Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          GkYuD6fVVhZF047ylsUL5/8NWCYKm9dDxXcerq+1+po=
Subject key identifier:   2A:18:A1:C0:6C:6D:AF:CD:C9:7C:A5:5A:A2:E4:E7:F7:29:9B:2C:32
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       37200D84F6CE40D20331994CA7E3DB78F36AF4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          0321
Signing time:             Fri 17 Apr 2026 01:12:18 +0000
Manifest this update:     Fri 17 Apr 2026 01:07:16 +0000
Manifest next update:     Sat 18 Apr 2026 02:37:16 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: gFrn5hpfbFQa1pkqLTvbguEGCDVkhdof9uKKYKrTznM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:0d:84:f6:ce:40:d2:03:31:99:4c:a7:e3:db:78:f3:6a:f4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: Apr 17 01:07:16 2026 GMT
            Not After : Apr 18 02:37:16 2026 GMT
        Subject: CN=2A18A1C06C6DAFCDC97CA55AA2E4E7F7299B2C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:3d:7d:26:df:a5:f1:0c:8d:27:10:46:d1:
                    17:48:70:85:4f:34:f4:92:e2:70:bd:7c:47:a6:dc:
                    e0:c9:e2:01:3d:08:7c:be:d9:71:95:89:5a:44:81:
                    36:8c:b8:04:71:d2:ac:a7:9a:df:4b:be:34:92:9e:
                    3b:ef:2c:8f:d7:e5:f2:8e:e7:2a:fb:92:05:da:ea:
                    17:ce:82:61:5c:23:9a:54:95:87:d0:f3:75:b5:79:
                    d7:f2:b3:21:73:bd:5c:fd:9f:2f:7c:e8:55:cb:d3:
                    94:eb:c2:8d:07:57:d8:f9:e5:e4:a3:11:f8:be:d6:
                    db:5e:b9:f2:ef:08:6e:2a:cf:d8:4a:5c:39:2c:e1:
                    ec:e9:9c:58:47:0b:f8:1d:34:24:1e:b8:4c:0e:3b:
                    0c:a8:ed:94:a9:60:2a:c3:74:e9:90:5e:74:72:94:
                    92:1a:00:d2:e2:8f:e5:af:0d:70:07:3c:5d:c5:60:
                    16:83:7a:f1:e8:c7:7e:bc:de:c0:2c:25:29:57:e6:
                    e7:12:8f:41:ef:78:78:4a:cb:05:ab:cc:8c:01:fb:
                    5b:b0:2a:67:82:6e:6d:a9:08:27:2f:01:a6:f7:55:
                    67:af:a1:73:76:87:0d:d3:70:b5:40:ac:07:58:8c:
                    16:5f:6d:d8:3c:d8:53:da:78:da:27:38:b2:96:10:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:A1:C0:6C:6D:AF:CD:C9:7C:A5:5A:A2:E4:E7:F7:29:9B:2C:32
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:c9:55:d6:27:aa:0f:ac:e7:44:82:4e:31:9c:2e:07:52:
         68:1d:98:a9:0d:f5:99:a1:36:e2:ec:00:9e:0a:fa:5e:80:95:
         ef:20:70:b4:ad:24:fc:14:39:23:4c:5d:d8:c8:ae:5e:0b:d4:
         06:56:d8:50:43:00:fa:bb:29:99:59:e9:10:79:c1:24:f8:8c:
         93:e0:82:be:70:ce:ca:d1:42:c1:11:69:33:c3:16:9b:26:3e:
         de:de:83:8f:eb:3b:ea:24:6c:f3:f9:70:8a:bb:db:36:74:bc:
         3f:2c:9e:33:a1:03:e0:66:88:23:7d:09:8d:35:89:47:a7:99:
         8c:22:5b:1a:bf:35:a7:56:b0:79:91:72:d3:97:e9:80:3f:df:
         ce:90:1c:8f:4a:19:7e:96:9f:2c:4c:4c:f0:41:a1:6b:91:05:
         46:38:55:6c:f4:50:92:20:c5:3e:53:00:9e:04:72:a4:2d:3f:
         08:ab:7e:b7:5b:c2:32:c6:fd:4b:f2:65:73:7b:dc:fd:bf:05:
         7d:96:4e:23:ce:3a:9d:92:5e:80:83:53:99:f8:9a:8a:33:d2:
         8f:77:a3:4a:f5:8b:38:b2:0b:bc:3d:c8:07:fe:5b:75:03:cc:
         38:62:28:90:e7:90:6d:28:fa:e5:54:7e:cc:26:b6:62:cc:58:
         a1:36:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:39 2026 by rpki-client