Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File:                     6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier:          rjMBAV2CepRSUHdUlJjsAfBWQDiMu1vror5rBmTvtrY=
Subject key identifier:   A6:E5:72:A0:64:BD:0E:CF:9E:F1:97:42:31:01:DC:F9:8A:A2:4B:29
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer:       /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial:       79113155E3B85C07C8CF13B4208DF8AD50FEF575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number:          0273
Signing time:             Tue 11 Nov 2025 10:35:15 +0000
Manifest this update:     Tue 11 Nov 2025 10:30:13 +0000
Manifest next update:     Wed 12 Nov 2025 14:18:13 +0000
Files and hashes:         1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: hP4UWES/JPnQUabagNiR7yihY/bOqLSPaEyLqvZKNYE=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:11:31:55:e3:b8:5c:07:c8:cf:13:b4:20:8d:f8:ad:50:fe:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
        Validity
            Not Before: Nov 11 10:30:13 2025 GMT
            Not After : Nov 12 14:18:13 2025 GMT
        Subject: CN=A6E572A064BD0ECF9EF197423101DCF98AA24B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:3b:d4:62:4c:bc:e3:3a:33:ea:0f:01:4a:
                    3a:9b:61:2e:40:0b:ee:2d:cc:7a:87:79:91:7d:4e:
                    e4:1b:55:cb:09:c4:20:9e:ec:a5:5e:78:c7:c3:c3:
                    62:2d:81:f2:f7:6e:89:30:ea:1e:0d:a9:ab:f4:17:
                    7b:13:49:9b:1d:62:81:0e:c9:99:63:7f:06:bc:84:
                    52:98:1c:21:8c:9c:cb:9f:41:ad:84:78:02:d8:5a:
                    ca:1b:a7:ef:cd:c1:28:2b:1c:f1:03:76:d4:25:b3:
                    f4:45:27:34:27:41:eb:18:75:68:7b:c9:c5:b7:d6:
                    e4:e9:4d:c9:ca:29:32:9d:c6:7e:f5:59:b0:c5:7f:
                    51:c1:19:5f:8c:65:11:13:41:f6:77:a1:5c:b6:71:
                    58:6c:6f:15:44:7a:7c:e7:b2:f2:db:ed:59:cb:fe:
                    da:58:2d:1f:97:28:15:a0:e1:b9:03:d2:5e:df:29:
                    af:d9:4b:ea:bb:f6:d5:59:69:c3:0a:cb:94:d1:44:
                    57:27:40:79:02:b2:21:2f:54:d2:a2:2e:05:fb:cc:
                    5a:3c:af:d7:b2:37:dd:31:31:4e:ad:f6:f2:6a:34:
                    e1:5c:ef:45:c7:9c:38:a8:3e:ec:ca:ef:f6:f0:34:
                    fd:44:e9:eb:35:18:c8:a6:64:78:cf:46:9c:66:78:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E5:72:A0:64:BD:0E:CF:9E:F1:97:42:31:01:DC:F9:8A:A2:4B:29
            X509v3 Authority Key Identifier:
                keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:bb:c1:c5:2e:82:8f:40:b0:69:53:f9:d1:7e:32:72:73:
         bf:66:cf:4f:bc:b1:68:19:25:26:a2:c5:3e:94:b7:41:35:0a:
         d0:53:82:25:13:87:52:b8:16:b7:74:57:6e:37:fe:c3:1d:73:
         18:e9:17:cd:3a:77:a2:29:d6:4b:2e:7c:4c:87:bd:0e:6f:d6:
         0e:5d:0d:9f:ac:5a:ec:3b:eb:0f:d3:cd:25:e5:76:05:08:9d:
         6d:95:11:c7:2f:ec:de:70:ce:3e:bf:d6:6f:3f:95:50:c5:27:
         c3:7f:18:a4:b6:e0:56:ac:96:14:17:68:25:f6:4d:4a:f7:04:
         22:b1:64:a5:8e:3e:e3:f1:63:63:f6:96:30:14:a1:a0:7c:3c:
         44:1a:ea:71:89:bb:45:e6:02:0d:01:4f:12:a0:70:16:48:6f:
         44:c1:c1:b3:7f:9f:33:ef:b0:e5:bf:2b:d4:64:2f:1a:85:3d:
         4c:6f:45:84:e8:50:1d:14:98:8d:7f:4c:35:e8:5e:ce:a6:42:
         e5:b4:9f:82:2f:de:ec:66:d5:4b:4b:9c:71:13:2b:a2:dc:9a:
         e1:29:54:28:5f:05:38:c8:a2:c7:54:ed:0f:37:e7:da:ec:d6:
         bd:81:cc:55:1e:b0:f4:94:16:b3:c7:e9:4b:f8:43:d2:fa:c5:
         08:3c:4c:20
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeRExVeO4XAfIzxO0II34rVD+9XUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmRkMDIzZmIzZjk0YzhjMmZhMjNjYWI4MDE5NDY2ZmEx
YTdmNTEwOTAeFw0yNTExMTExMDMwMTNaFw0yNTExMTIxNDE4MTNaMDMxMTAvBgNV
BAMTKEE2RTU3MkEwNjRCRDBFQ0Y5RUYxOTc0MjMxMDFEQ0Y5OEFBMjRCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvTvUYky84zoz6g8BSjqbYS5A
C+4tzHqHeZF9TuQbVcsJxCCe7KVeeMfDw2ItgfL3bokw6h4Nqav0F3sTSZsdYoEO
yZljfwa8hFKYHCGMnMufQa2EeALYWsobp+/NwSgrHPEDdtQls/RFJzQnQesYdWh7
ycW31uTpTcnKKTKdxn71WbDFf1HBGV+MZRETQfZ3oVy2cVhsbxVEenznsvLb7VnL
/tpYLR+XKBWg4bkD0l7fKa/ZS+q79tVZacMKy5TRRFcnQHkCsiEvVNKiLgX7zFo8
r9eyN90xMU6t9vJqNOFc70XHnDioPuzK7/bwNP1E6es1GMimZHjPRpxmeBZdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpuVyoGS9Ds+e8ZdCMQHc+YqiSykwHwYDVR0j
BBgwFoAUbdAj+z+UyML6I8q4AZRm+hp/UQkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzVkOGY1N2NiODNhMTQ0ZWRhYzRiNTViMWE4OGIzNGQ2LzEv
NkREMDIzRkIzRjk0QzhDMkZBMjNDQUI4MDE5NDY2RkExQTdGNTEwOS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2JkQWotei1VeU1MNkk4cTRBWlJtLWhwX1VRay5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81ZDhmNTdjYjgzYTE0NGVk
YWM0YjU1YjFhODhiMzRkNi8xLzZERDAyM0ZCM0Y5NEM4QzJGQTIzQ0FCODAxOTQ2
NkZBMUE3RjUxMDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9LbvBxS6Cj0CwaVP50X4ycnO/Zs9PvLFo
GSUmosU+lLdBNQrQU4IlE4dSuBa3dFduN/7DHXMY6RfNOneiKdZLLnxMh70Ob9YO
XQ2frFrsO+sP080l5XYFCJ1tlRHHL+zecM4+v9ZvP5VQxSfDfxiktuBWrJYUF2gl
9k1K9wQisWSljj7j8WNj9pYwFKGgfDxEGupxibtF5gINAU8SoHAWSG9EwcGzf58z
77DlvyvUZC8ahT1Mb0WE6FAdFJiNf0w16F7OpkLltJ+CL97sZtVLS5xxEyui3Jrh
KVQoXwU4yKLHVO0PN+fa7Na9gcxVHrD0lBazx+lL+EPS+sUIPEwg
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:37 2025 by rpki-client