Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File:                     21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier:          T1czmMaCVzFI+Jz4uwLPrHVMmopQZFREkjMM5x3/t7g=
Subject key identifier:   97:D0:7A:E0:BA:63:CB:87:82:F6:81:0A:39:2F:36:DD:ED:FC:92:85
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer:       /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial:       1914806BDC601976AF6018D2A306AFF92BD1FFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number:          020C
Signing time:             Mon 04 Aug 2025 04:40:26 +0000
Manifest this update:     Mon 04 Aug 2025 04:35:26 +0000
Manifest next update:     Tue 05 Aug 2025 06:05:26 +0000
Files and hashes:         1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: idp56GseocI/92uel6E0a8TNkxB8JT5H0lMze1f2djg=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:14:80:6b:dc:60:19:76:af:60:18:d2:a3:06:af:f9:2b:d1:ff:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
        Validity
            Not Before: Aug  4 04:35:26 2025 GMT
            Not After : Aug  5 06:05:26 2025 GMT
        Subject: CN=97D07AE0BA63CB8782F6810A392F36DDEDFC9285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:88:e3:c0:36:dd:87:0e:a5:13:74:47:bf:
                    ea:3f:52:ff:e4:59:43:89:ce:59:73:24:fe:ec:42:
                    f9:30:fd:ad:79:4a:53:71:89:51:a0:55:96:fe:8f:
                    0c:9a:a1:1a:1a:b6:59:10:72:ce:31:1c:5f:29:31:
                    14:80:f6:07:ea:c6:69:95:09:0a:a5:9a:e9:0f:0b:
                    0e:f2:d3:30:a1:f3:15:a3:2d:71:d5:11:be:e0:ee:
                    3b:f1:51:5d:ed:44:2e:3c:7a:dc:dd:9f:51:ad:d6:
                    39:c2:6d:53:f2:b8:75:1f:f2:0e:2e:4f:df:67:93:
                    6f:b3:f1:e4:d4:ba:d9:71:f8:8e:58:b1:85:7a:0b:
                    bc:ee:42:08:8a:1c:e3:a7:62:cd:00:d7:8c:cf:92:
                    16:91:f6:03:b4:69:ad:b3:55:fb:98:7a:a4:7d:57:
                    a7:09:9e:89:77:cc:04:1d:14:84:d3:d4:24:a8:0f:
                    6f:5b:46:2b:55:2a:db:13:55:3f:52:27:b4:3c:9f:
                    74:81:09:35:c2:5e:53:5f:4a:88:c7:f2:78:1d:5f:
                    20:6e:fe:62:19:a4:10:f6:c1:11:57:7e:f2:7d:4c:
                    76:c1:fa:2f:28:bb:97:a7:fd:37:66:5c:f1:3a:45:
                    fc:90:da:f5:b6:3d:1f:44:af:05:a0:de:66:4a:bd:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:7A:E0:BA:63:CB:87:82:F6:81:0A:39:2F:36:DD:ED:FC:92:85
            X509v3 Authority Key Identifier:
                keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:80:a0:a8:9a:0b:f2:e6:b5:97:1e:7d:7b:9f:15:6a:81:a4:
         c8:06:ea:ad:a5:9b:fa:95:7e:0e:f8:f9:78:79:53:30:39:c9:
         03:47:36:50:83:56:b2:ae:92:76:4e:fd:af:2c:2a:8b:4c:fc:
         8a:e5:86:8e:80:78:06:e7:49:94:0f:98:e0:62:bb:68:15:f2:
         a7:b4:72:e7:c1:8a:90:48:8d:f1:5c:fc:85:49:6e:3e:73:76:
         a1:dc:a5:05:d4:c0:fa:8b:17:76:c3:22:71:e0:76:d3:75:17:
         ad:db:7a:be:cd:02:74:ae:7a:e3:9f:59:9b:2f:7f:36:f2:4f:
         d2:75:81:e4:0f:5b:61:93:e2:44:d0:68:57:e2:34:fd:d8:f4:
         48:ff:4b:0f:15:81:d0:74:7b:18:6c:57:86:b2:56:20:76:b5:
         df:ec:06:56:c4:38:9f:13:f2:f8:31:b0:f4:68:4a:59:27:db:
         be:9b:8d:a6:49:5a:67:2c:e1:60:30:ba:bb:33:1e:ca:9c:20:
         11:4b:ab:9f:f6:cd:ea:ed:07:63:64:ae:c2:a8:49:51:8f:44:
         0d:c1:96:5b:2e:03:cb:24:8a:38:5a:7d:1c:b4:50:d0:bf:4c:
         3e:b7:ed:de:50:26:2c:ef:2d:1f:10:76:66:9a:df:30:48:b1:
         3a:58:58:59
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGRSAa9xgGXavYBjSowav+SvR/7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4
ODM0ZTA5ZDAeFw0yNTA4MDQwNDM1MjZaFw0yNTA4MDUwNjA1MjZaMDMxMTAvBgNV
BAMTKDk3RDA3QUUwQkE2M0NCODc4MkY2ODEwQTM5MkYzNkRERURGQzkyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC554jjwDbdhw6lE3RHv+o/Uv/k
WUOJzllzJP7sQvkw/a15SlNxiVGgVZb+jwyaoRoatlkQcs4xHF8pMRSA9gfqxmmV
CQqlmukPCw7y0zCh8xWjLXHVEb7g7jvxUV3tRC48etzdn1Gt1jnCbVPyuHUf8g4u
T99nk2+z8eTUutlx+I5YsYV6C7zuQgiKHOOnYs0A14zPkhaR9gO0aa2zVfuYeqR9
V6cJnol3zAQdFITT1CSoD29bRitVKtsTVT9SJ7Q8n3SBCTXCXlNfSojH8ngdXyBu
/mIZpBD2wRFXfvJ9THbB+i8ou5en/TdmXPE6RfyQ2vW2PR9ErwWg3mZKvd/BAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUl9B64Lpjy4eC9oEKOS823e38koUwHwYDVR0j
BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv
MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx
YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC
OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7gKComgvy5rWXHn17nxVqgaTIBuqtpZv6
lX4O+Pl4eVMwOckDRzZQg1ayrpJ2Tv2vLCqLTPyK5YaOgHgG50mUD5jgYrtoFfKn
tHLnwYqQSI3xXPyFSW4+c3ah3KUF1MD6ixd2wyJx4HbTdRet23q+zQJ0rnrjn1mb
L3828k/SdYHkD1thk+JE0GhX4jT92PRI/0sPFYHQdHsYbFeGslYgdrXf7AZWxDif
E/L4MbD0aEpZJ9u+m42mSVpnLOFgMLq7Mx7KnCARS6uf9s3q7QdjZK7CqElRj0QN
wZZbLgPLJIo4Wn0ctFDQv0w+t+3eUCYs7y0fEHZmmt8wSLE6WFhZ
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:17 2025 by rpki-client