Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
File:                     BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json)
Hash identifier:          BB2v4L809LobXO/XYkcfuk+1ahh1jFJyDlsUmhDWU6Y=
Subject key identifier:   53:77:89:A1:5F:69:D5:44:1F:D3:3B:7B:94:5A:0D:DD:28:69:42:0E
Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Certificate issuer:       /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Certificate serial:       49060C06A2FC378AF078DE1E7E5213FA5906DF8F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
Manifest number:          02ED
Signing time:             Fri 13 Mar 2026 10:14:42 +0000
Manifest this update:     Fri 13 Mar 2026 10:09:40 +0000
Manifest next update:     Sat 14 Mar 2026 13:28:40 +0000
Files and hashes:         1: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=)
                          2: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: nc7/SvMYvogEVHjCT1CVpljaZnDHninwjyui/PTvtco=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 12:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:06:0c:06:a2:fc:37:8a:f0:78:de:1e:7e:52:13:fa:59:06:df:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
        Validity
            Not Before: Mar 13 10:09:40 2026 GMT
            Not After : Mar 14 13:28:40 2026 GMT
        Subject: CN=537789A15F69D5441FD33B7B945A0DDD2869420E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:a5:ad:ba:1b:d1:dd:a0:38:bb:7d:f4:d0:
                    29:a1:5b:58:bc:b4:ae:f7:17:06:b4:d3:35:6d:5e:
                    fd:d4:22:10:17:98:c5:f8:7a:8d:0a:2d:ea:b9:60:
                    1f:4c:1b:4a:40:29:17:85:3f:c0:ac:20:19:42:1b:
                    8b:c4:10:2a:89:98:ce:65:b1:9d:51:65:74:0a:e0:
                    ad:a1:f5:b6:fc:91:9b:6d:6c:fc:fd:2e:b1:24:0c:
                    0e:ff:af:b9:f9:5d:89:58:84:b8:c1:d8:ee:8e:1f:
                    0b:ed:e5:b0:88:3d:0e:9f:14:d5:7f:5b:cd:a0:23:
                    24:44:8a:26:c3:0a:2d:b3:54:8d:3e:3b:4b:55:c6:
                    46:7d:c3:e8:04:b9:47:7c:7e:65:a2:0f:f1:07:57:
                    0d:b4:22:f5:cd:50:3e:fd:0b:26:9e:a0:06:d1:cf:
                    3d:ef:6d:f7:d6:c2:34:a8:ff:40:d8:be:75:6f:6d:
                    ad:ff:12:85:e3:a0:f8:de:f7:d7:4a:a3:86:be:bc:
                    9e:82:69:19:92:72:08:8b:df:4c:85:c4:00:1c:05:
                    01:57:4c:df:8b:53:23:23:7e:aa:35:1d:22:a8:fa:
                    6e:7f:ef:7d:cc:bf:01:01:01:cd:42:15:69:2f:0d:
                    88:8f:75:a1:96:94:38:89:53:6d:63:5c:b4:c1:cf:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:89:A1:5F:69:D5:44:1F:D3:3B:7B:94:5A:0D:DD:28:69:42:0E
            X509v3 Authority Key Identifier:
                keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:9d:b3:39:9e:fb:95:a7:7b:de:fa:8b:ef:22:d8:cd:3b:
         26:23:17:dc:97:d0:ab:50:06:48:f2:17:46:58:6a:f5:78:36:
         9f:42:cc:6b:d2:fb:4a:2c:a1:53:cb:59:81:46:b5:2b:5c:b5:
         54:41:db:9c:7e:be:fa:c8:a8:67:7c:a0:38:6b:70:57:81:33:
         dc:64:04:e6:e8:fa:70:9e:3b:c3:0b:af:b7:23:bc:fc:be:c0:
         41:8e:2a:d2:a3:2d:18:d6:ea:04:f7:dd:b2:74:44:f2:1d:4a:
         56:53:1e:07:7a:9e:bc:8e:76:95:fb:da:86:dd:e9:ac:0e:7d:
         88:40:cf:db:10:44:e4:b3:9d:2d:c5:6b:cc:45:2c:92:50:67:
         14:b4:01:a5:8d:1f:0e:39:79:55:7d:43:f7:fa:6e:cc:4b:9c:
         66:c8:0f:af:28:9b:d1:3c:41:c4:ce:e3:72:a5:39:b4:cd:b5:
         8b:8d:0e:94:b5:2b:47:3f:42:42:0a:37:78:53:60:91:f6:cb:
         28:3e:90:79:b9:1d:03:b7:3f:8a:38:90:c1:f0:d4:3b:61:58:
         44:39:3a:b0:cd:44:1b:26:24:06:f7:1d:95:73:5d:e7:f6:e1:
         b8:9e:ee:da:98:40:e2:1a:49:a6:ed:8c:43:23:ef:dd:23:a5:
         f0:b9:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:41:19 2026 by rpki-client