Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File:                     941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier:          4h2DVmpwZm8mtI/ll6E5BPoWLDv2DWODYx8XWIMmI9o=
Subject key identifier:   51:21:3E:46:D1:B2:A7:58:D8:44:92:56:F0:A8:58:16:AA:B8:8C:31
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer:       /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial:       DC6B10737D34F0DAFBE5ACED81FF209EF04E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number:          020B
Signing time:             Sun 03 Aug 2025 18:34:39 +0000
Manifest this update:     Sun 03 Aug 2025 18:29:39 +0000
Manifest next update:     Mon 04 Aug 2025 19:37:39 +0000
Files and hashes:         1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: Oli6ykCISIg0x3fbgZe82z4lbYZS0dF/baFG3pCkoiE=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 19:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dc:6b:10:73:7d:34:f0:da:fb:e5:ac:ed:81:ff:20:9e:f0:4e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
        Validity
            Not Before: Aug  3 18:29:39 2025 GMT
            Not After : Aug  4 19:37:39 2025 GMT
        Subject: CN=51213E46D1B2A758D8449256F0A85816AAB88C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:49:fc:a7:1c:3c:a5:27:4e:9c:27:3f:14:
                    82:b3:4b:dc:c3:fd:8e:f6:d5:7a:bc:91:82:f4:e5:
                    93:ec:8e:d3:6b:73:81:1b:f1:6c:7c:aa:00:18:50:
                    54:28:1b:a1:92:b8:8d:10:72:81:b7:2a:9e:64:4c:
                    a2:42:f0:cb:85:41:a5:da:03:f8:aa:60:d3:a3:21:
                    ca:b5:46:f0:5b:a4:5c:55:e8:ac:c7:fc:47:0a:b0:
                    29:6b:3e:90:5e:de:3a:f5:8b:38:06:1e:7e:e1:9e:
                    90:f7:e7:77:5b:e7:3d:17:67:1c:23:91:42:ed:91:
                    5c:d9:6a:aa:83:ec:a4:26:20:a2:6f:fe:9e:ab:67:
                    85:3e:94:35:3b:e7:8c:e9:50:03:25:c5:61:00:15:
                    2b:94:8b:94:36:79:ce:31:36:59:37:f7:03:4c:f2:
                    87:44:89:1e:31:74:f9:c3:ca:59:25:77:4e:3f:a5:
                    f1:6a:2b:bd:ca:e7:2b:0f:a5:ac:42:09:0a:d7:0b:
                    62:c0:0f:60:ed:ea:50:44:6d:b4:ca:bd:bf:5e:24:
                    51:cf:ae:44:4b:ca:c4:a9:44:e7:49:a5:32:a1:76:
                    50:1c:6d:42:49:70:ea:80:89:f9:2a:ad:e5:4b:52:
                    09:53:1d:be:7c:04:0f:c1:60:50:4e:c2:dc:df:db:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:3E:46:D1:B2:A7:58:D8:44:92:56:F0:A8:58:16:AA:B8:8C:31
            X509v3 Authority Key Identifier:
                keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:cf:a4:ac:0b:ff:a8:c3:ab:52:ce:7a:ba:58:9c:39:96:
         87:ea:32:7a:ac:76:99:56:d5:66:0e:d7:fd:b3:eb:94:e0:f8:
         8f:eb:fc:9b:2e:70:06:a8:b4:c3:b2:38:64:15:bc:78:74:fa:
         bf:27:0d:81:e2:46:05:e5:6b:4b:c7:07:5a:43:b6:7b:81:a7:
         db:09:6b:a8:c8:31:35:6a:e4:e1:dd:47:f9:2e:d9:5e:60:b2:
         d0:ed:10:9a:f5:3a:90:11:b2:2a:53:61:9f:e9:10:b4:76:14:
         28:c9:21:e7:75:ec:8d:47:6b:8b:89:68:ae:9c:f2:22:51:03:
         dc:f2:24:92:d0:83:81:f9:65:bc:4c:70:00:65:3d:7b:71:ab:
         3a:40:cf:81:93:3b:fa:39:2f:40:1d:c3:1b:22:01:7f:ac:39:
         f9:46:47:c5:ba:ce:9e:ae:ae:02:ea:c1:6a:d5:e6:bc:b5:66:
         e6:fc:6e:c2:27:b9:37:17:4a:85:78:63:99:87:38:fe:b9:a0:
         27:41:65:0d:fb:fe:9e:dd:a8:ec:80:10:3a:ad:8c:0b:3e:4f:
         dd:fd:e8:e7:6d:73:39:47:37:5c:20:89:28:ce:c2:44:75:24:
         e7:13:4d:2c:b7:88:b0:f1:07:20:d9:e3:84:39:4c:2a:0e:a1:
         ec:b1:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:00 2025 by rpki-client