Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          RWQXzvvwSy7h5XCO+cteufJSyKXFbrDBjbqlwN4X6pM=
Subject key identifier:   E3:23:A9:B8:E0:D9:A9:23:E0:ED:9E:A5:47:D2:11:7B:DC:14:CE:A9
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       179F4219F8C5C172F2068C6FF0E7F47CBC434E08
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          0483
Signing time:             Sun 19 Oct 2025 14:56:31 +0000
Manifest this update:     Sun 19 Oct 2025 14:51:31 +0000
Manifest next update:     Mon 20 Oct 2025 18:49:31 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: UpPkQst5fJOgiqPKKz81es1ncVXYkgtHSyk2surJio0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9f:42:19:f8:c5:c1:72:f2:06:8c:6f:f0:e7:f4:7c:bc:43:4e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Oct 19 14:51:31 2025 GMT
            Not After : Oct 20 18:49:31 2025 GMT
        Subject: CN=E323A9B8E0D9A923E0ED9EA547D2117BDC14CEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:a8:4b:a8:65:68:e7:e6:27:0a:bf:65:52:
                    bf:fe:e6:fc:35:f0:6f:9e:39:46:99:a6:8d:ad:21:
                    63:29:a2:d2:b6:9e:72:78:ea:e9:85:98:3e:a0:75:
                    04:11:50:6a:86:6a:b1:66:94:8e:96:26:e0:0f:92:
                    64:d5:cb:12:cf:0e:70:e3:88:9c:8f:15:d7:a2:f7:
                    fd:98:76:fc:cb:0c:4f:e0:77:a0:82:74:63:c5:8f:
                    36:5d:7b:50:5f:78:48:7f:86:f3:39:a8:9f:4b:ea:
                    76:4d:21:27:9d:78:c7:b4:b3:00:d7:ad:a6:d6:58:
                    2a:5d:28:ff:80:83:c8:f8:31:0d:4f:54:51:97:54:
                    71:2a:17:53:80:1c:81:2a:8b:ef:eb:80:73:88:31:
                    80:b4:1c:2f:79:a6:69:06:b0:a5:52:f7:51:83:9c:
                    e4:b7:96:9b:c0:d0:2a:85:bd:74:a0:42:85:65:ca:
                    87:22:9b:f0:5b:0f:ae:b8:8a:8d:b2:f7:ae:68:03:
                    53:2d:a3:72:4e:ab:42:73:7f:9b:1c:15:b4:b4:f9:
                    0f:c7:a5:dd:04:91:bf:c8:ad:8b:ba:64:9c:d4:17:
                    4c:1d:91:db:1d:a4:99:21:0f:25:57:5e:60:78:0e:
                    3d:f6:8a:bc:d7:2a:ad:3b:c7:86:fe:18:6f:00:0f:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:A9:B8:E0:D9:A9:23:E0:ED:9E:A5:47:D2:11:7B:DC:14:CE:A9
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:2e:82:c3:4e:1e:48:ae:db:04:d5:f1:f7:e9:00:ba:48:
         75:4d:ab:fb:c6:59:47:16:fd:d8:d7:db:68:e5:be:f6:e6:b1:
         c0:36:f2:68:a6:8d:5f:4c:18:89:5c:60:0e:a7:0e:bf:18:a7:
         9c:8f:eb:9a:11:fd:10:8d:22:59:f5:e0:ff:67:9f:6b:c1:0e:
         ca:51:40:02:0e:9a:24:6c:96:f0:2c:1b:12:be:e6:58:e5:f3:
         50:b1:39:16:2e:6a:f0:83:b3:83:8b:99:a9:b1:23:8f:84:a3:
         1a:1e:5f:70:5b:20:25:b4:22:cc:ca:fa:01:9a:81:e7:a6:90:
         1b:8e:fd:8f:0d:f1:11:0c:b0:2b:cf:c3:c2:ea:5a:b2:9f:33:
         5f:f4:91:88:00:4e:f7:a6:e6:a2:33:e8:f9:83:e2:25:93:b5:
         db:ba:9e:6f:2c:86:75:2c:21:12:68:b3:0d:d1:4e:64:ea:c5:
         63:a6:89:14:80:80:12:ea:1e:38:63:65:0a:fd:8f:a0:85:76:
         b1:a6:37:9e:68:ac:9e:3a:42:8c:1e:80:94:b6:21:15:54:44:
         f5:0c:a9:e6:20:27:24:b4:83:c7:73:f7:96:58:39:66:7c:4a:
         cb:23:0d:98:5b:b5:e8:7e:c4:2f:08:3e:73:0d:1f:8b:31:18:
         f8:f4:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:54 2025 by rpki-client