46:78:72:27:d6:b3:30:ae:b7:79:
         bc:04:1c:c5:7f:8c:3f:a9:ed:c1:7d:1a:e4:8f:93:4f:03:56:
         23:b0:84:6e:e0:ad:18:ea:6b:bb:57:3f:0e:15:55:9c:04:03:
         3d:4f:7b:2b:fa:1d:e9:f4:09:5d:47:50:e8:46:90:42:c5:25:
         c6:d1:2f:d1:b8:e3:41:94:3a:60:18:0d:14:29:9f:e0:a6:7c:
         16:19:6f:72:c5:ee:b1:45:12:80:74:9a:b5:76:54:a5:78:bd:
         cd:43:a7:d7:52:ca:2b:48:87:5a:e1:34:28:cb:5e:c0:2b:77:
         fb:ca:cc:96:5c:18:ff:50:84:4a:87:41:54:9b:37:52:f7:3d:
         f3:87:d4:52:1e:00:b5:0c:5b:3a:8e:30:31:f0:43:73:dd:65:
         35:7d:62:97:1e:0f:c5:56:20:6a:09:c2:44:61:5f:0d:87:6a:
         14:76:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:42:27 2026 by rpki-client