Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
File:                     1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json)
Hash identifier:          1w4Tc/Bff7WAviVR9yc8rPGfYRASqOuzxPdm6e469TQ=
Subject key identifier:   43:20:AD:25:E6:18:3D:2C:EA:74:25:32:F9:99:EF:F4:75:22:E6:54
Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Certificate issuer:       /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Certificate serial:       56EE24FBA50AC234A50248EF1B9BD27D409D0F70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
Manifest number:          0199
Signing time:             Sun 11 May 2025 03:40:06 +0000
Manifest this update:     Sun 11 May 2025 03:35:04 +0000
Manifest next update:     Mon 12 May 2025 07:16:04 +0000
Files and hashes:         1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: TNOE1pCirHLerhLn7IqYYxyqzFfFoc4KWbe40YB630Y=)
                          2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: TY90suG6Ao7n5bUw8gaOD2tmxtQPTwilfw1Su4QBVWM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 06:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ee:24:fb:a5:0a:c2:34:a5:02:48:ef:1b:9b:d2:7d:40:9d:0f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
        Validity
            Not Before: May 11 03:35:04 2025 GMT
            Not After : May 12 07:16:04 2025 GMT
        Subject: CN=4320AD25E6183D2CEA742532F999EFF47522E654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:94:5e:b5:68:f8:a8:13:4b:0d:b2:47:a2:
                    66:9b:69:a7:30:85:96:09:5a:91:7f:90:5e:48:70:
                    f9:c1:69:71:53:00:df:ad:f5:1b:ef:27:f4:59:76:
                    65:dd:75:d7:93:f2:44:ba:c4:bb:4d:b5:a6:96:23:
                    f1:b3:5a:3b:39:55:66:fa:a1:a5:13:e0:4c:ac:9b:
                    0a:ca:7d:e7:d2:ee:9a:ae:d6:68:10:43:48:88:72:
                    94:5a:87:90:9d:74:ca:eb:d4:1f:6b:41:1d:86:5e:
                    81:53:1d:57:37:85:6c:11:9a:ed:67:8e:f4:ba:9f:
                    d6:3a:17:bd:a9:4a:53:ec:e8:cf:16:8d:41:a1:05:
                    38:1b:a0:5c:72:cc:e6:8a:c0:56:57:b2:6a:e9:16:
                    0c:13:a9:3e:80:fa:3f:2f:63:73:aa:98:c5:0e:15:
                    bd:ac:16:60:9a:d0:a8:3e:e9:2c:5b:4b:11:14:79:
                    b6:a3:cf:94:5d:ab:8f:9b:f1:a5:00:bc:1d:f0:6e:
                    7c:74:73:a2:80:e4:38:f5:5d:c2:69:3c:ac:85:55:
                    66:b2:a0:ef:43:a5:46:23:03:92:63:c3:2b:e7:b9:
                    21:3f:b8:25:8f:81:04:4d:10:55:86:3d:c4:4a:64:
                    90:92:c2:a4:97:02:fb:7b:ac:f0:0c:30:2b:56:f8:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:AD:25:E6:18:3D:2C:EA:74:25:32:F9:99:EF:F4:75:22:E6:54
            X509v3 Authority Key Identifier:
                keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:f7:c9:7b:c9:6f:15:7d:a3:82:5a:8c:3f:ad:03:d6:4c:
         cc:6b:34:70:a6:ec:de:0e:15:6c:2f:14:c2:89:e7:e8:18:69:
         9f:9c:ae:83:5c:81:ee:20:69:5d:61:cc:4f:af:11:3e:ba:aa:
         a4:67:b7:23:62:7c:2b:cc:41:f3:d2:59:e5:78:57:85:ef:18:
         ca:af:2b:c8:0d:d0:4f:ba:2f:60:4e:6c:be:51:ef:87:c8:80:
         d3:a1:02:53:d5:5e:7e:b7:6b:58:8d:22:47:fa:fb:d4:4e:a2:
         d5:59:96:72:31:19:27:6c:83:60:e2:6a:d0:79:d3:0f:d1:a0:
         0f:ad:6f:67:d5:a3:4a:3a:39:0e:75:51:1b:d6:2f:c9:22:57:
         5f:45:0e:c5:40:44:9e:f9:bb:4d:56:06:26:0c:30:84:e3:2a:
         3b:5c:2b:38:7e:cb:f2:a0:37:0b:ff:01:86:a7:1c:ef:e8:fc:
         90:26:d7:af:c0:20:d5:40:ed:56:bb:06:0f:64:9e:76:91:91:
         50:44:be:e8:c6:28:6c:d8:07:5a:75:6c:b6:86:db:ab:0a:42:
         39:25:00:51:be:b3:3a:76:f6:26:f7:89:6e:1b:6c:16:4f:67:
         73:60:25:c5:92:ff:11:86:ba:f3:0f:a2:6a:1e:ba:cf:3e:54:
         67:91:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:50:05 2025 by rpki-client