Manifest

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
File:                     A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft (raw, json)
Hash identifier:          LK6JPHmatXjy3iUmx3rsctaDDj6x/fnydRkZFF2anns=
Subject key identifier:   CF:FF:C6:BA:66:3F:A7:73:83:17:3D:DF:B4:ED:94:1A:7D:93:F6:D7
Authority key identifier: A9:99:00:0A:0E:CA:46:10:E0:BB:AD:70:1D:3F:0F:43:29:C3:79:A1
Certificate issuer:       /CN=a999000a0eca4610e0bbad701d3f0f4329c379a1
Certificate serial:       6A165B0BBAF6729D957C317F955281F2C7E7B3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZkACg7KRhDgu61wHT8PQynDeaE.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
Manifest number:          25
Signing time:             Sun 15 Nov 2026 07:13:20 +0000
Manifest this update:     Sun 15 Nov 2026 07:08:20 +0000
Manifest next update:     Mon 16 Nov 2026 08:13:20 +0000
Files and hashes:         1: A999000A0ECA4610E0BBAD701D3F0F4329C379A1.crl (hash: hGHoMpGIUZC34JiTc9QVyj/PHzFV2YpW9/vNzf6aLJA=)
                          2: AS218995.asa (hash: PA5XocsxjZ/Ur31C9IY9D+at89QjWXmyHzaidkwo524=)
Validation:               OK
Signature path:           rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.crl
                          rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qZkACg7KRhDgu61wHT8PQynDeaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:16:5b:0b:ba:f6:72:9d:95:7c:31:7f:95:52:81:f2:c7:e7:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a999000a0eca4610e0bbad701d3f0f4329c379a1
        Validity
            Not Before: Nov 15 07:08:20 2026 GMT
            Not After : Nov 16 08:13:20 2026 GMT
        Subject: CN=CFFFC6BA663FA77383173DDFB4ED941A7D93F6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:fa:98:ce:9c:17:00:36:82:a7:44:4f:0f:
                    64:ad:ba:42:91:85:d6:fb:53:f7:55:52:18:50:75:
                    28:5a:34:ba:e9:9e:81:e3:ea:c0:5c:cf:e6:39:9f:
                    f5:52:f0:b5:b4:e1:82:8c:6c:45:9b:38:f9:6c:80:
                    65:a2:61:67:21:94:d3:b3:23:bb:64:f2:d6:66:97:
                    25:24:60:c3:6f:a6:a6:3e:2c:3b:b4:01:e6:ec:58:
                    dd:9a:99:18:73:67:69:0a:71:84:0a:fa:64:e9:b3:
                    a2:e9:17:05:03:b5:fb:f3:2d:86:6f:fa:49:f6:ea:
                    f4:f6:40:3e:11:70:61:45:bb:59:9b:44:9d:1f:8d:
                    26:b9:16:13:c9:b4:ff:43:61:d2:fd:5f:42:28:49:
                    da:b9:a4:a0:67:91:b0:13:20:47:f8:87:c0:b9:fe:
                    bf:78:51:6f:20:49:10:23:28:ba:7a:f9:2a:08:ca:
                    08:39:14:c8:fe:6b:76:39:cf:82:42:fa:f1:62:5e:
                    6c:a0:6e:b5:c4:5e:c3:ee:c8:ad:79:88:2e:89:47:
                    90:bb:cc:05:4d:48:2a:8f:c8:28:d1:fb:5e:30:84:
                    53:09:45:e1:52:e1:7a:37:fa:39:5e:09:0e:c5:10:
                    6f:db:49:82:b3:81:82:20:57:1b:bd:10:6d:5a:33:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FF:C6:BA:66:3F:A7:73:83:17:3D:DF:B4:ED:94:1A:7D:93:F6:D7
            X509v3 Authority Key Identifier:
                keyid:A9:99:00:0A:0E:CA:46:10:E0:BB:AD:70:1D:3F:0F:43:29:C3:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZkACg7KRhDgu61wHT8PQynDeaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/0/A999000A0ECA4610E0BBAD701D3F0F4329C379A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:64:54:4b:eb:bd:87:8f:eb:87:35:3d:c0:dc:a2:f3:d5:
         ac:47:c5:86:49:1f:0e:43:33:7f:34:54:67:82:c5:d6:29:35:
         18:1e:93:e0:ab:04:c2:8f:d7:8c:70:94:9e:1a:da:67:00:44:
         99:0d:ac:23:99:25:a5:ac:43:f0:97:23:11:f8:75:19:0f:0c:
         08:42:6f:5a:77:e8:8a:d0:bf:4c:9a:cd:02:81:b2:84:fc:89:
         9e:db:43:b0:3b:dd:e8:d9:0f:5b:0b:cd:41:dd:33:f3:e5:e4:
         6b:03:01:ba:39:84:2f:0e:62:cb:e2:66:da:29:51:ee:13:07:
         6c:a2:e8:e0:47:69:88:03:ac:21:6a:c3:95:05:72:f8:b2:97:
         83:a2:21:e7:14:2f:25:b3:58:0f:4c:39:1b:bd:d3:15:54:62:
         c6:8c:dc:be:3c:b9:28:7d:80:2f:2c:7b:74:f5:05:ff:d0:50:
         0b:9d:fa:3f:45:08:6c:a3:7c:18:b4:eb:4f:b6:49:25:53:7e:
         07:45:c2:9e:6f:6c:e2:b3:f4:d0:6e:14:91:ca:9d:9c:92:58:
         be:bb:db:42:42:c8:b0:ad:f6:87:6c:d6:8d:a0:4a:6e:b0:2e:
         69:4c:6d:ac:04:b4:fc:ef:7e:8c:bb:87:a4:1a:e5:b2:7b:58:
         57:1a:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:41:43 2026 by rpki-client