Manifest

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
File:                     B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json)
Hash identifier:          wiQDyx1yJIagy52Hy0j3vPX864E4roBO/C497Csqguw=
Subject key identifier:   FF:0C:CE:2F:73:93:79:A5:24:3B:BC:17:51:8F:C7:D0:02:8D:46:34
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       1D38278745CC7CD5CF02C98DBB307C06FDAEB8D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
Manifest number:          03DE
Signing time:             Thu 17 Sep 2026 16:23:01 +0000
Manifest this update:     Thu 17 Sep 2026 16:18:01 +0000
Manifest next update:     Fri 18 Sep 2026 20:16:01 +0000
Files and hashes:         1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nO1YT0HdU2m72ueMZYtU7pGui3eQWYc9n6VJnhvZh24=)
                          2: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: 7xrkqDw42EX4x8dDqXahqdWESKNh+mwRcFbOeRfBITs=)
                          3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: 4QQNsk8lBa8O942cPNbgOsUIiLitH/4e3K7Oj090cpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:38:27:87:45:cc:7c:d5:cf:02:c9:8d:bb:30:7c:06:fd:ae:b8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Sep 17 16:18:01 2026 GMT
            Not After : Sep 18 20:16:01 2026 GMT
        Subject: CN=FF0CCE2F739379A5243BBC17518FC7D0028D4634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:eb:6c:ca:79:ef:2b:01:fe:b5:4c:1f:d2:
                    f4:0f:ca:54:da:f3:e4:97:76:e7:93:7b:e1:2f:80:
                    3f:89:bc:4e:9d:33:ab:ef:b7:87:58:c0:11:ca:41:
                    29:7c:ef:91:4a:ab:e7:6a:57:1b:df:4c:60:75:e9:
                    d6:6b:1d:32:4d:a5:fa:47:51:d7:89:3d:18:0d:79:
                    b5:a9:45:1f:54:a7:a3:c3:c6:9b:71:45:b0:33:99:
                    0c:b5:39:2e:a2:fc:bb:af:05:33:96:13:7d:6c:25:
                    84:11:c0:26:5c:ea:55:ce:46:57:06:f8:4b:d0:03:
                    1d:2b:a2:fd:0f:f3:d4:96:33:c0:17:45:d3:a6:5e:
                    68:16:00:14:35:81:bc:95:e6:9b:e1:ae:0b:00:c2:
                    da:57:d7:cf:23:b3:58:5e:ab:cd:ac:c1:91:cb:17:
                    36:54:cf:66:f7:d4:e7:e7:1b:f8:38:c7:d0:d3:52:
                    4c:f3:c3:7a:02:58:df:94:3b:ef:5b:ae:0c:26:51:
                    01:d2:e2:88:82:4d:f2:e8:b3:77:37:ba:9b:3c:11:
                    9a:48:b1:83:f6:51:0e:46:6c:38:27:c8:ad:7a:41:
                    cf:57:25:6f:2f:ff:50:ac:9a:67:4a:02:dc:a5:cf:
                    61:ec:c8:c3:50:1c:f9:c6:e1:a3:fb:6b:08:81:bd:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0C:CE:2F:73:93:79:A5:24:3B:BC:17:51:8F:C7:D0:02:8D:46:34
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:84:07:3c:37:b4:a4:aa:f3:27:80:fe:7c:88:d4:d7:dc:
         8d:dc:3e:23:5c:a6:72:40:7a:4b:6f:23:ec:db:40:46:55:f4:
         45:51:a9:48:39:a8:25:65:a5:44:78:8f:e2:2c:86:7e:0c:62:
         29:3f:5b:d8:b9:39:98:13:96:89:5e:dd:4b:e3:cb:2a:c0:01:
         b9:81:1f:5d:90:25:b7:fc:e0:ad:88:ac:8d:c2:55:92:3e:b3:
         39:d0:49:8e:22:41:00:f7:7d:a1:1b:46:b9:12:96:63:96:1e:
         b9:18:08:f6:58:e2:e1:d1:0c:62:11:fc:27:8d:54:ae:5b:4f:
         2e:05:20:07:d1:ac:99:f7:fa:4e:1f:53:57:10:dc:d3:77:e1:
         75:4b:9e:6a:7e:0c:83:46:52:59:26:f6:e8:8d:e0:74:73:71:
         fb:61:fe:0d:46:e3:2d:0e:d5:f1:e6:bf:bb:d2:58:9c:10:1c:
         6e:39:da:9c:fb:56:af:23:a4:fe:84:10:a1:2e:d5:5e:43:2b:
         2f:cd:ab:7a:52:09:43:3e:95:a2:3c:c4:f1:ce:a2:ee:7b:a3:
         73:75:d1:c4:7b:ad:6a:9e:f5:7f:0e:71:1e:ce:f7:59:57:95:
         b9:7c:da:83:a0:d0:44:49:65:71:5c:05:dc:68:9f:88:c1:55:
         c4:e8:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:44:59 2026 by rpki-client