Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
File:                     4742E76772F118A935D69FD40F69858085C80999.mft (raw, json)
Hash identifier:          lOAUBnoex/08Vw1AjsyNkNsqvzMJ0WUSqqJmEzboboM=
Subject key identifier:   A4:D4:9F:D9:50:0D:52:7D:CD:9F:E1:8D:F6:36:8B:A5:9C:97:EA:EA
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Certificate issuer:       /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial:       4433B01D9F94B1DAA02C14B8ABB42F033D3AA43E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
Manifest number:          0256
Signing time:             Sun 19 Oct 2025 18:10:29 +0000
Manifest this update:     Sun 19 Oct 2025 18:05:29 +0000
Manifest next update:     Mon 20 Oct 2025 18:45:29 +0000
Files and hashes:         1: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=)
                          2: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: Z33NoUI+mwtk4yXeyHjBYW+VQZkMltKaE3UI8sR4tLs=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:33:b0:1d:9f:94:b1:da:a0:2c:14:b8:ab:b4:2f:03:3d:3a:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
        Validity
            Not Before: Oct 19 18:05:29 2025 GMT
            Not After : Oct 20 18:45:29 2025 GMT
        Subject: CN=A4D49FD9500D527DCD9FE18DF6368BA59C97EAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:d4:70:f6:02:67:d0:06:72:ec:35:33:0e:
                    bd:ff:1b:5e:33:92:54:c6:f1:2e:97:6d:7f:ed:16:
                    13:f9:7a:1a:a6:27:49:bf:f6:1d:7d:53:1a:e5:25:
                    25:d6:8d:57:12:0f:c1:d0:b0:5e:af:4e:cd:2a:5a:
                    29:3e:e9:9c:0a:1b:91:90:2a:b7:31:77:c0:20:d6:
                    6d:a8:0e:77:eb:a8:f4:ad:8e:d0:e3:f4:44:57:a1:
                    e2:55:75:f1:69:f3:25:fa:09:7c:09:92:76:c1:6f:
                    1f:c3:18:75:21:ee:22:79:6b:01:b0:ee:d8:ed:00:
                    e5:d8:50:c2:de:28:68:a5:64:e1:7a:b3:e4:51:b8:
                    4d:4d:7d:90:df:a3:8e:c4:32:59:fb:e6:65:6c:95:
                    6c:1f:7a:3b:71:53:39:3c:e9:c8:cb:84:72:b8:51:
                    a6:d8:4d:29:8c:97:93:94:11:e3:85:5f:8e:67:76:
                    fc:04:8e:16:52:f7:3e:cf:af:f0:43:ef:91:03:f6:
                    fa:ae:f2:7f:3d:f1:96:a8:82:e3:79:c2:9b:c1:97:
                    57:e1:73:58:41:04:e4:06:c8:b4:49:ef:66:f0:3e:
                    fe:29:78:c2:51:5c:dd:1a:d3:81:60:6a:0e:94:2d:
                    d8:eb:e5:3e:c1:99:08:4a:1c:ed:a6:61:96:87:23:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D4:9F:D9:50:0D:52:7D:CD:9F:E1:8D:F6:36:8B:A5:9C:97:EA:EA
            X509v3 Authority Key Identifier:
                keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:2d:08:f4:13:65:48:77:c3:01:a2:b4:70:29:66:a0:52:
         04:46:44:9e:c7:79:82:3d:e5:2e:89:b2:e5:73:36:11:f0:0f:
         ba:89:55:a1:e7:fd:74:a5:0c:d7:d8:b3:7d:bb:d2:33:98:37:
         e4:a9:27:5e:d4:5e:04:a9:27:b3:0e:26:1b:f5:ab:ae:60:6b:
         31:67:e8:c6:6b:11:fb:9e:e3:1e:77:0f:33:58:e5:64:e6:bd:
         70:06:ca:18:dc:64:76:b9:76:ca:b0:16:42:e7:bf:b0:33:db:
         46:33:20:3d:e2:a2:42:52:8e:34:bd:c1:74:06:1d:18:81:15:
         58:37:20:c1:28:4e:77:64:1f:51:e7:b3:90:07:3d:ef:2b:59:
         21:82:9f:09:df:d6:da:85:9f:1e:8c:16:a5:59:76:72:76:10:
         e2:9d:8a:8b:17:7f:83:7b:04:dc:2e:59:fa:01:72:d8:60:cf:
         e9:68:0f:db:91:a7:61:2d:d9:36:9a:d1:db:1e:ec:3b:8f:e7:
         67:cf:e0:4f:7d:3b:e8:01:30:d9:5d:40:20:66:b2:0c:50:e8:
         d4:58:5a:a3:8f:3d:47:98:f5:f9:eb:34:b5:57:d1:61:de:6a:
         01:69:34:a8:2c:3c:dc:aa:da:b5:32:cb:ef:86:52:02:d8:6d:
         26:2f:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:21 2025 by rpki-client