Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File:                     10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier:          bRe1XVhujrpP1mCNjhhsd/sXBj7dd2xwkZSDlCF2Yek=
Subject key identifier:   CF:17:10:44:7E:5A:34:23:DE:20:FE:CC:AA:76:B9:82:F7:57:91:19
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer:       /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial:       7C232FB9E78CB53A2BC7CC74F2C01B02AEB0705A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number:          01C0
Signing time:             Fri 06 Jun 2025 15:29:53 +0000
Manifest this update:     Fri 06 Jun 2025 15:24:51 +0000
Manifest next update:     Sat 07 Jun 2025 16:30:51 +0000
Files and hashes:         1: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: Z89FcbCrTMtBscw2h5W75CHunYRsXIbcHNYXASnkLN0=)
                          2: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: kR3dpI9ub8mjAH5+Sqk5ZduNl0xmVscQxpBEkRQwwjc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:23:2f:b9:e7:8c:b5:3a:2b:c7:cc:74:f2:c0:1b:02:ae:b0:70:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
        Validity
            Not Before: Jun  6 15:24:51 2025 GMT
            Not After : Jun  7 16:30:51 2025 GMT
        Subject: CN=CF1710447E5A3423DE20FECCAA76B982F7579119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:29:ee:78:c2:3f:b2:21:c7:b0:86:f8:8f:
                    bf:6a:5d:e2:79:ef:8d:5a:cd:48:e7:26:9e:fa:97:
                    75:49:c5:57:67:b0:ef:72:2e:58:7d:b0:c5:dd:a1:
                    bd:2c:2f:d7:fd:5e:65:55:bf:dc:40:40:48:61:a3:
                    31:3f:fb:33:61:4f:ec:44:45:1a:fb:04:03:88:3d:
                    16:3e:a8:6d:5e:b5:71:fb:d3:bb:18:53:d0:0f:72:
                    57:11:63:91:37:19:15:00:b9:75:62:12:2a:08:7d:
                    b7:21:ad:1c:a1:81:c7:3d:7e:0b:9e:05:03:20:7a:
                    89:fe:f4:d2:78:39:05:bd:a1:2a:ca:96:a4:80:2d:
                    28:5f:df:89:ae:70:84:fe:22:91:a7:b4:17:4d:ca:
                    6e:a3:ea:ca:cd:e1:01:15:c9:25:d2:50:70:71:17:
                    f2:f3:7e:d3:5e:73:1f:0f:0c:b6:05:4d:7a:b7:2b:
                    3d:d7:38:c4:92:1c:d8:95:07:14:8e:1f:e1:79:a9:
                    ff:14:ba:aa:bc:f0:55:58:fb:ca:fa:f0:56:03:17:
                    17:41:51:62:1a:ef:4c:cb:d4:74:1b:33:bf:25:3a:
                    68:b6:bf:26:ae:b6:fe:c7:85:b0:46:4c:39:85:c7:
                    93:71:79:bb:56:d9:5d:57:cb:c3:e7:73:83:04:f2:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:10:44:7E:5A:34:23:DE:20:FE:CC:AA:76:B9:82:F7:57:91:19
            X509v3 Authority Key Identifier:
                keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:a6:0c:aa:79:86:19:1a:53:5e:62:62:16:7b:06:e2:d0:
         75:b1:a8:86:98:68:07:7f:ff:3b:b8:34:3b:e2:f0:62:4f:33:
         74:b5:a0:e1:ea:2a:7a:a8:56:34:49:18:b5:bb:75:4c:83:4a:
         66:bd:84:e4:bc:f4:b3:15:ea:9c:37:06:2b:0f:47:ea:0c:38:
         c2:56:38:70:ba:45:96:cb:b4:db:46:6b:39:20:d2:5a:a7:64:
         58:3a:e1:c8:78:6b:c9:0a:aa:c7:03:b6:4d:5b:48:d3:67:90:
         11:4b:f1:36:dd:ff:a0:b0:b7:e1:77:97:2b:a6:dd:02:5f:1a:
         5a:48:95:26:a6:11:63:a4:60:80:03:b7:5c:e3:d6:e0:c7:6c:
         2a:a1:54:04:63:75:18:a2:56:47:7b:86:b2:18:04:75:9a:53:
         6c:f9:db:74:40:32:4d:05:46:0f:06:a7:d9:19:fd:78:71:55:
         33:4f:b5:db:2b:5c:f7:da:7e:ed:18:6c:5c:b8:6d:25:e8:3c:
         20:ca:1b:ad:29:90:9f:fc:38:3d:db:c5:51:a0:d0:15:cf:07:
         bf:41:88:52:54:ee:b9:d4:f7:cb:9c:a8:16:f4:3b:43:db:67:
         29:f5:e8:d8:3b:73:d0:11:ed:88:00:06:bf:80:a0:64:60:fa:
         a3:ff:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:07 2025 by rpki-client