Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          cGP+r0RmbWiq9pfke1yx0EXlwQ6EBRzG0SqJGo3McGk=
Subject key identifier:   36:2D:A9:28:DD:CA:02:0A:10:97:84:98:CD:81:B6:2B:5A:04:20:88
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       45FEC50C57C69305B367354EBCED5DC838563D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          020B
Signing time:             Tue 05 Aug 2025 13:37:19 +0000
Manifest this update:     Tue 05 Aug 2025 13:32:18 +0000
Manifest next update:     Wed 06 Aug 2025 15:30:18 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: OrRf6/drMXiH9LhGJjsXtCbGs+z+YPEsZeYiyQQT4A0=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fe:c5:0c:57:c6:93:05:b3:67:35:4e:bc:ed:5d:c8:38:56:3d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: Aug  5 13:32:18 2025 GMT
            Not After : Aug  6 15:30:18 2025 GMT
        Subject: CN=362DA928DDCA020A10978498CD81B62B5A042088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:e5:42:6d:4a:96:34:90:14:d1:c6:03:92:
                    4f:bb:ff:78:6b:d2:55:0f:97:ba:39:05:3e:aa:52:
                    b6:4a:e8:24:1f:51:d1:89:d6:d7:64:1c:f9:41:75:
                    e7:2e:bc:f4:d5:66:f6:8c:4f:2d:22:24:b1:ba:64:
                    73:52:77:86:22:60:fd:4e:04:48:d2:ab:3c:5d:59:
                    42:0c:67:30:53:0f:fe:aa:c3:c2:ac:a5:64:13:56:
                    5b:21:ce:f8:3f:6b:0a:a6:68:ad:ea:4c:29:72:7d:
                    a1:f5:34:4d:5f:b5:39:ce:04:00:a2:1d:25:32:9b:
                    52:e3:ba:04:70:11:51:d5:0a:c7:cc:f2:75:b2:a5:
                    1a:26:26:41:f7:aa:ef:33:b1:bd:23:9f:40:7f:92:
                    bb:08:69:f7:31:3c:7d:48:42:4c:26:9f:42:ec:c5:
                    50:a3:42:05:7e:1d:ed:c2:02:a3:84:fa:36:65:4e:
                    91:c5:13:2a:f1:2b:9c:e8:ec:64:6c:d9:4a:b6:62:
                    af:53:cf:d7:0e:2c:7d:b7:08:6c:c0:b5:90:30:c8:
                    af:d1:0e:ad:43:35:4a:f9:a9:36:1e:1e:6d:25:a2:
                    47:85:07:b9:04:c0:b4:38:b2:96:60:af:a6:17:09:
                    49:21:77:a3:4b:8e:2c:e2:1b:87:46:5d:6f:96:ff:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:A9:28:DD:CA:02:0A:10:97:84:98:CD:81:B6:2B:5A:04:20:88
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:fd:ae:10:30:d6:d6:05:b4:20:2f:01:0b:55:b6:41:12:
         a8:cb:a6:e5:9a:a1:fe:f9:61:86:2c:64:7c:be:4b:d1:9e:1b:
         e7:eb:b2:cc:b5:95:85:4f:18:5d:bc:d9:47:76:88:59:c5:ed:
         81:d6:65:5a:29:2b:7c:a7:17:fd:ac:c6:81:10:26:3e:83:d4:
         8a:c5:7c:33:40:5b:70:27:d2:de:39:72:f2:56:60:97:09:68:
         db:fa:2b:7d:77:18:f4:e9:ae:cd:f1:58:19:af:02:66:d2:14:
         f1:53:09:9c:ca:2d:48:e3:02:63:b4:6f:a1:db:4f:de:dd:d0:
         ba:84:99:50:c3:01:52:e8:13:34:15:06:12:64:7d:b2:8d:8f:
         aa:0b:ec:ff:3a:bc:3c:3b:7d:bf:85:a9:f4:12:de:c4:63:8d:
         49:63:90:3f:83:54:aa:d8:3c:23:64:5b:02:0a:9e:2f:5f:79:
         3d:41:cc:e5:c5:49:4f:29:9e:6e:45:bd:4b:3b:2a:2b:11:a1:
         cb:7b:55:b3:24:a2:73:29:51:9e:80:0d:b5:de:89:0b:d2:ff:
         24:73:b6:d9:49:76:d5:28:8b:75:ef:d3:de:2f:fc:56:32:5b:
         8b:df:26:ab:7a:44:37:b5:00:15:0a:5e:fa:c8:4a:eb:2d:c2:
         a1:52:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:01 2025 by rpki-client