Manifest

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json)
Hash identifier:          fLctY2oG/9XIcwylJAApjjWZLI/Jo/OsNifCKBiR6wU=
Subject key identifier:   1B:9F:7B:B9:5C:1F:77:FB:CE:28:21:D8:3F:51:69:9B:48:81:28:0F
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       24DA1B3C9CD8E3B50FEEE66ADB731880BA0FBD2A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
Manifest number:          03F3
Signing time:             Mon 28 Sep 2026 21:06:44 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:43 +0000
Manifest next update:     Tue 29 Sep 2026 22:47:43 +0000
Files and hashes:         1: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: Hq5f8G1nXLPJf5XUjwuGiCIZJ1kmb0lyWR7N1FLLYG4=)
                          2: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=)
                          3: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: MJAJEUWt52aJyw7ILrnumOnpNrUiD2ZeDsKZTyv9zyo=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:da:1b:3c:9c:d8:e3:b5:0f:ee:e6:6a:db:73:18:80:ba:0f:bd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: Sep 28 21:01:43 2026 GMT
            Not After : Sep 29 22:47:43 2026 GMT
        Subject: CN=1B9F7BB95C1F77FBCE2821D83F51699B4881280F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:fb:fe:4f:f5:17:5f:0a:a4:5b:4b:5f:e6:
                    36:0b:62:95:07:d5:3f:50:4e:b8:35:6d:dd:75:07:
                    e6:2c:9d:d0:41:86:2c:c7:6f:df:7a:77:5a:dd:f0:
                    fe:a2:6c:2d:bd:b3:61:32:ce:ab:06:b8:63:1a:7c:
                    e2:7c:68:0c:93:01:70:d1:80:0e:2d:42:51:a0:d2:
                    bb:56:a3:51:51:36:41:fa:d5:1e:6c:46:34:d9:3b:
                    2f:6f:25:fb:df:7f:45:ce:c5:ca:8e:55:2c:af:76:
                    c9:b1:07:25:a5:a8:6e:15:8e:3b:04:0e:1b:7b:a5:
                    e2:ec:bf:b8:d6:10:28:28:51:0a:9c:96:4c:b5:ce:
                    ab:f7:8a:ea:a7:93:55:4e:c5:64:be:5c:46:ec:cd:
                    75:19:ff:90:be:c3:cf:d6:22:23:df:bc:de:37:cc:
                    c2:2f:10:3f:88:68:93:fe:8d:05:3b:1f:3f:37:6a:
                    69:dd:a3:bf:21:70:e6:8e:a0:e0:97:a5:25:be:2c:
                    3c:0d:65:7a:94:14:bb:a2:1f:aa:99:34:94:c8:b2:
                    dd:99:c9:fb:01:fa:2e:60:7a:24:63:1d:70:36:fe:
                    7a:2d:2f:54:05:eb:c4:f4:b5:4c:b4:c9:dc:8a:45:
                    a3:b9:e3:ba:59:15:f4:df:dc:23:a7:e5:64:c7:9c:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:7B:B9:5C:1F:77:FB:CE:28:21:D8:3F:51:69:9B:48:81:28:0F
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:d2:4e:a7:e7:45:ec:ea:95:22:e1:34:a6:23:19:f3:64:
         42:3d:09:8e:79:81:2b:03:7a:a2:12:f6:12:3f:c8:8b:6a:f5:
         ed:3b:21:b2:db:7b:77:0e:12:92:b9:01:fb:66:32:ee:c2:e3:
         c0:27:74:b8:20:3f:ea:14:eb:22:40:4a:3c:41:ce:c8:0f:bc:
         03:21:21:34:b5:cf:52:01:29:77:ea:b1:62:06:d8:b4:a8:05:
         5c:7d:f3:3b:51:6b:f2:4b:7a:f0:a9:86:02:a9:08:a0:c9:f5:
         3f:44:fc:03:09:be:e8:64:40:0a:7d:b7:37:f0:02:95:b9:cc:
         30:8b:65:02:d5:ed:c5:53:35:4b:96:4a:37:cc:77:d4:6b:85:
         2e:64:fa:a1:97:66:b1:a3:12:24:69:e9:f6:cf:c3:f3:7d:d1:
         1a:a9:96:0e:13:68:3c:2a:75:4c:43:21:93:b0:4e:43:01:a5:
         92:fb:90:f0:f1:3a:f6:b8:55:c6:5b:31:0e:98:c5:b4:c2:f2:
         4d:6b:dc:bc:be:f9:a6:50:fd:f8:99:c9:98:fc:00:e8:0e:d8:
         8c:29:f4:f0:29:e9:48:84:18:43:55:4b:26:7d:0c:3c:44:0b:
         47:d9:29:8e:24:33:c4:99:1b:f5:cd:95:d0:fd:79:37:e0:0e:
         88:6c:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:21:12 2026 by rpki-client