Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json)
Hash identifier:          gnDOsrQ1YdOXbe09yckHu5c9QQzQE/c7h8Zd0Z51fxk=
Subject key identifier:   E0:2B:3C:EC:20:2E:20:6D:8C:91:DE:04:74:BE:34:42:23:97:67:21
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       6CBF824A6C1D7A32836E98726A7B30ED5208DB85
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
Manifest number:          030A
Signing time:             Wed 25 Mar 2026 14:10:17 +0000
Manifest this update:     Wed 25 Mar 2026 14:05:15 +0000
Manifest next update:     Thu 26 Mar 2026 15:23:15 +0000
Files and hashes:         1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: HvsXRcb5udeOxyo6bsHkOoLAxpBDpEZRgtModKPlcHI=)
                          2: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=)
                          3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bf:82:4a:6c:1d:7a:32:83:6e:98:72:6a:7b:30:ed:52:08:db:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: Mar 25 14:05:15 2026 GMT
            Not After : Mar 26 15:23:15 2026 GMT
        Subject: CN=E02B3CEC202E206D8C91DE0474BE344223976721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:3d:33:2b:89:d9:d4:6e:eb:06:8f:86:41:
                    30:61:7e:5d:d7:e5:a4:f8:a6:0b:2e:87:fe:e6:82:
                    eb:57:9a:42:d2:cb:bd:b6:75:38:60:9e:83:b2:58:
                    5d:d2:27:c4:f8:dd:4a:2a:74:47:a5:90:17:9d:b4:
                    6a:3f:5c:5f:89:7d:0c:c7:58:13:16:a6:a2:f1:6a:
                    f8:61:d8:80:65:69:3f:bb:d1:1e:ed:3e:72:9c:20:
                    93:f1:8b:78:6a:57:e5:f8:05:04:b9:4a:73:bb:53:
                    d5:83:14:96:47:cf:54:01:aa:f2:e0:de:4e:ce:2f:
                    45:fb:64:18:ca:0f:a9:b2:42:07:da:02:ab:a4:90:
                    d8:5d:38:52:45:1f:90:14:6f:63:45:84:2d:a5:5f:
                    8e:94:7a:54:4d:f0:d5:e1:21:40:ef:bd:2e:06:17:
                    5e:28:01:b3:91:98:79:7e:ba:62:50:41:b3:33:13:
                    e0:8e:3a:0a:0e:e0:2e:f7:86:fa:ab:8c:78:da:eb:
                    a5:dc:90:64:e6:cc:4b:6d:db:03:47:03:46:66:e4:
                    6d:06:7a:f5:ae:67:e2:b0:22:ec:f7:e9:a2:5e:f3:
                    b8:3a:0f:a8:d4:d1:4f:66:09:91:14:71:7b:87:ec:
                    26:17:3a:52:34:6b:22:7e:0d:ea:ee:0a:50:71:3b:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:3C:EC:20:2E:20:6D:8C:91:DE:04:74:BE:34:42:23:97:67:21
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:4d:92:dc:67:7a:9d:32:e6:03:58:7f:e1:86:37:aa:80:
         bd:7d:cd:b5:9f:00:a8:10:ab:88:49:09:2c:7d:8a:ff:ab:1d:
         f9:9a:69:65:cd:75:35:31:bc:6e:d7:91:45:7a:33:a2:23:03:
         b0:4d:ed:7c:d3:2a:e4:26:04:f9:dc:8a:79:97:8d:f9:66:aa:
         2a:fa:5c:4c:a7:7c:98:48:21:28:62:63:e7:00:01:a6:45:25:
         c5:c6:42:65:9f:4f:1d:a7:f3:c6:85:68:6b:eb:61:55:0a:1b:
         52:6b:31:11:9f:57:b1:c3:7c:47:1e:ca:92:22:f6:4b:97:09:
         ec:e9:24:27:3c:1f:1e:df:a3:da:c5:48:93:b6:d4:a5:53:5a:
         c4:cf:b0:fa:3b:48:b2:04:b3:40:1b:c6:49:69:3b:b3:8f:31:
         94:a5:b6:0a:98:bd:f1:0f:89:ac:2e:a0:04:95:33:50:df:ab:
         1e:d4:62:d9:5f:c5:0d:a4:a6:e1:aa:1a:56:d7:fc:a5:16:94:
         ea:63:73:d1:6e:9b:3f:e5:0a:0a:69:8d:76:f4:1c:86:81:e2:
         db:91:37:17:e1:a0:ce:7e:f9:fc:75:b2:c8:be:cd:f8:92:bc:
         9e:ea:f1:e9:29:72:42:ac:78:fe:ff:c3:c7:56:bd:66:95:6c:
         87:c8:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:44 2026 by rpki-client