Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File:                     6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier:          ixZA27o7Lh+HemL14tGP+o51z9abb9o+d4x9GvpqAEw=
Subject key identifier:   69:B1:E2:A1:ED:91:5A:B4:5F:1F:77:57:82:20:49:20:78:D0:C6:7E
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer:       /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial:       3A7A8652FE75CC2D6B7754EDC16341A5831A7361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number:          01FE
Signing time:             Sat 26 Jul 2025 06:24:03 +0000
Manifest this update:     Sat 26 Jul 2025 06:19:03 +0000
Manifest next update:     Sun 27 Jul 2025 09:32:03 +0000
Files and hashes:         1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: g5va+uIl3konXexoaYKGg9h2Tkb56uqRx6gwS53tNwA=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:86:52:fe:75:cc:2d:6b:77:54:ed:c1:63:41:a5:83:1a:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
        Validity
            Not Before: Jul 26 06:19:03 2025 GMT
            Not After : Jul 27 09:32:03 2025 GMT
        Subject: CN=69B1E2A1ED915AB45F1F77578220492078D0C67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:f0:a0:03:f4:7d:8d:83:f6:5d:3b:f2:6f:
                    a9:ba:e2:3f:29:ab:d6:fc:23:0a:02:bf:f6:1a:bf:
                    af:10:cb:f3:5b:ef:56:89:aa:c1:b6:a8:71:3f:a6:
                    2b:91:8e:ce:77:47:1b:22:7c:2d:d4:1e:a0:fc:6e:
                    0d:0e:78:2e:b5:f0:79:72:9c:1c:5e:4c:46:cf:b5:
                    82:9b:49:27:9d:b9:15:f1:e6:f3:d7:0e:b6:ad:40:
                    d0:65:2a:36:0a:c9:71:4e:3b:05:6f:7f:a5:6f:e5:
                    88:95:fa:8c:b8:85:21:b6:b6:dd:57:0d:94:4b:80:
                    ad:d2:b8:19:ed:ab:6c:a3:c9:73:d5:57:d7:f8:75:
                    61:aa:01:8a:db:3f:58:07:72:0d:50:25:d7:54:f7:
                    89:4a:6c:28:6f:55:0f:3b:10:b5:98:8b:f1:12:96:
                    2c:f9:08:d2:28:2f:58:aa:22:3d:41:cb:26:ed:62:
                    d8:b5:f7:cf:58:de:4a:45:6d:ef:bb:32:c0:2d:25:
                    e5:44:54:6e:8e:7e:10:95:6b:da:9b:4c:b2:98:e0:
                    1a:64:d2:1e:3a:53:4a:d5:53:c5:43:f3:17:81:42:
                    c5:f8:a4:48:a3:f4:8f:5c:6c:7b:ab:bc:50:9d:08:
                    51:7d:b3:21:d9:0f:8a:88:96:4d:43:cb:9a:62:1f:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B1:E2:A1:ED:91:5A:B4:5F:1F:77:57:82:20:49:20:78:D0:C6:7E
            X509v3 Authority Key Identifier:
                keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:76:cc:2c:02:ef:c6:0e:f3:90:b7:5d:f0:70:ec:3b:89:
         ee:74:f8:03:56:93:3d:96:59:87:a8:e6:d2:3e:3e:de:8c:9b:
         36:45:9e:a9:f6:d7:a4:b6:0c:0f:79:27:08:b1:2c:7c:8a:e2:
         87:bd:e4:65:07:b4:7d:22:40:3b:c7:e3:9a:68:09:bb:9c:66:
         f5:16:91:a8:56:44:f2:54:a1:02:7a:ee:5e:74:6f:dd:d4:7d:
         2f:45:3e:b0:83:d9:82:21:6d:4a:02:82:33:e8:f6:66:ee:78:
         ed:3d:e9:f5:b2:93:f9:b6:f0:21:30:48:17:77:38:13:12:d4:
         0c:dc:cc:65:78:a5:6b:63:a5:ec:0d:27:ac:98:96:81:11:68:
         81:ce:0e:dc:f9:c3:5c:0f:6e:b9:c2:b2:b5:a0:53:c9:66:32:
         42:1f:0f:4b:05:6d:39:20:d0:ea:06:4a:8d:91:62:31:3a:b4:
         c2:90:6a:06:4d:4b:6d:b0:e7:19:78:ce:5f:ac:55:5d:bd:78:
         13:e7:27:66:79:42:87:92:2e:0f:6d:09:02:ae:79:0a:4a:f9:
         2f:45:cf:41:7e:66:cf:53:29:ab:5c:fe:1f:e0:e7:07:14:1a:
         03:bf:4a:6b:49:cd:cf:fe:68:af:79:da:70:a9:3b:10:38:59:
         71:79:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:23:36 2025 by rpki-client