Manifest

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
File:                     09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json)
Hash identifier:          FvDyS53D/1Jy0cwYITXlfo4byst1HHY2R639oDCEYJ4=
Subject key identifier:   38:63:F8:6F:8C:1B:BD:05:6A:13:C2:9F:7E:E1:FE:59:15:DB:86:F1
Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D
Certificate issuer:       /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
Certificate serial:       7492A6EC516EE8EE7328027E5BD3DE1481883DEE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
Manifest number:          02BF
Signing time:             Tue 29 Sep 2026 15:08:10 +0000
Manifest this update:     Tue 29 Sep 2026 15:03:08 +0000
Manifest next update:     Wed 30 Sep 2026 17:58:08 +0000
Files and hashes:         1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: OwRxsThc66Vvvdfufd4iIsKNXssl5dkjpE0OuzHRH1E=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:92:a6:ec:51:6e:e8:ee:73:28:02:7e:5b:d3:de:14:81:88:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D
        Validity
            Not Before: Sep 29 15:03:08 2026 GMT
            Not After : Sep 30 17:58:08 2026 GMT
        Subject: CN=3863F86F8C1BBD056A13C29F7EE1FE5915DB86F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:1b:87:81:ab:c8:a0:e3:07:18:40:1f:00:
                    1a:63:74:ea:f3:17:38:15:f7:d3:c1:29:b3:f2:41:
                    b0:b7:e3:60:47:d7:85:76:1a:bd:93:b9:92:6c:ac:
                    e1:06:f6:5b:4e:a6:d1:a2:62:7f:73:99:f7:8b:a5:
                    c2:da:b6:2d:a3:15:cf:c8:37:65:c3:64:2c:e4:0a:
                    c8:e8:07:be:e9:16:bd:bf:ab:28:67:73:d7:a7:bd:
                    05:6c:31:04:da:fd:28:43:6a:72:2f:ce:92:64:2f:
                    f6:7b:f4:17:fc:db:b2:65:55:02:3a:e8:da:da:f6:
                    6d:43:4a:fc:50:97:37:75:d4:d7:b3:20:64:22:9f:
                    ee:a0:11:47:cf:f8:8f:78:82:f1:4d:53:1a:70:d9:
                    34:2d:d2:5b:e6:66:79:a5:b5:80:ce:18:8b:ff:25:
                    3b:76:01:fb:06:f7:d3:81:1f:ee:a1:c1:84:6e:de:
                    bf:d6:1a:32:ec:5a:db:f1:37:00:20:20:cb:8f:4f:
                    4f:2b:74:4e:c9:ea:6d:12:94:f0:ce:02:2c:82:0e:
                    bd:14:af:74:f1:93:34:5b:a2:e0:7d:c4:4c:1a:52:
                    87:54:a2:60:4c:f7:c9:57:92:10:0b:56:75:a8:14:
                    5a:76:39:cb:ce:9a:f6:ce:7e:e7:b7:39:b0:7b:6d:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:63:F8:6F:8C:1B:BD:05:6A:13:C2:9F:7E:E1:FE:59:15:DB:86:F1
            X509v3 Authority Key Identifier:
                keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:80:ef:40:af:00:a4:c0:55:2e:40:a8:10:2e:75:db:6c:e8:
         23:84:49:44:d9:e5:3a:07:1d:9b:de:33:e3:23:4e:bd:07:7a:
         de:d5:1c:fe:3b:8a:94:71:c5:89:76:bd:84:65:4a:65:a6:d5:
         01:d9:9f:84:6c:99:14:9a:36:86:61:6e:96:54:fd:bf:5c:3a:
         0f:13:52:a1:b8:18:fb:43:b2:5e:69:8a:e9:49:54:c1:f6:13:
         83:7c:4f:85:ae:0e:17:e4:db:e2:10:90:0b:9d:4d:d9:7d:e1:
         dd:68:91:ab:0f:57:ce:4a:a3:69:7e:81:31:91:e7:39:fd:8c:
         16:ae:ae:bf:13:cd:f0:99:75:47:ce:e4:71:bc:2c:f4:eb:ba:
         c6:b1:fe:0d:8b:64:ed:c0:a8:5b:49:e0:ce:f7:00:f7:28:8f:
         7a:6f:9f:e6:ef:4b:92:3a:5b:b4:12:8c:01:f6:d0:07:95:aa:
         e0:a2:79:61:d1:65:86:3e:75:eb:10:20:51:e1:5f:95:8d:f3:
         37:f7:96:12:c2:fd:56:12:6b:47:b3:28:42:f3:b9:06:65:24:
         51:40:ed:5b:5d:7b:df:43:63:bd:43:49:09:7b:a3:87:45:03:
         ed:73:dd:41:ef:6b:ba:16:07:e7:72:c9:ab:1e:a0:85:17:27:
         b4:45:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:25:03 2026 by rpki-client