Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File:                     941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier:          ij4LRxirylYu97v5OTGsRqTfphHUC7cO5PQVwCUIF2M=
Subject key identifier:   4F:CB:60:A9:97:D8:CD:D7:95:76:3A:2D:16:B3:6E:FB:41:1E:84:2D
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer:       /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial:       0D412A4D2C8B3CD3055810EFF4D16BA267E42042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number:          01FF
Signing time:             Fri 25 Jul 2025 18:12:35 +0000
Manifest this update:     Fri 25 Jul 2025 18:07:35 +0000
Manifest next update:     Sat 26 Jul 2025 20:19:35 +0000
Files and hashes:         1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: sXA1XniAs18MTQO0gSkWzERZ0CWo8QgA2U+EM5IlUyQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:41:2a:4d:2c:8b:3c:d3:05:58:10:ef:f4:d1:6b:a2:67:e4:20:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
        Validity
            Not Before: Jul 25 18:07:35 2025 GMT
            Not After : Jul 26 20:19:35 2025 GMT
        Subject: CN=4FCB60A997D8CDD795763A2D16B36EFB411E842D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:50:cc:de:63:50:d1:63:de:e8:6f:e6:c7:
                    f8:bd:b9:e0:95:6a:3f:09:fa:04:d4:9c:0c:94:4b:
                    c2:9c:33:1f:eb:ee:2c:62:4b:a3:6a:5a:6a:da:55:
                    63:ca:ee:8f:93:53:d3:7c:f0:f5:da:98:23:dd:21:
                    91:0d:38:a2:eb:45:35:e5:9d:10:96:1f:6a:9a:95:
                    cf:2f:59:69:c9:e0:9a:e3:15:3d:41:ad:06:3c:cb:
                    e0:50:5a:cf:22:b0:90:0f:8d:9c:df:81:b5:2b:4d:
                    86:f5:6e:58:42:8c:d4:40:c0:72:88:cf:99:e0:ed:
                    a9:c2:b3:b3:56:69:4f:56:bb:c8:e4:9e:f9:07:cb:
                    c1:53:b4:b2:eb:b7:af:97:1f:b9:34:fb:3b:07:d8:
                    77:6e:0b:60:21:df:e1:32:c5:80:ae:54:02:0d:40:
                    ec:ca:bc:0a:f8:98:22:7f:dd:62:ca:3f:cf:27:dd:
                    8b:6a:42:20:02:37:e9:6c:44:ce:fe:8a:45:5b:11:
                    a1:4c:9f:65:32:5f:c4:e8:c5:cb:50:e0:cd:05:06:
                    13:90:0e:d5:a0:12:96:90:dc:d4:49:9b:10:72:cf:
                    e3:20:ef:19:13:ee:b3:97:c1:12:d3:20:eb:3f:21:
                    77:8b:f3:a7:8b:7d:2d:36:36:c0:46:04:dd:44:0d:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CB:60:A9:97:D8:CD:D7:95:76:3A:2D:16:B3:6E:FB:41:1E:84:2D
            X509v3 Authority Key Identifier:
                keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a6:c6:54:d1:1e:09:64:96:b1:5c:6c:b4:74:81:9e:2b:30:
         71:09:97:23:bd:aa:f4:04:7e:ab:f1:96:be:a9:5a:c9:64:ca:
         50:fa:e7:54:27:37:8e:a2:46:cf:98:35:18:a7:d4:86:06:3b:
         0e:e5:bc:2c:40:fc:c4:29:08:88:f4:26:14:43:2b:6b:43:88:
         3c:cf:c3:b2:0e:96:66:6b:96:85:1e:09:87:87:db:75:d6:18:
         4b:80:a3:84:ce:67:e5:aa:20:f7:17:ba:35:2a:61:50:70:74:
         d2:ae:a0:ee:50:36:e5:7b:e2:8f:8a:d0:15:ce:66:35:cf:33:
         e0:62:8b:e7:3d:db:42:dd:d3:40:f6:21:cd:11:1a:7e:a6:ed:
         8c:8b:ff:96:06:c2:a4:46:19:a7:72:56:17:13:13:9e:85:df:
         c0:c7:d3:e0:dd:ec:19:17:49:09:f6:20:9a:16:30:d7:bb:b8:
         02:99:3d:c6:7e:06:af:97:a9:f3:e0:58:9a:f6:a1:4c:b0:04:
         17:0c:c0:1a:5c:fb:08:33:6a:81:29:9a:6a:52:8e:41:37:e3:
         5a:0f:a6:dc:b8:eb:7c:f7:ef:a6:6b:d0:2d:12:8f:47:e3:c7:
         32:92:da:b7:a5:62:1b:47:50:eb:42:5a:44:3f:86:c4:82:7d:
         2b:6c:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:24 2025 by rpki-client