Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          VvQADaRC1yxS5eZZbEIodW50ZTNCiZbwF98D+TeUYLY=
Subject key identifier:   10:F9:B5:B2:BF:49:57:54:52:D3:C6:F8:CD:7B:E8:52:09:25:32:98
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       6991CE28875055A468396B249979BB432F02673C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          0371
Signing time:             Sun 14 Jun 2026 02:59:20 +0000
Manifest this update:     Sun 14 Jun 2026 02:54:20 +0000
Manifest next update:     Mon 15 Jun 2026 05:22:20 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: ijpy3nJPUVzzhylchAya11K2HODc/xDaMVTSX7gyxaw=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:91:ce:28:87:50:55:a4:68:39:6b:24:99:79:bb:43:2f:02:67:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Jun 14 02:54:20 2026 GMT
            Not After : Jun 15 05:22:20 2026 GMT
        Subject: CN=10F9B5B2BF49575452D3C6F8CD7BE85209253298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:fe:bf:fd:e0:c2:99:b3:79:a5:c0:71:60:
                    aa:d5:19:51:f1:79:53:32:e9:ac:d4:f5:dd:87:4d:
                    d3:2c:8d:b4:08:dd:08:7b:b2:cb:c5:e5:dd:3f:f9:
                    7c:0f:b7:76:db:78:b5:ea:c1:2d:3d:5a:0d:89:dc:
                    15:60:4b:96:77:34:d0:16:0c:4f:cb:cf:15:66:fd:
                    25:08:20:02:96:f4:07:2a:00:35:6a:68:43:8d:81:
                    c0:a1:c2:70:e3:45:74:6f:1c:11:42:5d:a2:87:74:
                    c3:f9:a3:ac:8e:42:95:61:05:1f:e6:93:1f:64:dd:
                    7c:73:57:96:12:e2:5f:15:13:16:66:ba:d7:b7:59:
                    8a:cf:55:52:19:78:01:5f:59:cf:91:48:e6:36:1a:
                    62:33:99:45:39:d7:35:42:14:2a:03:8d:77:53:90:
                    a8:64:11:e2:5c:ca:91:9d:86:fc:49:19:7c:c9:60:
                    0a:de:c7:71:0f:93:ec:56:8b:7b:d7:07:9f:88:22:
                    e9:e3:75:44:fb:9c:5c:96:fd:bc:59:a9:1d:a5:ad:
                    fe:38:15:a5:55:d0:0c:e3:3a:b3:07:6c:e9:33:e8:
                    56:45:f8:88:00:bd:a9:7b:ac:91:33:f9:4a:18:b3:
                    e3:a3:80:2e:30:9e:55:4f:7b:10:32:f4:28:01:71:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:B5:B2:BF:49:57:54:52:D3:C6:F8:CD:7B:E8:52:09:25:32:98
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:70:ef:ce:c2:85:ae:38:c5:90:2f:2d:7a:ed:6a:ff:89:af:
         60:a7:ff:90:f8:18:ab:c7:a4:b5:e6:20:a9:8b:9e:50:98:16:
         d5:74:e0:b8:83:6c:81:51:7e:f9:b9:33:25:11:80:79:ff:b0:
         17:74:ef:3d:ee:e3:93:60:62:bb:a1:6c:b1:e1:88:53:df:c7:
         e3:ab:ff:c1:6f:ff:35:69:3f:5a:0d:c2:6e:3a:63:b5:5b:3f:
         e3:1f:95:c4:b4:ed:f0:c4:bb:8d:20:8f:3d:6f:36:85:18:b0:
         70:1e:08:5c:ec:f7:62:7d:da:12:de:c2:d5:44:de:b9:3b:56:
         5c:82:73:03:ed:5e:de:89:e6:3b:60:e6:c6:ba:0b:36:f4:6f:
         12:28:9b:36:8a:73:03:f9:bd:21:c1:4e:92:59:d4:94:c2:52:
         a7:6c:19:f3:73:cb:bf:c6:a0:de:41:37:ab:04:aa:ba:de:ae:
         43:5e:2c:17:0b:fb:25:f5:1b:d5:37:6e:ba:ab:4b:f0:09:97:
         a2:ea:e7:61:b0:ab:9d:bd:ba:05:8f:90:e3:a9:8e:85:77:f3:
         6a:be:7d:24:01:03:1b:58:4a:11:88:d6:f7:33:7a:71:9a:3d:
         1c:90:f9:85:ea:34:9b:24:30:a1:4a:e0:00:85:98:a8:9a:da:
         c6:9c:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:38:57 2026 by rpki-client