Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          LhuJZlY50eaMFyoqphq4TYY0ZMWvt9UGQXfKxzPxpzQ=
Subject key identifier:   3B:05:BE:F4:78:2D:81:29:0E:CD:79:FC:31:26:6E:E7:0D:8C:B6:39
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       0CD5DAA0C2D475A3900CBB4CE04410FFBE24010F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0201
Signing time:             Fri 25 Jul 2025 22:23:28 +0000
Manifest this update:     Fri 25 Jul 2025 22:18:28 +0000
Manifest next update:     Sat 26 Jul 2025 22:38:28 +0000
Files and hashes:         1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: 2dTg43sR9u37QZED94aj76k4VIQacKHeM4GYW/YFbRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 22:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d5:da:a0:c2:d4:75:a3:90:0c:bb:4c:e0:44:10:ff:be:24:01:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Jul 25 22:18:28 2025 GMT
            Not After : Jul 26 22:38:28 2025 GMT
        Subject: CN=3B05BEF4782D81290ECD79FC31266EE70D8CB639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:31:12:6b:07:0f:3d:51:19:1c:fc:4f:f1:
                    c6:41:5f:da:78:01:e8:b9:38:6d:2c:c1:99:cb:8f:
                    21:31:3b:66:c3:17:a3:ff:05:78:4a:d1:a7:19:6b:
                    e9:46:cf:6a:b9:6f:b2:83:93:e2:b6:da:db:10:8d:
                    66:5c:1c:2a:a8:9d:46:7b:f0:32:56:54:ff:84:7e:
                    f0:ea:6b:e1:18:8b:74:08:21:46:85:c2:56:7e:27:
                    5d:a1:f5:38:9f:60:dc:7b:0f:5e:37:af:ee:e5:f3:
                    03:70:56:3f:b5:ec:e5:cc:4f:2c:80:b3:a1:9a:42:
                    a7:06:85:3b:a8:a5:76:fd:2f:f3:6c:96:4b:42:93:
                    01:6a:f1:81:92:69:fa:d5:d8:45:c9:2b:24:26:ba:
                    33:fd:8a:cf:75:85:f6:ec:d7:59:d7:d1:82:0c:1f:
                    b8:8a:2f:70:1b:c1:4b:55:7d:72:fa:55:25:24:44:
                    c3:f6:c3:0c:51:16:aa:7e:f4:39:5b:46:be:b0:cf:
                    08:8d:ec:6a:ea:5e:0e:5b:31:72:c1:8a:3f:4c:27:
                    78:df:8f:cc:24:b2:66:21:34:82:7f:34:43:ed:fe:
                    c5:9b:9c:d0:45:89:a8:b0:5f:0d:48:40:f4:22:48:
                    1a:c5:a2:2a:c1:c9:f0:66:05:38:b7:31:97:90:b7:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:BE:F4:78:2D:81:29:0E:CD:79:FC:31:26:6E:E7:0D:8C:B6:39
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a8:01:a9:4e:1e:be:27:7a:5d:5c:ea:73:ab:f1:b5:30:e3:
         6b:3d:e9:cc:c1:a9:d7:8f:8e:f2:02:7e:67:04:01:d1:ba:7b:
         28:21:75:78:5c:78:8a:5f:60:b4:5b:88:54:0b:eb:17:d0:c1:
         fd:45:30:29:d4:bd:69:c5:9e:1e:2e:0e:73:b2:88:40:d2:2d:
         07:13:36:61:4c:e2:96:9f:d3:f0:ce:22:c5:de:21:e4:78:17:
         01:79:08:25:0b:f0:d3:e8:8e:e7:0b:23:03:e6:86:88:92:29:
         10:ec:38:69:74:c3:27:74:98:8d:76:3b:fd:45:f9:b0:1e:17:
         63:08:e0:3d:3d:a6:e4:2c:d1:08:ed:a7:8b:eb:2d:39:53:71:
         ce:55:94:17:be:82:ab:ba:65:ec:97:05:9d:30:be:d7:1e:c7:
         18:b4:f0:60:da:76:ec:7d:47:e6:da:51:fb:6e:11:0c:d0:d2:
         d5:82:00:d2:50:3d:a3:57:7c:49:62:c1:61:39:b5:21:45:e6:
         54:2f:62:5c:c5:a5:81:57:22:3a:3b:9b:f9:e8:1a:b8:10:78:
         88:df:72:2f:4f:77:19:8e:e7:71:e3:e5:0b:1d:c4:80:31:e8:
         d7:cd:21:1f:14:2e:e2:58:c5:b9:c4:a5:19:3c:90:05:98:2f:
         1c:f8:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:31 2025 by rpki-client