Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          F/depnyOeFQxQfuBJs2Ao0zXbPKKHAm0S4lg3OjWC0I=
Subject key identifier:   BD:FA:EA:74:59:11:F7:0B:15:20:91:59:7D:68:48:C9:A0:0A:4A:CD
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       0180C7080A40107F556C47795CD356BB272D96B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          01C0
Signing time:             Sat 07 Jun 2025 18:22:35 +0000
Manifest this update:     Sat 07 Jun 2025 18:17:32 +0000
Manifest next update:     Sun 08 Jun 2025 20:14:32 +0000
Files and hashes:         1: AS205789.asa (hash: tm9kecBeoxhQi2zzF7b51fHNd4VtuH+GdVkDh3gMetA=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: Br7J/7Vs9SL7hn+Hkn/egpOHW3NgvhcHZiPCAH6v2c8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:80:c7:08:0a:40:10:7f:55:6c:47:79:5c:d3:56:bb:27:2d:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Jun  7 18:17:32 2025 GMT
            Not After : Jun  8 20:14:32 2025 GMT
        Subject: CN=BDFAEA745911F70B152091597D6848C9A00A4ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:f2:e1:8d:b0:db:cd:68:06:7e:a4:36:d3:
                    68:74:f6:8c:bf:63:aa:92:9d:e5:45:c5:cf:e0:ef:
                    ee:8a:cf:da:c6:d2:e0:85:08:af:de:61:96:30:a7:
                    73:c9:bf:50:21:f5:76:9d:de:8f:e9:a0:e3:a7:0b:
                    00:b0:f4:ec:fa:59:5d:81:46:57:58:4f:1a:68:a9:
                    08:96:4d:46:cd:1c:7d:a8:c2:30:ea:88:1f:85:05:
                    21:8b:27:ab:66:87:32:49:a3:0d:35:23:67:50:0f:
                    4e:48:59:05:ae:ce:73:2c:6a:cb:0c:30:54:f3:07:
                    4d:52:6e:63:48:76:f5:3e:03:cb:43:e1:f4:31:e1:
                    9e:c0:6a:5e:86:30:ce:5a:b3:4a:57:b3:39:27:61:
                    78:e0:d2:fd:79:c5:6e:33:b5:26:ff:45:8e:46:ba:
                    8f:24:cf:f3:7b:a4:fc:9b:38:23:aa:cc:8c:2b:0e:
                    d3:02:9d:19:11:98:9a:d2:ad:c5:a8:93:85:f6:1c:
                    81:c3:07:40:d3:9f:65:c0:a1:e0:69:d6:4c:e2:bf:
                    dd:b7:a6:aa:cf:32:3f:e0:41:71:32:64:36:de:bf:
                    80:d4:c4:ad:d1:c3:bb:db:35:d4:b8:d5:87:5f:4f:
                    ff:9c:88:96:18:aa:7d:3f:4f:d8:67:2e:c4:04:c0:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:EA:74:59:11:F7:0B:15:20:91:59:7D:68:48:C9:A0:0A:4A:CD
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:e1:30:54:ec:53:03:ce:b1:42:49:5b:fd:98:7a:96:4e:
         97:4f:42:ee:ae:62:80:85:f8:b5:72:b8:79:63:92:ee:a3:3e:
         fb:22:ac:e1:ae:b1:05:2f:6f:b2:d8:b2:8a:8a:75:31:63:fc:
         60:40:c8:a3:04:1f:ec:0b:48:28:c2:44:2c:ff:12:3d:36:22:
         80:c8:82:18:61:72:c7:85:b6:0d:ac:71:21:db:11:36:13:b7:
         60:94:bd:cb:87:4d:f8:f0:74:93:7a:62:63:d5:f5:5a:48:3d:
         8d:2a:b1:84:e4:56:54:5a:b3:6e:82:ed:ae:d0:e0:dd:be:fc:
         cb:24:38:1f:65:d3:62:92:95:c9:be:b1:51:0d:73:f9:2a:fe:
         df:da:00:15:96:fb:69:84:59:61:29:21:2e:d9:ed:4c:f0:ec:
         27:36:27:a7:f1:9e:dd:9b:97:06:5b:a3:f6:87:6f:f9:b1:0c:
         82:24:bc:b3:99:7a:e7:43:c2:57:65:c4:e2:ab:97:74:20:59:
         2a:4d:47:41:50:5a:24:57:98:bd:09:af:09:b2:7a:49:d7:59:
         e6:60:a0:e0:73:07:31:99:04:59:9b:1b:c9:8f:bb:b3:f8:67:
         9d:6c:ad:0f:e6:30:45:a6:a3:02:22:08:fb:a0:ef:db:1f:1f:
         66:8a:f6:4f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUAYDHCApAEH9VbEd5XNNWuyctlrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNTFkNzc2M2U0ZTZiYzQ0ODg3YTc4NzNjNDQyNTgw
YTk1MjgzMzAeFw0yNTA2MDcxODE3MzJaFw0yNTA2MDgyMDE0MzJaMDMxMTAvBgNV
BAMTKEJERkFFQTc0NTkxMUY3MEIxNTIwOTE1OTdENjg0OEM5QTAwQTRBQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSU/LhjbDbzWgGfqQ202h09oy/
Y6qSneVFxc/g7+6Kz9rG0uCFCK/eYZYwp3PJv1Ah9Xad3o/poOOnCwCw9Oz6WV2B
RldYTxpoqQiWTUbNHH2owjDqiB+FBSGLJ6tmhzJJow01I2dQD05IWQWuznMsassM
MFTzB01SbmNIdvU+A8tD4fQx4Z7Aal6GMM5as0pXszknYXjg0v15xW4ztSb/RY5G
uo8kz/N7pPybOCOqzIwrDtMCnRkRmJrSrcWok4X2HIHDB0DTn2XAoeBp1kziv923
pqrPMj/gQXEyZDbev4DUxK3Rw7vbNdS41YdfT/+ciJYYqn0/T9hnLsQEwPgDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvfrqdFkR9wsVIJFZfWhIyaAKSs0wHwYDVR0j
BBgwFoAUFhUdd2Pk5rxEiHp4c8RCWAqVKDMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzEv
MTYxNTFENzc2M0U0RTZCQzQ0ODg3QTc4NzNDNDQyNTgwQTk1MjgzMy5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ZoVWRkMlBrNXJ4RWlIcDRjOFJDV0FxVktETS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wYTQ2MzdkZjViYTc0M2Zl
YTFiNDgyYmU4MjM1ODE4Zi8xLzE2MTUxRDc3NjNFNEU2QkM0NDg4N0E3ODczQzQ0
MjU4MEE5NTI4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdJuEwVOxTA86xQklb/Zh6lk6XT0LurmKA
hfi1crh5Y5Luoz77IqzhrrEFL2+y2LKKinUxY/xgQMijBB/sC0gowkQs/xI9NiKA
yIIYYXLHhbYNrHEh2xE2E7dglL3Lh0348HSTemJj1fVaSD2NKrGE5FZUWrNugu2u
0ODdvvzLJDgfZdNikpXJvrFRDXP5Kv7f2gAVlvtphFlhKSEu2e1M8OwnNien8Z7d
m5cGW6P2h2/5sQyCJLyzmXrnQ8JXZcTiq5d0IFkqTUdBUFokV5i9Ca8JsnpJ11nm
YKDgcwcxmQRZmxvJj7uz+GedbK0P5jBFpqMCIgj7oO/bHx9mivZP
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:09 2025 by rpki-client