Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File:                     16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier:          jdRWE16OWvDHOPKnVNlcpovuBj+SzAaAMAh1O/i4jxc=
Subject key identifier:   3E:94:84:DD:47:2E:17:D2:6C:36:43:BE:7C:FB:46:19:ED:30:45:B4
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer:       /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial:       78BB41C6E31DA3F972C7D5A1ED669007F2FC739C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number:          02EC
Signing time:             Thu 26 Feb 2026 21:28:46 +0000
Manifest this update:     Thu 26 Feb 2026 21:23:44 +0000
Manifest next update:     Sat 28 Feb 2026 00:04:44 +0000
Files and hashes:         1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: SiAMJlxA011cMHSKXgHIkNkAqW1WCQKG7MDE6D8B5P8=)
                          2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bb:41:c6:e3:1d:a3:f9:72:c7:d5:a1:ed:66:90:07:f2:fc:73:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
        Validity
            Not Before: Feb 26 21:23:44 2026 GMT
            Not After : Feb 28 00:04:44 2026 GMT
        Subject: CN=3E9484DD472E17D26C3643BE7CFB4619ED3045B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:e8:fc:df:21:78:09:29:d7:21:a9:31:42:
                    38:66:42:d4:e3:39:b3:32:b4:8f:a0:b5:e5:2d:7b:
                    e8:be:cd:c4:fd:70:94:15:c2:35:4f:b5:55:4c:d4:
                    0a:04:f9:39:6a:27:1d:ff:71:c8:67:bb:bd:9a:32:
                    1a:f2:0b:99:62:d9:d8:ef:38:36:af:2c:3e:25:e7:
                    76:29:64:76:aa:d2:78:25:e0:7c:17:ce:e4:7d:b2:
                    76:e3:1c:28:29:03:c2:d0:08:9b:20:a1:c3:09:5d:
                    c2:66:61:ef:19:db:f5:1c:82:0c:8e:2a:12:ab:0c:
                    b7:ba:7e:d7:0e:b4:0c:ff:47:98:41:79:0e:b0:b2:
                    78:b3:37:d1:96:f1:39:ae:af:0d:17:f2:1a:8d:04:
                    b6:fd:d5:2c:5a:95:82:fb:6c:a8:67:34:bb:a3:e2:
                    78:77:6a:49:fc:95:3c:a1:fd:58:5f:5c:bf:ed:b4:
                    b8:58:8b:07:7d:23:4c:fc:ed:b7:60:57:45:ab:39:
                    0f:f5:70:31:fe:3d:f7:07:af:7c:e4:c5:ca:b9:47:
                    8f:a9:7f:f3:81:e2:df:97:ed:bc:d7:1f:be:92:e3:
                    a6:32:89:1a:0a:3e:88:c7:06:fc:78:3c:a3:59:5e:
                    f4:c2:b2:46:37:ad:6c:38:fc:7c:bb:d3:4d:81:5d:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:84:DD:47:2E:17:D2:6C:36:43:BE:7C:FB:46:19:ED:30:45:B4
            X509v3 Authority Key Identifier:
                keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:76:54:af:07:82:2b:e9:a8:61:01:37:49:60:32:71:95:
         2a:08:33:74:ab:49:c0:d1:e0:a2:03:b0:40:da:42:9e:52:1b:
         e6:08:44:85:5f:8c:a0:b2:1c:e9:8f:6d:a8:87:13:50:2c:29:
         b1:91:8d:63:f4:1f:21:2d:3a:60:c0:85:b3:07:86:95:74:fa:
         3b:0c:13:b7:9a:03:ac:0b:56:41:1c:56:31:99:de:a1:6c:3a:
         60:78:59:4e:1b:40:69:dc:05:ac:14:24:c5:f1:a4:2d:01:f0:
         4f:4f:29:2c:b6:23:23:57:aa:3f:7a:f2:e2:74:1f:6b:0f:f4:
         28:2c:39:a1:6a:b2:81:2e:48:41:66:45:06:3a:25:8c:65:5f:
         e8:43:18:14:41:25:3b:77:78:d1:83:0c:a2:7a:6f:86:fd:e5:
         af:7e:8e:b6:3b:ef:66:b2:a7:90:b2:69:00:9c:4a:61:d4:a0:
         52:cc:35:12:d2:d8:41:2a:76:21:d3:59:5f:f9:ce:14:67:79:
         a8:c3:d9:ca:a8:a6:e2:d6:9f:3f:9f:78:da:77:35:8d:b0:8d:
         ed:f0:7a:8c:c5:76:6a:1c:5b:0d:f1:f7:75:91:60:17:a1:e4:
         f8:93:4a:fc:90:5c:d1:29:40:a0:df:b6:37:2d:60:c5:28:11:
         46:bd:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----