Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          X3AM4K/4iXRTLg/taKYy3EWnekCJVJum9o1919njj9k=
Subject key identifier:   06:92:3B:BB:2E:5F:A7:08:96:46:95:D4:24:9E:EE:9C:DF:AD:CC:77
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       04B84B6A96609788C2590F523F56714A14DD3576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0276
Signing time:             Tue 11 Nov 2025 04:12:21 +0000
Manifest this update:     Tue 11 Nov 2025 04:07:19 +0000
Manifest next update:     Wed 12 Nov 2025 04:58:19 +0000
Files and hashes:         1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: OCeYt/5dpOy6ZMh+9F6aKAMJODfcSGJxbKZgpSB7jS4=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b8:4b:6a:96:60:97:88:c2:59:0f:52:3f:56:71:4a:14:dd:35:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Nov 11 04:07:19 2025 GMT
            Not After : Nov 12 04:58:19 2025 GMT
        Subject: CN=06923BBB2E5FA708964695D4249EEE9CDFADCC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:08:07:4b:96:fa:52:2b:42:c3:35:df:10:
                    82:dd:36:5b:47:b8:cc:9e:13:af:bc:0f:ed:7b:99:
                    2c:b1:9e:4b:d4:ec:2a:f3:f6:3e:58:ff:f0:58:4a:
                    02:19:d9:a2:e8:54:e1:e3:ef:75:13:c4:5e:3f:42:
                    a2:b1:72:1f:71:eb:40:5d:4c:ed:7e:fc:af:d2:02:
                    36:80:29:2d:4f:8b:a9:68:eb:6b:35:e0:90:a6:d5:
                    d9:1c:b9:b1:a7:0b:09:fe:98:7d:48:88:02:0b:e9:
                    ed:85:72:73:c1:ad:c7:51:c1:17:63:e1:e2:08:14:
                    19:9f:2f:9d:31:5a:54:9d:d9:4f:80:9c:25:c1:97:
                    a0:3b:9d:d4:43:1c:c5:3d:49:d4:7a:6a:59:70:2c:
                    de:00:0c:98:1a:9d:40:6d:80:5c:08:f4:25:1f:bb:
                    e7:c2:55:5e:51:7b:4d:9f:fd:79:2a:29:be:b2:58:
                    94:cc:2a:96:31:90:bc:c8:83:ef:a0:0d:bd:94:f3:
                    b6:80:d5:a2:80:14:77:d1:d0:7c:57:b3:2d:e8:a5:
                    ac:29:d7:95:7f:a1:b5:ca:f5:67:07:f0:f3:bb:50:
                    76:4a:a2:b2:fb:55:84:48:6f:f7:04:f6:a8:eb:19:
                    45:42:97:0b:c2:a9:a3:e7:e0:fc:80:38:ef:98:03:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:92:3B:BB:2E:5F:A7:08:96:46:95:D4:24:9E:EE:9C:DF:AD:CC:77
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:f1:a1:66:39:0e:ac:bd:b9:85:d8:6c:0a:87:0e:d3:e8:
         46:4c:41:f0:47:4d:ed:6b:1e:ac:32:bb:a8:b4:e2:e5:32:01:
         bd:2a:2d:8a:ca:6c:93:be:18:e8:62:e2:48:29:94:f7:29:f5:
         7c:8e:34:a6:d8:42:5c:18:10:66:af:ad:b4:42:27:24:71:59:
         d1:8f:64:a7:0e:77:32:4a:5a:4d:2c:79:3f:af:8f:89:34:34:
         9b:c9:f9:c1:26:ef:f7:aa:91:ff:57:2b:0e:2a:0b:6b:3d:1a:
         33:e9:3d:a0:42:09:36:83:45:e1:49:e9:0f:d4:68:c8:ed:5b:
         ac:b4:3d:a4:66:58:84:fd:63:07:df:0e:c3:15:14:42:d9:5d:
         3e:92:bd:f4:67:38:c8:64:c7:79:b9:4f:9e:67:48:3b:19:ca:
         0b:f2:a1:04:f8:f4:c2:98:69:57:69:11:14:1c:07:d3:ab:61:
         0b:2a:88:b1:d4:8a:ff:56:0a:ed:a9:f7:68:18:81:17:0a:b0:
         2f:6c:86:bd:d0:fc:20:1f:0b:47:0b:25:2a:db:eb:6e:07:10:
         4c:25:ca:48:98:1b:c9:37:0a:0b:4a:95:0a:b3:9e:01:92:45:
         e3:8f:ae:62:26:59:51:5b:63:43:21:90:bc:d4:20:e0:1b:6c:
         71:ee:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:56 2025 by rpki-client