Manifest

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
File:                     0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft (raw, json)
Hash identifier:          d1ulDI/y+gHTCWnVLyw05Nr3Sjndxv5giegKvJABvhc=
Subject key identifier:   DD:8E:F3:FF:84:F2:0B:1F:D8:A0:40:8A:E4:F9:98:20:FE:96:3C:58
Authority key identifier: 0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2
Certificate issuer:       /CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
Certificate serial:       368E6A00AC4476FAE2AEB0ADE7E262100E7D5AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
Manifest number:          0627
Signing time:             Tue 04 Nov 2025 05:57:21 +0000
Manifest this update:     Tue 04 Nov 2025 05:52:21 +0000
Manifest next update:     Wed 05 Nov 2025 09:31:21 +0000
Files and hashes:         1: 0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl (hash: Ia51dD02GSQKR8FCyRj7raWS7waLgjO/JHQHZDh6xc8=)
                          2: AS50224.asa (hash: EG9N16OrNve/GSuBywrKePHii0/mkJf+tZbu+iQg3Nw=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl
                          rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8e:6a:00:ac:44:76:fa:e2:ae:b0:ad:e7:e2:62:10:0e:7d:5a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
        Validity
            Not Before: Nov  4 05:52:21 2025 GMT
            Not After : Nov  5 09:31:21 2025 GMT
        Subject: CN=DD8EF3FF84F20B1FD8A0408AE4F99820FE963C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:79:56:82:83:66:ca:8f:3b:39:a3:fe:62:
                    6b:6a:81:9c:1e:f3:5d:e5:99:69:a1:a0:d8:ba:bb:
                    2d:68:01:73:8a:e2:a2:c8:f4:dc:3a:6f:ae:44:d8:
                    28:86:16:2a:d3:dd:a1:7c:50:ae:8c:e1:26:f8:d6:
                    ab:c0:2e:ec:c4:a1:42:7c:7b:4f:f3:b2:3b:69:44:
                    4b:22:ab:5f:0f:1c:17:66:95:51:67:c7:ab:55:8a:
                    30:12:68:9f:ac:6e:b1:6d:40:e3:4c:78:cb:6a:ae:
                    c3:fc:c7:f4:30:91:d7:43:3c:11:8c:5b:50:a6:26:
                    46:39:88:1b:91:d0:1c:3a:f1:7e:ce:4e:df:14:16:
                    b3:d4:1d:a6:72:d7:65:6a:16:3c:b2:10:b0:66:ce:
                    8c:ce:6e:bc:71:96:9e:23:fe:25:2e:22:2c:32:64:
                    36:2e:25:db:39:52:1e:cb:cb:26:e3:8e:33:6f:3f:
                    e9:5a:cc:2c:b3:20:42:88:33:b2:b1:84:63:68:3c:
                    5d:cf:c8:ba:c4:4c:e1:53:6b:62:b4:36:4f:ae:03:
                    7a:d6:3a:77:ba:43:14:b6:cc:d3:82:4c:f6:d8:02:
                    ed:a5:79:6c:a4:a7:13:c9:a3:df:d5:b5:1c:b8:7b:
                    8d:1d:90:55:eb:35:16:1b:db:fa:89:59:dc:6e:95:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:F3:FF:84:F2:0B:1F:D8:A0:40:8A:E4:F9:98:20:FE:96:3C:58
            X509v3 Authority Key Identifier:
                keyid:0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:64:0f:02:44:05:bf:66:22:67:87:d7:29:e2:4e:ac:29:
         83:6f:3c:0e:ef:e9:3e:c2:60:6f:39:af:f6:63:8c:ff:7f:35:
         d2:6b:6f:9c:43:77:90:ea:dc:61:24:0a:a6:14:c4:b2:3c:1f:
         34:6d:9d:ce:eb:c9:ff:2a:97:2b:68:8b:7f:c7:2d:35:58:87:
         2e:85:00:49:f5:f5:45:98:9b:b9:60:27:ab:e1:a9:0a:2a:63:
         12:03:9c:63:c7:6e:15:ca:6e:2b:ca:7d:11:b0:58:09:57:9a:
         8d:6d:8b:ee:bd:31:1b:6b:2d:26:28:43:b1:86:94:75:11:d1:
         d8:e3:3d:df:51:96:25:90:22:c9:6c:d3:0e:07:7b:9c:aa:4c:
         63:e4:86:39:99:b1:9b:93:3b:cd:29:c4:56:7b:09:1b:5c:c7:
         60:f3:96:d1:ca:a2:39:6f:ae:b9:ca:aa:5d:e6:54:91:1d:08:
         65:75:a7:1e:87:3a:56:d8:4a:85:0e:ee:87:58:1b:4c:e7:c4:
         0b:32:fe:ab:67:0a:72:91:a3:06:27:d3:2e:d8:4e:51:10:50:
         be:ad:c1:3c:dd:80:3a:24:50:a8:8d:56:04:9a:d1:5b:40:25:
         55:fe:1c:c0:5c:f3:da:d0:18:32:94:47:58:c3:69:43:9c:96:
         d4:74:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:48 2025 by rpki-client