Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File:                     16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier:          6E99z1e4vH3PGcH9vHbGjeDZFjYfn0G6wunsiZbBuIM=
Subject key identifier:   69:EF:3D:B5:29:A2:13:D0:0A:97:D2:1B:EB:BB:71:0F:39:4D:A2:AA
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer:       /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial:       7E8D51B5609660ABEEFFD7B277DC9B0AA44B90B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number:          0372
Signing time:             Sun 14 Jun 2026 23:42:55 +0000
Manifest this update:     Sun 14 Jun 2026 23:37:55 +0000
Manifest next update:     Tue 16 Jun 2026 00:45:55 +0000
Files and hashes:         1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: c6cC288Nt+6ZLopbJZfrPCqS0RtJOJx9nVbb4es7uak=)
                          2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 6pcoVdzXc47wWwCa3VZ24K+ZglccpB4Xc2tGb70NHYs=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8d:51:b5:60:96:60:ab:ee:ff:d7:b2:77:dc:9b:0a:a4:4b:90:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
        Validity
            Not Before: Jun 14 23:37:55 2026 GMT
            Not After : Jun 16 00:45:55 2026 GMT
        Subject: CN=69EF3DB529A213D00A97D21BEBBB710F394DA2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:c2:b2:1e:b8:ad:a0:ac:50:b2:e9:42:eb:
                    c0:6d:fc:8f:63:55:fe:be:99:29:19:cb:03:c7:7e:
                    44:66:ef:e5:40:b6:c1:8a:7e:30:0c:33:b4:37:6e:
                    fc:95:2c:a9:5c:eb:34:c6:60:69:61:40:d5:4b:af:
                    96:44:c3:35:84:13:96:0c:13:37:5c:01:9d:32:c0:
                    06:bc:a6:06:7c:9d:04:bb:fe:b6:0f:66:af:c3:81:
                    9d:0e:8d:1e:0a:a0:0e:a1:eb:a9:d1:84:aa:02:96:
                    21:ca:2a:ec:70:a0:df:3d:9f:44:f7:7b:df:aa:7a:
                    e1:67:7d:ee:b0:69:0e:9b:1e:fd:a4:44:e8:be:12:
                    4f:fa:d9:25:10:19:af:27:3b:41:c5:70:1c:ed:cf:
                    d6:7d:3f:b4:3e:85:cc:b6:a9:b6:d2:d4:45:fe:4d:
                    94:b4:55:18:aa:78:fe:68:57:98:8c:de:8a:aa:36:
                    a6:4f:56:e7:7b:4e:91:f4:54:67:d8:11:8c:c5:d7:
                    2e:6f:f4:cd:fa:f7:09:37:af:d2:6e:0c:67:6b:ed:
                    63:c7:58:c8:c6:79:73:1a:9a:d7:69:bf:67:cf:f9:
                    86:64:63:17:9e:5c:b3:52:ea:d2:d2:af:14:52:72:
                    4b:2e:39:43:ac:d5:f6:a3:64:5d:62:9c:09:85:da:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EF:3D:B5:29:A2:13:D0:0A:97:D2:1B:EB:BB:71:0F:39:4D:A2:AA
            X509v3 Authority Key Identifier:
                keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:56:7e:7f:07:7f:ba:30:de:1d:14:4c:64:58:72:92:78:
         ca:21:b8:6e:26:90:04:f8:39:2b:d1:4d:73:b4:08:89:dc:e3:
         01:ba:f4:e5:1c:15:20:7c:ab:b9:ee:c4:e7:f8:b1:c2:0b:36:
         8a:28:e6:03:01:dd:65:b0:47:99:87:6c:da:be:d9:d8:84:2f:
         ca:a0:7e:6e:f5:43:ac:39:d9:4a:73:de:9a:26:73:cd:7f:ee:
         16:91:68:76:ed:ae:15:e8:ae:6c:60:3a:8d:66:37:54:5f:d7:
         9a:45:39:ed:0d:2d:5c:85:ac:ec:52:c9:cd:5c:bf:a3:3d:62:
         d9:80:d3:50:72:a2:9c:9b:2e:67:2a:5e:22:fb:52:dc:a9:14:
         d9:3f:ff:bc:7d:b7:9f:06:9d:ea:23:13:26:a8:82:6f:7d:28:
         c4:41:e5:32:89:f5:44:3e:68:0b:78:2a:24:75:48:f6:eb:51:
         60:91:6f:38:23:b9:30:63:51:af:63:22:c8:d0:c7:d6:42:73:
         54:67:27:c0:14:b9:91:ea:6d:2d:45:08:88:cf:e4:da:55:9d:
         ca:ef:69:18:5e:80:f5:9c:19:19:ce:d6:1e:3f:cb:ab:67:d7:
         bb:e4:78:94:70:04:fa:a7:e8:77:bc:ac:0f:d6:0a:0b:87:18:
         b6:de:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 06:28:14 2026 by rpki-client