Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          9bURcsIqxLAlpPPv+tafP8fde6ZqkvYVK/ol+Bdeohk=
Subject key identifier:   53:88:9D:6E:7F:9A:70:22:C9:39:4E:61:D5:72:0C:67:54:2C:95:4D
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       0751F01637793D387DA38F700FE917130B737D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          0272
Signing time:             Tue 11 Nov 2025 04:46:19 +0000
Manifest this update:     Tue 11 Nov 2025 04:41:17 +0000
Manifest next update:     Wed 12 Nov 2025 06:58:17 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: +5tbxliYVlAWB/0QRt4aQz8wEeWr8e3ZcD1A/H835rw=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:51:f0:16:37:79:3d:38:7d:a3:8f:70:0f:e9:17:13:0b:73:7d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: Nov 11 04:41:17 2025 GMT
            Not After : Nov 12 06:58:17 2025 GMT
        Subject: CN=53889D6E7F9A7022C9394E61D5720C67542C954D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:70:e7:27:68:ca:84:86:70:5d:cb:27:74:
                    ec:d9:21:19:2d:89:48:84:aa:a8:c1:6c:51:56:29:
                    2a:b6:f5:ab:02:74:3a:cb:ca:be:e9:7e:32:8a:09:
                    f6:5f:00:65:ae:e5:e6:2e:70:9a:e3:df:10:f6:83:
                    9f:98:b5:4a:2d:b9:bd:f4:69:ab:ae:01:6c:45:f1:
                    9c:c5:d5:79:0c:59:87:80:12:65:0a:36:9b:08:c6:
                    39:09:13:16:20:7c:99:95:23:ae:45:a7:54:ec:18:
                    3c:30:97:ad:e4:21:c4:0d:75:dc:3d:80:2b:f5:ae:
                    55:35:05:7a:34:d3:4b:5f:bc:dc:3a:a8:5c:00:4c:
                    03:85:f6:0e:e8:52:45:e4:20:5f:d6:f5:a9:22:2d:
                    53:2c:d0:db:ce:3d:9c:30:f3:99:5a:f2:c4:62:9f:
                    a5:10:44:97:6e:21:4e:c1:de:fb:1c:57:d0:94:90:
                    12:c9:5a:e8:80:8f:09:fc:11:03:62:4d:f5:b5:40:
                    93:ba:98:48:87:76:09:6e:18:bf:85:02:94:23:47:
                    b8:65:62:44:fb:11:b4:ce:9a:8a:c9:be:2e:7b:cc:
                    8f:a9:92:d8:44:a4:59:d1:bb:8d:1b:03:cc:52:ca:
                    b8:33:d5:9b:4c:be:88:19:d4:12:09:88:c1:97:ed:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:9D:6E:7F:9A:70:22:C9:39:4E:61:D5:72:0C:67:54:2C:95:4D
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:d5:74:d0:92:1f:ca:d0:04:1b:4c:cf:a3:7a:c4:ce:00:
         db:6f:76:3d:1f:6e:43:d8:91:33:a6:cf:2a:82:38:9b:e2:67:
         01:9d:7e:83:55:49:18:99:d5:33:6d:b7:fd:f3:4e:80:c0:ef:
         8f:d8:67:59:29:cb:9a:66:a7:50:5c:c9:61:8a:5b:87:38:ae:
         cb:82:f6:a8:11:92:25:e9:32:3d:31:e4:a1:c2:fe:b4:2b:38:
         de:e4:e1:02:17:9e:67:76:9f:0f:c9:3b:40:1f:1d:02:15:be:
         11:40:6c:cf:a6:62:fe:10:c8:4c:41:21:d7:70:2d:3b:22:81:
         83:45:0f:58:35:f5:3b:0a:fd:23:9b:1a:76:e6:3b:8a:3a:4c:
         80:9f:04:3d:af:6e:38:9a:bc:ca:5d:39:62:68:21:18:44:40:
         59:01:cd:41:8f:be:77:52:d7:08:a0:8a:5b:9a:64:ad:88:01:
         4c:1d:4c:6a:48:15:bc:e6:dd:6f:5e:ce:99:55:f0:cb:2e:f9:
         9c:d1:7d:85:98:e2:98:19:6e:41:4f:df:68:d7:fe:86:c3:a8:
         e9:32:c8:49:34:59:b0:63:ea:85:df:15:c3:90:9e:80:28:5f:
         f3:b2:a9:1c:18:3d:3b:04:09:ca:3d:7f:8e:52:97:1f:76:b4:
         79:57:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:16 2025 by rpki-client