Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          POynAI41mh7MdZCtpuin7+NoaADlFUZf0N7hPG0Pflk=
Subject key identifier:   27:60:12:93:A6:43:51:0C:DA:D2:09:99:7C:D0:89:4D:D8:70:E0:25
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       46FAE7E1D8CB6CE8FD58C1EC8116BC168FDC322C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          020D
Signing time:             Mon 04 Aug 2025 10:46:07 +0000
Manifest this update:     Mon 04 Aug 2025 10:41:07 +0000
Manifest next update:     Tue 05 Aug 2025 13:39:07 +0000
Files and hashes:         1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
                          2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: vqGI5SLzbQiBvr139irKPeYweCCY5qOeCNK6ge4UpM0=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fa:e7:e1:d8:cb:6c:e8:fd:58:c1:ec:81:16:bc:16:8f:dc:32:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: Aug  4 10:41:07 2025 GMT
            Not After : Aug  5 13:39:07 2025 GMT
        Subject: CN=27601293A643510CDAD209997CD0894DD870E025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:34:ad:da:55:bb:62:a0:2e:78:d6:ae:70:
                    c9:9e:3f:79:f6:ba:a1:c1:d3:40:9c:49:da:1e:03:
                    c9:89:10:8d:4e:0a:b1:72:4d:72:aa:8f:33:ff:95:
                    f0:c2:81:e6:34:a4:73:fc:af:ec:35:19:92:98:89:
                    61:a6:20:1d:96:b7:e8:57:ee:2d:c7:6e:04:d1:16:
                    79:45:34:88:49:d1:58:d1:71:4a:69:f1:58:12:9e:
                    a4:ac:11:cc:52:e7:88:a0:dc:8a:54:69:c5:f0:1b:
                    4f:25:2b:38:53:36:75:50:98:4c:cd:ba:3c:71:53:
                    46:ba:86:a8:94:3b:67:6a:5b:7a:5e:aa:16:1d:f6:
                    79:9e:0c:ed:8e:32:d0:b1:52:b1:40:c9:d8:96:73:
                    e5:c4:fe:18:88:67:77:0f:6b:46:74:37:60:0c:dc:
                    a0:57:cf:79:90:72:bd:0a:a1:e1:4c:0e:ee:f1:51:
                    e1:08:12:cd:7c:36:f1:b4:5c:1c:78:eb:18:14:68:
                    09:27:81:33:92:22:5a:57:0a:f1:8c:d5:ce:16:e6:
                    8b:15:e0:e6:ab:45:00:40:16:e3:4d:fd:77:f0:8d:
                    53:e6:7a:66:e1:bd:d0:3a:ec:48:0c:e9:22:7d:f0:
                    ca:28:17:c7:1e:42:99:00:2b:ae:5b:38:e5:8c:3f:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:12:93:A6:43:51:0C:DA:D2:09:99:7C:D0:89:4D:D8:70:E0:25
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:a6:07:47:9b:90:18:0a:24:2d:01:5a:16:d3:4c:3b:93:
         78:54:59:b7:ba:7a:83:58:dc:b6:a6:98:e5:4a:49:6a:fc:86:
         fe:9b:81:73:13:2c:93:e8:45:72:51:f4:6b:49:16:c8:7f:47:
         27:ea:54:a5:82:e0:1a:05:7f:b1:03:70:fa:8e:a6:f5:0a:01:
         ea:f1:4a:bb:6c:6c:0b:ff:6d:34:6e:00:a9:a1:58:fd:7c:0f:
         c9:be:0c:05:71:95:8d:8d:4f:24:cd:ce:14:e3:29:62:79:4c:
         2d:59:27:d5:cb:55:eb:9f:06:cb:7c:88:1a:7b:72:58:78:4f:
         5f:60:40:d5:b7:3f:be:4b:b1:0f:27:52:b5:78:ce:60:e6:8a:
         ba:7f:9c:6b:26:b5:85:16:97:fd:a4:40:76:6c:db:67:45:f3:
         c6:92:38:1a:5b:5c:5d:52:27:63:71:7b:80:16:04:27:41:e7:
         ff:b7:77:f7:d4:17:76:f3:b1:db:21:69:c6:c5:b4:d7:f9:96:
         9b:8e:5e:a1:72:10:da:61:92:37:26:9f:a9:a5:65:21:98:14:
         22:de:37:0f:ca:6d:b3:c7:34:88:6c:fb:08:6b:8a:29:1d:6b:
         60:2a:37:a1:92:b0:4e:bd:a9:88:4a:5c:26:94:15:be:c2:83:
         f8:85:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:36 2025 by rpki-client