Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
File:                     B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json)
Hash identifier:          2oanTtwXHO+xdDcwDi5riv2srygCk5w4f4dr/eBcRn4=
Subject key identifier:   59:B8:18:27:47:10:BD:A9:A4:85:E7:A2:59:D2:CE:41:E3:FB:F8:1B
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       3DB1E53489255DF851A63B81A10CC53C679EB820
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
Manifest number:          02F8
Signing time:             Sat 14 Mar 2026 01:40:03 +0000
Manifest this update:     Sat 14 Mar 2026 01:35:01 +0000
Manifest next update:     Sun 15 Mar 2026 04:44:01 +0000
Files and hashes:         1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: YfffAmV9h5gYYpppLGS6o1s0z3b9ULWMoW1zj7UQaRw=)
                          2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=)
                          3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 12:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b1:e5:34:89:25:5d:f8:51:a6:3b:81:a1:0c:c5:3c:67:9e:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Mar 14 01:35:01 2026 GMT
            Not After : Mar 15 04:44:01 2026 GMT
        Subject: CN=59B818274710BDA9A485E7A259D2CE41E3FBF81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:f6:5f:c7:a6:61:6d:d7:93:88:57:2c:b0:
                    15:41:a5:a0:1a:4f:e1:0a:29:57:92:dc:5c:5f:57:
                    4c:18:7d:cb:ad:64:75:32:7b:5f:7e:d6:08:67:22:
                    82:b0:8e:43:a9:59:e7:2f:4e:d6:82:6a:f2:58:31:
                    d3:01:3f:80:5f:ba:49:95:15:0a:04:3f:31:38:67:
                    e8:54:62:66:9a:a2:be:da:cc:e9:3e:8b:a8:0f:b3:
                    7c:0e:45:e7:97:d3:80:b4:e8:8e:4a:a3:48:7a:d8:
                    88:bc:79:aa:d4:1e:f9:ea:84:a4:bc:47:dd:56:99:
                    6d:3c:94:83:be:82:4f:90:72:7a:7a:20:05:ed:c3:
                    71:b5:94:2a:4f:26:3d:fa:ba:e1:4c:81:53:3c:54:
                    a9:e0:80:82:47:c7:a0:68:b2:47:f7:d5:a4:08:32:
                    2c:c0:4e:79:93:75:76:d9:7a:47:eb:08:e5:60:f8:
                    bc:62:1e:07:f1:81:38:f4:6d:ff:5c:10:c1:3e:82:
                    04:bf:09:6c:c0:da:b7:64:a2:6a:1b:b6:0e:22:99:
                    25:19:c0:ad:6c:2c:84:5f:20:50:d3:2d:d8:5a:8e:
                    8f:56:a4:0f:bc:f4:46:a1:6a:63:7f:b1:f3:66:63:
                    f9:3b:c8:da:64:39:2d:9c:3f:f7:35:ca:0d:7d:bb:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:18:27:47:10:BD:A9:A4:85:E7:A2:59:D2:CE:41:E3:FB:F8:1B
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:89:1b:2e:c1:f7:c7:02:3e:ea:4e:67:a0:e7:fa:09:ff:41:
         93:fc:04:bc:51:d8:11:1e:3e:b2:3a:e6:19:e0:6e:5f:e3:ba:
         c9:69:b8:9c:fb:49:5d:73:56:fe:33:d1:52:01:77:54:c5:5f:
         13:95:bb:71:b6:12:3b:af:98:30:11:98:8f:76:7e:f1:1c:15:
         bc:b3:c0:0f:6c:38:0b:8a:32:fa:04:1d:7c:62:00:a4:49:be:
         78:3e:f5:9b:83:6b:de:6b:94:ce:4e:d7:40:eb:52:bc:03:95:
         6d:ea:23:a0:af:7d:5c:ad:59:36:05:23:56:80:46:d2:d7:6d:
         ca:c1:4a:06:b1:62:3d:f2:d8:aa:e5:da:8b:98:53:89:09:06:
         c8:23:4a:80:a4:ca:77:2c:9b:4a:52:0c:c9:8c:c8:5c:5a:a1:
         fc:6f:97:2d:cd:04:ff:6f:e2:d2:e2:ee:4a:3c:3c:20:03:23:
         2e:0c:8a:e6:67:2c:27:f9:4b:48:bc:6b:82:48:63:52:c9:34:
         ea:e3:cf:e5:fe:09:4e:a1:c5:e4:39:83:59:f0:57:89:7f:b6:
         e7:da:bc:dd:e2:0c:a3:f2:84:7b:94:86:32:43:14:0f:9e:f2:
         b0:9a:95:01:a0:67:c3:01:28:de:9b:c4:a6:eb:2a:5a:0f:ec:
         bf:f2:c0:3c
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUPbHlNIklXfhRpjuBoQzFPGeeuCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG
MjFFMDUxODAeFw0yNjAzMTQwMTM1MDFaFw0yNjAzMTUwNDQ0MDFaMDMxMTAvBgNV
BAMTKDU5QjgxODI3NDcxMEJEQTlBNDg1RTdBMjU5RDJDRTQxRTNGQkY4MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn3vZfx6ZhbdeTiFcssBVBpaAa
T+EKKVeS3FxfV0wYfcutZHUye19+1ghnIoKwjkOpWecvTtaCavJYMdMBP4BfukmV
FQoEPzE4Z+hUYmaaor7azOk+i6gPs3wOReeX04C06I5Ko0h62Ii8earUHvnqhKS8
R91WmW08lIO+gk+Qcnp6IAXtw3G1lCpPJj36uuFMgVM8VKnggIJHx6Boskf31aQI
MizATnmTdXbZekfrCOVg+LxiHgfxgTj0bf9cEME+ggS/CWzA2rdkomobtg4imSUZ
wK1sLIRfIFDTLdhajo9WpA+89EahamN/sfNmY/k7yNpkOS2cP/c1yg19uwPtAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUWbgYJ0cQvamkheeiWdLOQeP7+BswHwYDVR0j
BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv
Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD
OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz
N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND
MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAGJGy7B98cCPupOZ6Dn
+gn/QZP8BLxR2BEePrI65hngbl/juslpuJz7SV1zVv4z0VIBd1TFXxOVu3G2Ejuv
mDARmI92fvEcFbyzwA9sOAuKMvoEHXxiAKRJvng+9ZuDa95rlM5O10DrUrwDlW3q
I6CvfVytWTYFI1aARtLXbcrBSgaxYj3y2Krl2ouYU4kJBsgjSoCkyncsm0pSDMmM
yFxaofxvly3NBP9v4tLi7ko8PCADIy4MiuZnLCf5S0i8a4JIY1LJNOrjz+X+CU6h
xeQ5g1nwV4l/tufavN3iDKPyhHuUhjJDFA+e8rCalQGgZ8MBKN6bxKbrKloP7L/y
wDw=
-----END CERTIFICATE-----
Generated at Sat Mar 14 05:41:20 2026 by rpki-client