Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File:                     1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier:          w4hzN6TbifCBjFUgdTXY+9O4IpEO0IV8sbRkkZya/kU=
Subject key identifier:   3C:81:A9:5E:2C:75:5F:4F:4A:D1:C6:37:69:5E:6D:EB:E7:1E:F1:A5
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer:       /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial:       02659DE968E2CB6969325CBC33C845DB1D294F76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number:          0202
Signing time:             Sat 26 Jul 2025 13:54:27 +0000
Manifest this update:     Sat 26 Jul 2025 13:49:27 +0000
Manifest next update:     Sun 27 Jul 2025 17:41:27 +0000
Files and hashes:         1: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=)
                          2: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: eqa9YhYtTkNiMS1koSB9elVs0bwiFN+p1PD0u0MyRMk=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:65:9d:e9:68:e2:cb:69:69:32:5c:bc:33:c8:45:db:1d:29:4f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Validity
            Not Before: Jul 26 13:49:27 2025 GMT
            Not After : Jul 27 17:41:27 2025 GMT
        Subject: CN=3C81A95E2C755F4F4AD1C637695E6DEBE71EF1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:12:5c:f9:5d:58:63:61:e6:d9:84:05:ef:a2:
                    b4:15:6a:78:4f:63:22:46:d8:c4:39:d6:58:64:ff:
                    43:0e:b6:dd:11:dd:29:e1:08:c6:b9:f7:df:b5:25:
                    54:71:ce:45:89:bc:51:7e:cf:46:cd:45:63:cf:b2:
                    15:ec:9d:e4:2a:d8:79:93:9b:38:91:e8:d9:de:80:
                    16:72:f4:e7:58:be:90:09:3b:5f:84:51:a3:72:cf:
                    36:53:0f:51:9d:e0:36:1c:0d:db:01:34:21:2c:92:
                    4e:7e:8c:c3:05:52:8d:a7:83:95:09:c5:f8:f6:13:
                    db:71:aa:5c:80:54:dd:eb:df:cd:51:e2:94:5a:ce:
                    cb:26:8e:dd:e7:f6:30:05:4a:7e:0e:08:41:4a:71:
                    13:ff:30:90:2d:95:e8:b6:ea:63:a5:2f:88:cb:cb:
                    d5:5b:54:08:97:ad:65:f2:a2:c8:9f:e2:7e:54:12:
                    91:e4:cb:de:2e:b1:a1:ae:b1:fc:2d:c1:3a:f0:17:
                    51:b0:91:b3:06:ce:0a:b5:ca:ba:1e:ff:33:9c:6c:
                    6f:a2:a7:c7:51:87:4f:ba:b5:f5:5c:4a:17:05:85:
                    d4:59:54:d5:a3:89:d2:a1:f3:67:16:93:30:86:7a:
                    17:30:21:bc:e7:37:49:60:ef:de:65:20:ea:c8:5d:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:A9:5E:2C:75:5F:4F:4A:D1:C6:37:69:5E:6D:EB:E7:1E:F1:A5
            X509v3 Authority Key Identifier:
                keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:90:de:f4:ec:a5:bf:ca:c1:5d:69:2f:7b:77:52:80:73:aa:
         da:04:71:1c:e7:7e:ad:7f:24:f8:29:c0:93:4a:45:cd:9a:fb:
         c5:a1:df:9a:88:67:e0:e6:e2:53:5a:1c:d3:e4:3d:1e:fb:75:
         1c:6b:20:23:83:5a:42:fc:bc:f7:d1:8c:2c:ed:8b:2e:fa:c8:
         45:09:f4:67:70:df:14:0b:9c:9b:4e:a4:c8:d1:61:12:a8:a6:
         15:00:57:e1:3b:d0:cf:61:22:b2:db:44:b2:ae:d7:d5:e3:b9:
         d9:48:0a:15:60:4c:e8:2b:27:b6:f8:bd:b8:5b:fd:ae:fe:ae:
         bf:be:5e:48:06:5b:30:71:ef:4a:b0:81:40:0c:ae:8d:fe:e9:
         97:54:84:99:29:ac:85:65:c1:60:82:23:bc:a0:20:75:80:67:
         a5:78:5f:f8:4e:5d:d8:f6:ec:35:ef:6e:61:7d:6b:05:a1:8f:
         3c:22:89:28:a2:d9:77:89:9e:ae:af:b2:40:b6:96:75:0e:1c:
         00:06:cc:89:7e:8d:79:4d:ea:80:f2:c9:f9:a7:c0:7e:35:3a:
         60:2e:e3:a3:c0:b7:79:cc:72:81:7e:25:f2:1a:22:a8:ae:e8:
         ed:2a:91:3d:ef:c8:da:11:48:5d:e3:40:44:d3:eb:dd:89:64:
         b4:4f:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:56:19 2025 by rpki-client