Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
File:                     B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json)
Hash identifier:          OYQs/LPcYnEBNzS0Vs+J43eQVdLmvgHYSxODoJNRLDA=
Subject key identifier:   5B:40:AE:39:FE:10:96:5A:6D:3F:2F:1F:CC:74:8E:5B:60:08:4C:3A
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       23D9F2BAC33DE632CFA3B9AD4CF7C86E450E0E59
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
Manifest number:          0371
Signing time:             Sat 13 Jun 2026 10:21:00 +0000
Manifest this update:     Sat 13 Jun 2026 10:16:00 +0000
Manifest next update:     Sun 14 Jun 2026 12:45:00 +0000
Files and hashes:         1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: EcU8oLlTUzhev97JQomKl4Hv/Twvn15iesBY8jYrQPk=)
                          2: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 4QQNsk8lBa8O942cPNbgOsUIiLitH/4e3K7Oj090cpQ=)
                          3: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nO1YT0HdU2m72ueMZYtU7pGui3eQWYc9n6VJnhvZh24=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d9:f2:ba:c3:3d:e6:32:cf:a3:b9:ad:4c:f7:c8:6e:45:0e:0e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Jun 13 10:16:00 2026 GMT
            Not After : Jun 14 12:45:00 2026 GMT
        Subject: CN=5B40AE39FE10965A6D3F2F1FCC748E5B60084C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9d:2c:77:0c:ff:b2:b9:42:be:9f:a2:5e:f9:
                    f8:8f:3f:93:60:6f:af:84:a1:a4:ab:2d:ce:16:1c:
                    51:c8:7b:10:d1:72:38:a2:5d:75:8b:42:42:e8:03:
                    8e:7f:15:69:86:56:a7:62:34:f7:73:72:7b:59:94:
                    10:a7:cf:af:a8:c0:8a:e4:67:0f:29:19:05:c3:65:
                    7e:34:c9:f6:60:3e:be:8e:87:fd:2f:51:fd:df:fe:
                    82:0d:68:4c:6c:99:6a:a8:4a:64:08:fd:9e:17:db:
                    fa:c1:ff:01:23:d2:3a:6d:82:cb:56:a3:64:5d:c4:
                    2c:97:c3:bf:a3:04:1d:fe:1f:29:b0:a3:25:37:f9:
                    95:c7:17:69:e4:47:65:6b:d8:c7:d5:b9:71:4d:24:
                    70:bd:10:f2:73:02:1f:75:f7:0a:ca:99:93:31:1b:
                    21:a0:65:52:d9:d6:16:58:b1:e2:af:0c:5f:7c:41:
                    2e:f4:91:41:72:12:c0:ba:bb:45:df:f5:d6:c2:dc:
                    7a:7c:7b:7c:d3:e8:58:f2:2a:6a:17:24:10:f9:12:
                    71:e1:74:ff:45:bd:d2:01:ff:9b:86:d2:b9:a6:58:
                    ad:a8:d9:87:8f:7c:02:39:30:b1:2c:e3:c1:78:2d:
                    04:3c:10:36:07:fb:46:bb:a3:df:42:3a:dd:f4:32:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:AE:39:FE:10:96:5A:6D:3F:2F:1F:CC:74:8E:5B:60:08:4C:3A
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:c6:14:a2:d3:d0:d3:51:fe:d4:a2:cd:9b:f0:5a:4a:a2:
         47:70:c7:63:f7:ee:b0:6f:ce:d5:11:69:94:7b:c2:fa:66:a6:
         e6:7f:2a:fc:df:0e:38:4b:49:12:62:0d:b1:d2:b6:26:93:ae:
         3f:3d:60:7b:95:5b:77:24:d3:2e:01:db:56:33:df:ca:bf:1d:
         f4:af:d8:21:cd:33:81:73:7f:fc:de:86:0e:c3:b6:9a:2d:17:
         1f:eb:ef:b5:51:99:65:fc:36:ac:3c:3e:f2:43:fd:b6:8a:a7:
         25:7c:88:c6:8d:d9:54:23:e8:e2:6d:ee:eb:e3:e9:61:b3:05:
         06:e4:10:dc:2b:cb:04:8d:d0:4c:cf:ea:aa:22:9d:b6:66:cb:
         6c:8f:30:ca:5e:08:0c:16:1c:bf:63:8d:fe:1b:fc:db:38:bc:
         f9:a3:70:4c:07:5c:f3:ca:19:85:d1:ca:1f:69:45:c8:a6:24:
         4f:be:c5:ed:88:f7:85:3d:2b:0b:56:a1:59:9c:b8:75:b6:f0:
         f6:a4:7e:d5:4c:2e:b2:88:69:ff:1a:c8:18:4f:20:da:e9:ac:
         6a:01:d0:72:c3:8b:65:8e:5d:16:a4:b2:ee:3b:b0:04:33:86:
         03:91:d1:8a:91:37:52:23:8b:b6:8d:2f:7a:f3:6c:04:23:b6:
         59:bc:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:15 2026 by rpki-client