Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
File:                     31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json)
Hash identifier:          4Krg8sNN06bfR3l/I5C+74UP75imYX9GzTMmA6ye1dM=
Subject key identifier:   DF:86:25:F9:5C:76:BB:25:B4:81:EF:FD:3D:B3:66:B7:56:CD:B1:EA
Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Certificate issuer:       /CN=31586760843F668A816117EA02F6F30FE8F9C359
Certificate serial:       5726E83A412D92406E6A8CF850F688EA41EE9B2F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
Manifest number:          0323
Signing time:             Sat 18 Apr 2026 12:27:44 +0000
Manifest this update:     Sat 18 Apr 2026 12:22:41 +0000
Manifest next update:     Sun 19 Apr 2026 13:14:41 +0000
Files and hashes:         1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=)
                          2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: Cy4wZ1ixzj9kesj+7IzBmz4h3qBlX6Ou0B5aU0Q6V4s=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:e8:3a:41:2d:92:40:6e:6a:8c:f8:50:f6:88:ea:41:ee:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359
        Validity
            Not Before: Apr 18 12:22:41 2026 GMT
            Not After : Apr 19 13:14:41 2026 GMT
        Subject: CN=DF8625F95C76BB25B481EFFD3DB366B756CDB1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:ab:17:8c:0b:20:f2:a8:ff:54:94:24:bc:
                    ce:1e:a1:c5:85:98:d2:61:d2:5f:ac:a2:a3:c6:c5:
                    a0:94:d4:d5:0f:a4:3a:48:50:10:ba:74:5f:87:12:
                    9e:42:af:9a:14:d1:9c:66:ce:82:4a:22:9b:7c:39:
                    46:af:fc:bd:39:a6:09:5f:02:70:cc:74:f5:ad:21:
                    60:a3:7d:be:b3:1c:31:6a:b8:e1:d9:13:61:05:6d:
                    4a:27:aa:fe:65:06:c7:0a:c6:0d:b4:38:d9:d0:af:
                    8b:d3:5d:0a:2e:5e:23:08:cc:41:65:a4:b1:40:65:
                    80:40:8f:aa:59:a9:b3:49:48:a8:65:04:fa:ae:a0:
                    fe:10:26:86:d4:6a:f3:28:52:52:bb:91:76:06:7f:
                    27:37:40:e8:3a:8a:ce:bd:8e:59:18:e9:ad:29:8d:
                    51:03:91:bc:8f:bb:8c:54:a0:b2:73:99:86:8d:ef:
                    c0:75:1b:86:7d:db:94:28:2e:41:21:c5:8a:40:45:
                    b2:f0:3a:46:8e:f7:33:eb:e3:4f:cd:fb:98:49:b5:
                    56:59:91:90:59:76:46:6a:8a:fb:b1:43:28:aa:d8:
                    28:0d:f4:8b:2b:cd:1e:b9:ef:18:45:28:e0:9e:e9:
                    c9:1a:42:7d:3a:3e:71:91:17:68:18:1f:24:20:bd:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:25:F9:5C:76:BB:25:B4:81:EF:FD:3D:B3:66:B7:56:CD:B1:EA
            X509v3 Authority Key Identifier:
                keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:e9:e1:fc:48:78:1d:d2:09:74:b5:75:82:a4:8c:2a:af:
         90:39:47:f6:9e:13:ad:e4:78:51:04:64:7a:3f:c8:9f:70:3f:
         f5:75:12:57:29:b1:20:32:9b:8a:01:f9:0f:be:00:11:00:bc:
         fa:8d:c1:26:df:fa:76:23:47:47:13:90:a0:94:2f:e8:e9:2e:
         2c:51:42:09:af:66:2b:93:c2:69:7d:f3:c8:2f:3e:ac:1f:a5:
         35:97:3d:ec:b7:f7:8a:02:dc:c1:41:0f:ac:b4:be:82:39:e6:
         12:56:4e:db:ff:46:63:52:97:c9:ca:e4:70:fc:29:ed:eb:4e:
         a1:94:af:38:14:9c:5d:35:2e:42:6e:e0:20:c0:00:9d:11:21:
         6f:b2:22:c2:10:f1:31:3d:89:f3:5a:03:f3:2a:b6:61:f6:ed:
         b8:44:9e:80:bb:41:0d:9a:29:6d:bf:83:2d:b7:36:f6:11:98:
         e1:9f:fb:5b:f8:95:79:a5:3a:65:23:20:21:39:af:e5:a2:e3:
         2f:f3:a1:fc:dc:35:de:26:e2:0c:48:64:af:f5:13:03:2a:93:
         ec:86:54:a9:67:f9:fe:dc:59:02:c6:5b:7d:4e:88:a0:72:ce:
         b5:18:5d:9a:59:b1:b5:61:aa:c3:4f:6f:1b:ee:ab:be:08:1b:
         34:a6:ad:56
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUVyboOkEtkkBuaoz4UPaI6kHumy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF
OEY5QzM1OTAeFw0yNjA0MTgxMjIyNDFaFw0yNjA0MTkxMzE0NDFaMDMxMTAvBgNV
BAMTKERGODYyNUY5NUM3NkJCMjVCNDgxRUZGRDNEQjM2NkI3NTZDREIxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebqsXjAsg8qj/VJQkvM4eocWF
mNJh0l+soqPGxaCU1NUPpDpIUBC6dF+HEp5Cr5oU0ZxmzoJKIpt8OUav/L05pglf
AnDMdPWtIWCjfb6zHDFquOHZE2EFbUonqv5lBscKxg20ONnQr4vTXQouXiMIzEFl
pLFAZYBAj6pZqbNJSKhlBPquoP4QJobUavMoUlK7kXYGfyc3QOg6is69jlkY6a0p
jVEDkbyPu4xUoLJzmYaN78B1G4Z925QoLkEhxYpARbLwOkaO9zPr40/N+5hJtVZZ
kZBZdkZqivuxQyiq2CgN9IsrzR657xhFKOCe6ckaQn06PnGRF2gYHyQgvfOdAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQU34Yl+Vx2uyW0ge/9PbNmt1bNseowHwYDVR0j
BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv
MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw
RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk
NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx
NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAUO6eH8SHgd0gl0tXWC
pIwqr5A5R/aeE63keFEEZHo/yJ9wP/V1ElcpsSAym4oB+Q++ABEAvPqNwSbf+nYj
R0cTkKCUL+jpLixRQgmvZiuTwml988gvPqwfpTWXPey394oC3MFBD6y0voI55hJW
Ttv/RmNSl8nK5HD8Ke3rTqGUrzgUnF01LkJu4CDAAJ0RIW+yIsIQ8TE9ifNaA/Mq
tmH27bhEnoC7QQ2aKW2/gy23NvYRmOGf+1v4lXmlOmUjICE5r+Wi4y/zofzcNd4m
4gxIZK/1EwMqk+yGVKln+f7cWQLGW31OiKByzrUYXZpZsbVhqsNPbxvuq74IGzSm
rVY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 23:32:50 2026 by rpki-client