Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json)
Hash identifier:          NYX3d1deHkJBEXJiLQ8wGlapdgltYLhsoq36/Y8JrdU=
Subject key identifier:   00:C0:18:46:83:CE:A8:0D:02:F5:1E:D7:2F:E1:A6:65:6B:60:50:B7
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       56D1C0453238F91C1BC365D5314D1934D12F4485
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
Manifest number:          025C
Signing time:             Sun 19 Oct 2025 23:05:54 +0000
Manifest this update:     Sun 19 Oct 2025 23:00:54 +0000
Manifest next update:     Tue 21 Oct 2025 02:38:54 +0000
Files and hashes:         1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: GWJHdyR7UsP+91SV8l86mdr5Dj0hK80ywE0Dh8UM+uk=)
                          2: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=)
                          3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d1:c0:45:32:38:f9:1c:1b:c3:65:d5:31:4d:19:34:d1:2f:44:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: Oct 19 23:00:54 2025 GMT
            Not After : Oct 21 02:38:54 2025 GMT
        Subject: CN=00C0184683CEA80D02F51ED72FE1A6656B6050B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:ff:61:3e:04:97:35:d1:40:07:2c:9b:90:
                    69:1b:d7:c9:1c:e4:40:aa:30:f5:29:58:c3:87:42:
                    11:06:3c:55:f6:9b:7f:72:aa:90:ae:f9:f2:2d:a6:
                    a1:fa:5b:b5:03:36:af:77:9a:bc:34:5d:ba:53:76:
                    ca:75:24:42:0e:d7:d0:d5:16:3e:6e:b3:5a:c5:c2:
                    8b:09:51:4c:31:d6:9b:7b:c3:82:9f:bf:8b:bb:e1:
                    ab:f5:11:20:5c:eb:83:6f:64:49:ae:3f:86:19:36:
                    6a:53:40:62:61:9a:d6:a8:05:66:9f:74:ac:4b:87:
                    92:8c:45:fc:7a:5e:a4:d4:72:61:28:aa:ad:01:ff:
                    9f:41:91:2f:0d:d3:db:6a:fc:b1:ce:31:33:8c:bd:
                    43:1f:77:50:18:6c:b2:10:38:ba:96:b8:2b:23:ae:
                    24:23:99:ad:ec:59:cc:ad:56:e5:bc:c5:28:b3:57:
                    c5:34:f8:b3:a0:9a:54:07:51:d0:0b:cd:bb:a1:9a:
                    23:10:f9:c6:f6:9c:e5:54:7a:da:6c:50:37:82:ef:
                    b1:c7:8f:5d:8f:36:63:8f:d1:82:ff:c2:3d:20:6c:
                    9a:8d:d6:d6:84:66:4e:57:49:fe:eb:42:6b:a1:2b:
                    81:bb:6d:dc:fc:8b:72:3e:d9:71:fa:e4:e9:eb:81:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:18:46:83:CE:A8:0D:02:F5:1E:D7:2F:E1:A6:65:6B:60:50:B7
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:89:c7:c2:ad:40:21:44:3b:35:0b:c8:d5:1f:cc:19:e7:
         9e:e5:42:6e:a8:7b:73:6e:b0:44:87:f9:1d:5a:7d:d8:0e:7a:
         7f:42:1a:4c:58:5f:a1:86:df:80:b3:97:4d:06:2a:0a:e5:1e:
         94:a1:4a:ec:6c:14:0a:d6:ef:b6:48:c7:94:29:e7:c8:75:f4:
         37:39:2b:62:1d:c0:b2:8e:ce:cc:b1:4a:bb:96:90:75:3e:ff:
         a8:f6:b0:b7:8f:be:b6:ee:26:f5:31:d8:8e:c4:a8:13:06:54:
         e8:09:8d:f3:fd:30:46:47:09:24:ad:43:2d:83:25:50:c8:e4:
         03:61:f5:07:a8:2a:2c:6b:aa:9a:c1:54:7c:3d:c2:08:e0:36:
         b5:39:41:6f:c1:69:1e:ea:96:0d:0b:b3:85:3e:6c:73:52:0a:
         ac:b4:ea:1e:35:b7:53:8b:c9:20:bc:e6:29:f7:ad:94:90:b5:
         ba:4a:fd:cb:4e:39:80:cc:5e:3c:ff:7c:30:5a:d5:ae:7e:c4:
         ab:42:9c:c6:4c:64:0e:05:b3:e7:5d:dd:4f:3a:01:a7:a0:cd:
         a5:79:50:65:b5:b7:c6:cc:5f:6e:21:58:81:d9:25:22:18:20:
         a3:af:37:ff:8a:ea:5f:c7:ff:c2:3a:7b:d0:9c:81:d8:1b:14:
         d2:b8:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:56 2025 by rpki-client