Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File:                     1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier:          oOEco4dtwC6uU+p6Ln2AnfoUo2kjJI6zsZMIKGs4hrQ=
Subject key identifier:   B1:AE:FD:FA:41:56:F4:96:FE:B9:18:42:A5:17:29:D1:10:61:90:AB
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer:       /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial:       4603CEFA81F475761126D6A6446D8EED7B6328E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number:          025A
Signing time:             Mon 20 Oct 2025 02:06:16 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:16 +0000
Manifest next update:     Tue 21 Oct 2025 04:38:16 +0000
Files and hashes:         1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: +LeDMHo8AVczgZPP10prMCfDYJuco5v4tv7dEoHeRBk=)
                          2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:03:ce:fa:81:f4:75:76:11:26:d6:a6:44:6d:8e:ed:7b:63:28:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Validity
            Not Before: Oct 20 02:01:16 2025 GMT
            Not After : Oct 21 04:38:16 2025 GMT
        Subject: CN=B1AEFDFA4156F496FEB91842A51729D1106190AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:de:5a:87:fb:41:29:e1:77:48:0e:ca:e0:
                    dc:c4:11:6f:6b:e5:98:2b:43:5c:57:b0:8b:b6:26:
                    80:5c:06:d8:95:a6:93:f5:33:0a:cf:d0:d7:00:2e:
                    e7:20:25:ce:e6:f6:1c:74:cd:43:d3:b5:e9:89:32:
                    22:f9:11:0b:be:67:07:aa:a0:72:48:a6:35:a5:32:
                    13:9e:22:a4:49:e7:2a:00:67:01:7c:b7:80:e7:d0:
                    79:2e:f4:d3:4b:89:25:e6:31:8d:9f:30:71:d0:7b:
                    f4:17:c9:09:8c:fd:24:8a:21:0c:b0:36:9b:9e:f1:
                    96:58:ad:7c:04:b9:33:95:34:e4:f1:4d:01:2a:24:
                    95:89:7e:c8:db:35:a6:aa:1d:03:a5:cc:f4:5f:ad:
                    c7:7c:8e:db:e0:5c:56:e5:fa:cc:a4:26:69:1b:e2:
                    b4:91:49:63:91:56:2d:b8:9e:d9:91:23:bf:2c:e0:
                    81:6e:14:61:18:31:62:dd:29:87:cd:c3:be:08:17:
                    a9:90:d8:35:96:01:7f:77:45:7b:49:3b:26:45:a3:
                    f4:98:e5:47:e3:8b:a7:80:e2:8e:fd:b7:fe:a4:c3:
                    3d:58:99:65:f4:fb:d8:ef:f3:c6:8a:a9:63:5b:11:
                    17:2d:2c:81:43:82:ed:89:29:7f:98:29:c1:e4:95:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AE:FD:FA:41:56:F4:96:FE:B9:18:42:A5:17:29:D1:10:61:90:AB
            X509v3 Authority Key Identifier:
                keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:07:5e:83:44:34:4a:a0:e8:34:a5:16:e9:06:3b:cb:35:
         7d:3e:07:6d:53:04:46:36:7a:c1:74:6a:3b:89:68:93:e4:a1:
         a1:40:ca:22:05:7a:53:d4:e6:ac:90:da:37:e3:42:ee:e1:79:
         b9:6d:d3:ae:96:d7:63:98:aa:62:3d:c4:93:fa:cb:29:15:c3:
         9f:90:89:04:8b:80:84:07:76:35:e1:09:a7:61:8a:ab:be:4a:
         50:28:1e:60:ab:0c:d0:3c:41:1a:bf:0a:46:94:b6:b6:46:e1:
         c1:bb:ed:d3:8d:e3:46:07:76:31:9b:22:0d:85:d0:5d:be:ae:
         3c:98:b7:cb:62:5a:e4:5a:c1:e3:64:98:b6:df:5a:46:2c:27:
         ed:f0:a3:3b:e7:40:b0:70:83:e5:fd:cf:73:3c:2b:cb:da:0a:
         bb:d1:a9:91:dc:7a:b7:76:2d:1b:fd:84:fe:19:f0:d8:d2:a4:
         09:20:6d:84:f0:3a:69:86:99:02:05:90:2d:ad:6e:96:c2:9e:
         72:c2:c5:5c:06:c0:33:44:6b:50:54:9a:18:3b:e6:84:14:e1:
         b3:ca:88:0c:99:22:59:b7:ee:60:e8:0d:a5:5b:bd:81:29:b2:
         ba:69:aa:cf:22:ea:94:c5:5f:ab:13:49:ac:c9:f0:41:33:37:
         3e:17:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:40 2025 by rpki-client