Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File:                     B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier:          4EJ3NEAhENE/YwkZ17uUYW5AzPgID3Y5l4svMB2V0KU=
Subject key identifier:   89:FE:4D:FD:6A:C2:E5:AE:CA:B5:BA:3C:66:65:C5:E2:9D:48:00:EF
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer:       /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial:       15D00B6E504076CB98312F02C38D99E5E03C9788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number:          0275
Signing time:             Mon 10 Nov 2025 19:34:56 +0000
Manifest this update:     Mon 10 Nov 2025 19:29:54 +0000
Manifest next update:     Tue 11 Nov 2025 22:07:54 +0000
Files and hashes:         1: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: kf+8eXrnVWN++wXfadhshIpeG5eQ5rMp8agwn1Q9iog=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Nov 2025 22:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:0b:6e:50:40:76:cb:98:31:2f:02:c3:8d:99:e5:e0:3c:97:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
        Validity
            Not Before: Nov 10 19:29:54 2025 GMT
            Not After : Nov 11 22:07:54 2025 GMT
        Subject: CN=89FE4DFD6AC2E5AECAB5BA3C6665C5E29D4800EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:26:b6:2f:38:97:64:90:8b:56:ae:29:98:
                    8f:dc:7a:6c:0b:79:e4:ad:5b:a2:aa:8b:19:e7:ab:
                    69:80:d7:f3:e3:62:1c:d3:97:13:b4:a1:1c:83:1b:
                    36:0b:55:72:f5:7e:6f:22:9e:2e:de:0a:84:07:00:
                    38:3e:1f:cf:d2:98:f3:53:07:ab:46:dc:df:8f:cd:
                    e7:ca:a9:a4:4c:2c:7e:0b:43:ef:a2:e2:b8:13:d5:
                    6b:3d:e4:a0:95:05:f4:72:a3:b2:3d:0f:60:cc:08:
                    a5:61:f1:e5:a6:b9:d2:e9:0e:af:bb:f9:33:7d:90:
                    87:11:12:87:61:21:aa:b1:eb:5c:e0:3d:ef:c7:ee:
                    8a:f9:02:0e:d5:b8:5e:20:ae:73:a3:bc:69:79:c0:
                    95:02:9a:90:e0:29:d6:c4:2d:26:ed:85:4b:84:02:
                    48:e5:06:5e:96:76:55:ca:3a:4c:2f:80:76:54:d9:
                    52:c9:8e:f3:d1:e8:5e:fc:75:7b:af:4b:4f:c7:7d:
                    c1:c8:46:31:55:09:c5:62:ab:b9:c6:91:1f:1e:35:
                    32:d0:97:af:8a:d0:da:4f:92:7c:68:5a:6a:4e:52:
                    36:84:79:25:f7:30:64:65:0e:9d:3f:54:4e:0f:b6:
                    a0:0e:8b:bb:b9:e5:10:69:3f:89:14:8b:84:00:74:
                    fa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:4D:FD:6A:C2:E5:AE:CA:B5:BA:3C:66:65:C5:E2:9D:48:00:EF
            X509v3 Authority Key Identifier:
                keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:19:b8:61:70:c0:1a:05:89:0e:04:b9:72:19:39:76:2e:
         d6:50:b2:d3:ec:4c:85:3a:0a:85:11:55:c6:d9:b2:ef:98:c7:
         a5:37:68:6c:ba:e6:96:c9:8f:ef:3d:c7:ce:4e:0b:47:f6:d0:
         55:81:49:aa:68:ff:12:f2:3e:ec:d1:d5:40:91:6b:26:9a:63:
         a7:00:a9:14:d3:d3:3f:74:58:74:df:8f:e2:39:60:47:a0:2b:
         e4:b5:61:a3:7b:f7:a5:19:6e:b1:7b:91:30:17:0a:7d:3b:8d:
         c8:4a:23:fa:1b:18:b4:0f:60:66:d3:ac:58:31:3e:d8:30:88:
         72:39:31:f4:bc:fc:82:72:4f:e5:d3:24:48:18:49:e0:6e:68:
         48:1f:95:44:27:29:ff:01:93:fd:c6:24:3b:8b:51:e9:d4:ec:
         23:b5:a5:6a:6e:3b:d1:06:f3:63:55:f3:56:0d:71:a5:4f:63:
         ca:e5:8f:c1:7a:8b:8f:2c:f4:a7:93:03:1d:44:b0:b9:40:48:
         2b:70:a5:fd:78:67:84:78:70:7d:7f:20:48:fc:92:71:28:15:
         34:47:a8:d3:50:58:87:74:d2:32:d3:f4:07:ca:42:29:ea:1d:
         3a:db:00:35:65:b9:50:94:5f:c1:3e:0d:4a:95:73:c9:8a:b6:
         0d:34:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:16 2025 by rpki-client