Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File:                     16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier:          T3MKGt88DLY/4G6arPJkCMSLjCxvBsnx+vS0Q9EJiug=
Subject key identifier:   92:B4:B3:45:06:30:BC:FA:FC:32:DE:4C:4D:FB:32:19:6E:88:68:8E
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer:       /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial:       5CA73D96023BDCB8698F637809F24B4F711B34AE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number:          0370
Signing time:             Sat 13 Jun 2026 12:06:20 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 12:23:20 +0000
Files and hashes:         1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 9HXzELTGbxuRoEZlsvtPwGdObGDeBSjT2qi8YkFmv4U=)
                          2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:3d:96:02:3b:dc:b8:69:8f:63:78:09:f2:4b:4f:71:1b:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
        Validity
            Not Before: Jun 13 12:01:20 2026 GMT
            Not After : Jun 14 12:23:20 2026 GMT
        Subject: CN=92B4B3450630BCFAFC32DE4C4DFB32196E88688E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:d1:5e:48:98:2a:89:f8:b5:1c:2c:d9:fa:
                    0d:3b:76:4c:e5:f5:cd:de:e5:26:e9:f9:81:cc:d0:
                    af:d4:54:c2:70:e6:00:89:02:c5:5e:57:40:29:da:
                    13:ef:38:c1:7b:63:12:a5:04:70:20:0f:de:51:37:
                    c4:aa:16:48:24:6b:99:c5:b7:26:4e:15:3b:73:ce:
                    bb:a3:21:69:97:f2:77:55:b5:52:21:13:0c:76:77:
                    fc:ce:fb:09:d6:d5:0d:88:fb:6d:c3:e3:c8:9f:10:
                    89:c9:ea:42:a8:7d:f8:31:b1:a9:cf:19:09:5e:fc:
                    ad:93:af:0a:18:cb:ed:f4:28:05:aa:22:d4:d3:9d:
                    25:83:c9:6b:56:c3:a8:e7:06:5b:3f:41:c2:db:b9:
                    e4:99:0b:34:58:3a:f3:a8:dc:14:1f:d6:cf:8f:09:
                    81:3c:97:9e:24:63:84:13:6d:98:4d:5e:97:d8:d6:
                    b8:60:68:d7:99:aa:d7:da:4b:a0:c4:8f:0d:5a:ba:
                    f8:b3:ab:25:f4:82:c1:6e:5c:a5:09:02:34:57:14:
                    bb:19:8b:df:2d:93:27:e0:83:48:3e:e9:2e:ba:cf:
                    a2:b2:47:f1:5c:a8:2c:e6:c4:5e:b3:68:24:d3:49:
                    e7:8d:b1:12:73:bf:b3:6d:31:d0:6e:39:25:da:ef:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:B3:45:06:30:BC:FA:FC:32:DE:4C:4D:FB:32:19:6E:88:68:8E
            X509v3 Authority Key Identifier:
                keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:91:18:dd:42:21:2d:26:49:3c:e7:e6:44:74:79:34:ae:
         d4:8e:9d:d5:4f:42:a0:1f:20:30:2c:7b:f3:c9:61:bb:8e:a3:
         83:a3:2f:ff:62:6f:55:28:6e:4b:e6:97:2d:d4:39:8c:6c:9a:
         0c:63:25:20:27:e7:cf:13:d4:e5:87:6c:f3:47:6c:52:09:cc:
         19:51:44:02:61:c6:95:ff:a4:29:e8:5f:4a:c8:54:3f:f4:6a:
         a3:c6:a4:68:c2:94:9e:68:2c:73:5c:16:11:aa:ea:c9:d6:5b:
         43:4a:d6:bf:15:42:65:cf:29:39:8c:6e:f7:83:31:ff:eb:42:
         a1:4f:01:3f:8f:a3:c8:b2:91:c3:fc:2d:a9:b9:0d:2f:56:93:
         99:83:6f:a7:49:09:1a:bc:a1:d2:bf:86:bd:87:2b:b7:90:5e:
         3f:64:ee:ad:28:c3:a9:e9:18:7f:79:af:e4:2d:1c:21:52:9d:
         78:da:5c:10:67:94:6c:3b:70:98:03:7f:36:50:74:15:37:c0:
         93:90:8f:aa:51:24:9c:62:aa:7e:42:70:a4:32:4c:ce:4e:9f:
         e3:b9:b9:13:43:2e:11:43:25:5d:08:6b:3f:b5:ba:e0:25:3f:
         48:64:a1:b5:72:33:ca:b5:71:61:f3:7d:79:20:e2:b6:2b:67:
         6c:d9:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:19:02 2026 by rpki-client