Manifest

$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft
File:                     3401B6222407FE29448F50FF43067F8CD6451300.mft (raw, json)
Hash identifier:          z+PIydTFZQ9UdBG3hdtecLLg66dj9yOBWn76SJN9yuQ=
Subject key identifier:   9E:12:C0:6F:AD:4B:64:48:B3:9D:B3:8A:73:01:5F:7A:76:0C:65:BF
Authority key identifier: 34:01:B6:22:24:07:FE:29:44:8F:50:FF:43:06:7F:8C:D6:45:13:00
Certificate issuer:       /CN=3401b6222407fe29448f50ff43067f8cd6451300
Certificate serial:       3A7CEC51EB6E12A47DA5684FC0499EF224ADC52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAG2IiQH_ilEj1D_QwZ_jNZFEwA.cer
Subject info access:      rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft
Manifest number:          07
Signing time:             Thu 05 Nov 2026 06:43:38 +0000
Manifest this update:     Thu 05 Nov 2026 06:38:38 +0000
Manifest next update:     Fri 06 Nov 2026 10:24:38 +0000
Files and hashes:         1: 3401B6222407FE29448F50FF43067F8CD6451300.crl (hash: 2yuJvXsaZdUFLDpLCofE8E8c49nFLrPiRW6nStcxr+w=)
                          2: AS205941.asa (hash: 5tOTzEj6yq8L+hN67PSiEW76HWWs+9FI7fQ02zxFV08=)
Validation:               OK
Signature path:           rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.crl
                          rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAG2IiQH_ilEj1D_QwZ_jNZFEwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7c:ec:51:eb:6e:12:a4:7d:a5:68:4f:c0:49:9e:f2:24:ad:c5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3401b6222407fe29448f50ff43067f8cd6451300
        Validity
            Not Before: Nov  5 06:38:38 2026 GMT
            Not After : Nov  6 10:24:38 2026 GMT
        Subject: CN=9E12C06FAD4B6448B39DB38A73015F7A760C65BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:1c:6b:9e:49:b8:53:f4:2a:69:d4:0a:86:
                    42:7f:b9:19:87:f1:62:1a:81:d5:7a:15:af:bc:24:
                    ba:00:29:ed:30:b1:b4:12:f1:66:8b:a2:b3:d2:ab:
                    6c:5b:f6:36:dc:43:9e:96:86:e5:95:b2:41:05:c3:
                    ea:0a:6b:dd:c5:66:17:db:d2:f3:ae:8b:ee:05:5f:
                    e8:67:e1:0c:46:cb:db:eb:50:66:fb:2f:ba:95:0b:
                    0b:8b:6c:d8:bd:cf:42:6d:ed:e6:d8:99:b8:ad:51:
                    15:03:6e:b0:4c:58:c5:fb:96:fe:36:4d:72:13:90:
                    f4:90:fe:78:86:1d:49:c1:a3:a2:3a:84:73:a7:48:
                    28:db:70:ad:8e:15:50:a1:c8:80:ac:f6:aa:a2:33:
                    79:4c:42:cd:2f:e7:5d:6e:38:5b:3e:ca:7c:79:40:
                    ab:09:a6:56:24:69:0d:07:de:d4:0d:4c:fc:2e:ac:
                    8c:5d:a5:32:47:75:c7:2b:3d:ad:5f:23:89:e8:ac:
                    09:da:16:f8:e1:6e:20:a3:cb:73:7b:58:90:dd:84:
                    b6:a0:09:4a:ff:5e:51:44:17:11:01:94:2e:26:bb:
                    12:3f:c8:e0:71:09:d8:91:ff:7d:34:45:77:c6:2d:
                    07:d8:5a:5f:0c:32:94:8b:ec:1a:50:db:66:90:15:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:C0:6F:AD:4B:64:48:B3:9D:B3:8A:73:01:5F:7A:76:0C:65:BF
            X509v3 Authority Key Identifier:
                keyid:34:01:B6:22:24:07:FE:29:44:8F:50:FF:43:06:7F:8C:D6:45:13:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAG2IiQH_ilEj1D_QwZ_jNZFEwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:c9:79:97:52:44:a8:be:17:20:a3:13:41:ef:34:d6:aa:
         a6:24:11:d6:87:7e:9e:15:ed:79:3b:1e:49:1f:2a:db:5f:bd:
         1e:36:b5:c7:d6:01:31:d2:08:18:49:eb:cd:03:41:a2:14:eb:
         6d:56:49:11:e0:b3:bd:da:d9:e9:61:66:ed:1b:21:59:c7:08:
         18:3e:71:99:8c:1c:d1:ca:19:98:d1:42:d8:c1:55:1c:5f:0f:
         da:35:7a:79:cf:2f:c6:93:15:d7:3b:3f:87:4c:59:97:f3:a5:
         f1:c6:f3:7b:a8:5e:bc:77:8b:6f:ae:64:54:ea:77:db:4c:15:
         1d:1e:17:5e:c9:a1:3d:a2:bc:17:5a:31:48:3c:e0:b2:64:03:
         f3:10:a4:80:8f:cc:99:60:c7:50:d3:26:e4:20:41:40:de:b3:
         32:ab:5a:19:26:d0:48:27:3c:0b:26:25:a0:4b:83:6a:eb:6a:
         9e:ea:3e:22:bc:f5:08:d9:90:9d:4b:10:ab:3f:1c:19:be:c3:
         45:bf:e3:5d:65:33:57:67:9e:0c:88:27:7e:c1:35:f7:57:46:
         38:e0:3a:78:35:cc:9d:fd:5b:c0:15:c1:62:b7:2d:28:c9:24:
         80:47:66:9f:e4:cf:f0:09:d4:c7:57:59:1e:e0:97:52:42:8f:
         87:f1:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:24:52 2026 by rpki-client