Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          HeABbGYEnxGKRdRONtkfGbJ0etqYl+efvII3ceEJqm8=
Subject key identifier:   A4:C9:C3:49:71:DB:F1:15:5E:A6:8C:38:8C:64:A2:6E:FE:A6:B3:F2
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       3A5418B84D35AC9DB0EB0D3A1F103C891F195AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0325
Signing time:             Fri 17 Apr 2026 21:48:55 +0000
Manifest this update:     Fri 17 Apr 2026 21:43:52 +0000
Manifest next update:     Sat 18 Apr 2026 22:17:52 +0000
Files and hashes:         1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: S19OVcUVN2DjU1m86HPbW5jQW/V7BxgPe+PJK4saHLE=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:54:18:b8:4d:35:ac:9d:b0:eb:0d:3a:1f:10:3c:89:1f:19:5a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Apr 17 21:43:52 2026 GMT
            Not After : Apr 18 22:17:52 2026 GMT
        Subject: CN=A4C9C34971DBF1155EA68C388C64A26EFEA6B3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:72:54:3b:f7:92:6d:66:84:69:5e:07:8e:
                    47:7b:24:b1:d4:ce:c5:fe:fd:6b:83:8f:51:92:89:
                    22:48:32:6d:89:63:98:6f:78:0a:d6:21:1d:0d:04:
                    64:d4:78:93:bb:19:82:7b:43:5e:8c:39:41:28:96:
                    ba:c7:65:68:84:60:85:d3:b2:51:07:4e:3f:ad:9c:
                    43:10:14:4a:76:5b:2d:44:d1:45:da:a1:d3:1c:ab:
                    0a:14:93:3f:6d:d7:03:26:c2:ad:0a:4f:fa:ee:86:
                    85:f0:6e:dc:39:fa:eb:42:1b:a3:06:61:90:62:ee:
                    94:c7:6c:11:11:dd:d1:9d:f2:67:d7:62:cc:d8:21:
                    e2:75:5e:cc:a7:d0:48:97:64:c7:f7:e2:22:bd:a6:
                    09:1e:22:72:7d:2e:7b:29:48:73:c9:3a:f6:df:f7:
                    94:1b:cc:35:f2:af:e7:00:19:8c:a1:1c:b6:bb:c4:
                    5a:aa:ad:53:08:ee:2c:0b:6c:34:73:75:0c:3a:9e:
                    1e:29:84:fb:5f:39:4a:61:4c:46:74:18:38:35:2e:
                    5b:f8:c3:9d:a6:22:85:ce:6c:b2:01:c2:20:7c:23:
                    62:f2:bd:d1:b0:a2:02:30:1f:52:00:1b:f0:70:05:
                    12:a3:38:e5:4a:3a:c3:39:ac:ee:d7:5e:14:80:f2:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:C3:49:71:DB:F1:15:5E:A6:8C:38:8C:64:A2:6E:FE:A6:B3:F2
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:97:b0:8d:2d:33:f7:23:38:92:87:7e:43:34:fa:59:c2:
         b6:ed:b6:35:da:a5:6d:09:4a:c8:d3:b1:b3:63:19:bd:df:3a:
         59:4d:ae:29:9b:8e:46:ad:a5:7d:1f:52:5e:e0:f4:ef:7f:3a:
         4d:22:e8:ae:51:96:c5:2b:21:48:29:c4:50:15:45:12:39:06:
         a5:bc:28:09:d5:e0:1a:c5:e3:45:7b:e1:4a:a9:c4:b1:68:7a:
         ec:a6:4f:eb:6c:45:ee:35:65:5a:59:36:70:1b:f0:8b:cc:b6:
         7d:3b:17:d7:fb:1e:29:fe:d7:e7:98:ee:d2:75:33:ee:6e:3c:
         c9:4d:62:0f:06:51:e2:a7:d3:a4:b0:0d:1f:18:55:6b:2f:d5:
         ab:ed:92:e0:3a:59:cc:eb:4d:61:29:89:78:c0:23:a1:90:49:
         cd:7c:ac:13:b1:d9:f8:dd:03:24:14:53:8b:13:de:5b:8a:42:
         22:8d:42:25:ce:49:50:1b:69:39:f4:8f:6d:4b:3e:79:b2:6d:
         05:56:25:2f:b6:4a:c6:f8:bc:9b:21:42:ef:a7:b6:bf:8c:60:
         74:56:fd:c3:13:96:60:e0:bd:80:14:8b:12:bc:79:07:bf:79:
         a2:08:f2:00:1a:10:a4:6d:ec:7a:4b:09:52:cd:2e:5b:3f:c7:
         ec:d8:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:27 2026 by rpki-client