Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
File:                     C0877CC9EB843E8740AA80328E653F865C246295.mft (raw, json)
Hash identifier:          fQMLfPqCB66Ld3iHgK3EzUgrRPk1iU6uWdJtffd5nbk=
Subject key identifier:   29:9E:C4:B4:2B:A9:3C:43:5F:38:FD:FD:C2:A6:37:6D:20:CB:6C:B9
Authority key identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95
Certificate issuer:       /CN=c0877cc9eb843e8740aa80328e653f865c246295
Certificate serial:       097A4093031015E9FC0C2FE0F67134DB38349352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
Manifest number:          01FF
Signing time:             Fri 25 Jul 2025 21:48:27 +0000
Manifest this update:     Fri 25 Jul 2025 21:43:27 +0000
Manifest next update:     Sun 27 Jul 2025 00:53:27 +0000
Files and hashes:         1: C0877CC9EB843E8740AA80328E653F865C246295.crl (hash: iKbaTSGyvl5C1m0x7MggZMKBNcqt4z0OjWeAUu6rbCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7a:40:93:03:10:15:e9:fc:0c:2f:e0:f6:71:34:db:38:34:93:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0877cc9eb843e8740aa80328e653f865c246295
        Validity
            Not Before: Jul 25 21:43:27 2025 GMT
            Not After : Jul 27 00:53:27 2025 GMT
        Subject: CN=299EC4B42BA93C435F38FDFDC2A6376D20CB6CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:ef:5b:a1:1c:5c:2e:63:b9:0f:ce:18:52:
                    66:5c:c2:c1:e1:3b:85:a2:62:70:87:bf:7c:8e:0c:
                    1a:6a:66:34:ee:03:65:77:aa:0d:ba:0d:b0:11:54:
                    96:ba:a7:76:ff:63:97:f1:41:34:db:dd:83:73:f4:
                    c6:00:78:8e:ff:b2:4d:db:1d:d1:2d:16:ce:1a:be:
                    57:a7:25:01:7f:7f:82:6b:b2:3d:7c:d4:e8:e3:38:
                    8f:4d:b3:29:5c:60:da:5d:6d:50:de:d0:a3:d9:fd:
                    d0:3e:9f:75:25:8e:17:46:57:19:f7:82:ce:9a:11:
                    00:6b:b3:8f:5e:42:dd:5a:b8:bd:e0:07:b1:8a:a1:
                    9b:96:bc:5d:ef:a9:d9:ba:69:93:4f:67:36:d2:7a:
                    6c:fb:4d:91:05:e2:d8:26:7b:44:4d:16:7d:0b:4a:
                    09:48:7e:77:61:c5:a2:0e:79:af:b7:7d:23:61:d4:
                    04:44:a6:b3:6b:65:c1:c5:b2:c7:e2:e5:be:e5:1d:
                    1a:4a:25:9b:e1:10:35:3c:10:9b:42:49:db:2b:92:
                    57:76:35:6c:ce:93:85:25:25:6a:8f:dd:2d:93:fb:
                    2f:91:bd:4f:0b:14:4b:04:74:94:27:18:8d:09:db:
                    82:b5:a1:e3:52:4b:54:15:c2:07:ab:f6:32:c7:a0:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:C4:B4:2B:A9:3C:43:5F:38:FD:FD:C2:A6:37:6D:20:CB:6C:B9
            X509v3 Authority Key Identifier:
                keyid:C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:eb:e1:38:b7:8c:8e:47:cb:b9:c4:b1:f6:eb:9f:94:bf:
         04:41:10:31:e9:f0:08:b1:59:77:27:33:19:d3:2a:ad:02:e9:
         15:3f:9d:0c:c2:ee:31:a4:cf:85:9e:15:b6:f5:f9:34:0d:15:
         5b:e9:82:17:81:f6:ac:62:e0:2e:09:e1:96:55:9d:7b:2f:d4:
         6a:48:6c:6c:27:b9:f5:3c:61:cf:f9:52:89:5c:c3:a7:ca:e7:
         a3:6f:83:23:c7:78:ba:37:72:e4:d4:18:51:d0:90:fa:41:94:
         33:75:1f:be:d2:30:94:9d:f4:38:d7:18:06:61:e7:77:e4:c9:
         5e:f0:88:49:f6:22:54:b2:51:c0:d4:b5:74:11:8d:1a:3a:5a:
         24:90:56:c5:28:f0:89:27:e9:2b:7f:8c:d6:9b:17:b6:08:6a:
         8a:df:55:e7:11:91:43:8c:f0:a3:46:1d:90:20:e8:91:04:1b:
         4f:5b:e8:3f:2b:04:71:67:a4:a2:ef:b9:8f:da:8a:f5:ff:04:
         f7:17:d1:49:d7:d2:bf:82:de:c0:53:25:5d:49:e5:42:d4:eb:
         37:91:b6:2a:8f:ed:4a:03:b6:c3:22:ca:e1:d4:0f:c0:54:be:
         6a:52:9f:0d:90:56:2e:dd:a4:a4:be:04:73:7e:c2:b8:4c:91:
         88:6c:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:28:45 2025 by rpki-client