Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          pgDymnaJwsJhAdwhH+MciJ6JaY3yw2XOGk2k8KzJG/Y=
Subject key identifier:   EF:66:D0:C0:6C:21:3E:55:2B:35:97:4D:94:A0:A6:D4:31:68:78:81
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       209F462E3EB52291AFD22B6A795C02C03DFD4072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0300
Signing time:             Fri 20 Mar 2026 02:20:51 +0000
Manifest this update:     Fri 20 Mar 2026 02:15:48 +0000
Manifest next update:     Sat 21 Mar 2026 06:13:48 +0000
Files and hashes:         1: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: GyNtnEI1U410zMn2toVhiW4XPeW2w8iu4PSRmsuutuI=)
                          2: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9f:46:2e:3e:b5:22:91:af:d2:2b:6a:79:5c:02:c0:3d:fd:40:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Mar 20 02:15:48 2026 GMT
            Not After : Mar 21 06:13:48 2026 GMT
        Subject: CN=EF66D0C06C213E552B35974D94A0A6D431687881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:ec:c3:ec:70:82:96:ed:cb:3c:53:1d:21:
                    41:78:df:df:bb:ea:df:02:08:a5:b6:6a:4d:6b:fe:
                    54:7f:73:5f:40:eb:a4:af:d1:d4:b2:4a:03:4e:15:
                    02:e4:f2:09:8b:94:e0:2d:9b:95:ae:43:67:83:33:
                    ed:83:d5:83:97:7c:26:72:15:1f:ff:31:8a:e5:dc:
                    cf:41:95:d1:4b:0b:00:bf:4a:3b:a6:2e:b0:bc:b7:
                    4c:bb:a7:09:a8:61:fa:62:66:ba:14:c8:19:ab:37:
                    30:24:ba:0b:94:5e:9c:dd:4d:c9:b3:b4:2f:dd:f4:
                    18:d0:26:b6:7d:ae:aa:33:05:07:83:b5:5f:8d:32:
                    c7:7c:55:4f:42:ac:42:0f:21:ab:ac:f7:45:5e:61:
                    03:31:0f:b7:fa:44:b4:18:ea:f9:06:5f:e7:2c:56:
                    77:89:9a:24:96:db:19:9a:1f:2b:0d:b9:19:2a:81:
                    58:36:9f:28:22:43:93:06:e6:ee:8f:97:66:16:36:
                    88:42:7e:8e:68:b5:d8:cf:67:43:79:c9:1d:0d:a5:
                    a8:e0:47:ee:ee:b2:64:9e:97:3c:18:09:a9:a0:73:
                    a9:5c:9e:36:b9:9d:88:f1:b3:f4:70:3c:1f:92:8d:
                    c7:ca:fa:ac:eb:c1:94:3b:df:00:bc:d7:1e:fc:ff:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:66:D0:C0:6C:21:3E:55:2B:35:97:4D:94:A0:A6:D4:31:68:78:81
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:c9:12:44:4f:03:d4:fb:e9:7c:a4:f3:54:9a:00:a3:5b:
         5d:5b:40:75:32:13:64:91:d8:dc:9c:a8:7f:7e:1d:55:fc:5b:
         8c:0c:d3:aa:aa:01:2a:6b:9f:12:5e:6f:52:8d:0b:13:6d:b5:
         81:d6:c1:2e:29:55:07:39:f0:ba:5d:92:ea:98:4e:97:1f:0a:
         83:8c:f3:1d:38:2c:37:c1:12:8c:1f:db:fc:73:c0:98:ed:70:
         6d:af:be:c1:b9:e7:7d:73:a3:ff:69:a0:87:60:19:ba:2f:d3:
         a8:b3:7f:29:2e:9b:a4:76:dd:67:b8:fd:9b:5f:44:29:a4:89:
         b4:9c:03:14:fe:82:ed:9d:3a:66:36:3e:5a:2b:0b:7e:07:01:
         21:89:c1:3c:c1:91:b4:b4:f7:89:35:59:92:93:f7:ab:05:db:
         00:21:95:3c:85:b9:a6:68:08:84:0d:fa:2e:40:a0:82:10:cb:
         b2:30:fd:a9:49:ef:66:45:d5:2e:20:7a:75:0f:be:04:62:a6:
         17:46:ed:58:8f:da:04:b1:9c:e2:19:4c:ec:66:b8:e9:2c:2f:
         f6:59:18:0c:b2:6c:b3:b3:cf:cf:12:83:2a:90:3d:5d:24:1e:
         d6:6c:9f:42:f0:0e:69:dc:42:e5:9f:c9:10:c1:b2:4d:3f:28:
         86:a9:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:34:00 2026 by rpki-client