Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          uuhNMv0LN8nEQOoe/Ve2UxMpsTre28hLEw78vB4bYQI=
Subject key identifier:   60:EE:12:DB:95:C9:A3:FB:AB:9F:C2:BA:94:B1:63:0E:68:44:93:8F
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       4D0BF973552EE29583D5BECD514120D202147D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          078A
Signing time:             Sun 28 Jun 2026 14:17:55 +0000
Manifest this update:     Sun 28 Jun 2026 14:12:55 +0000
Manifest next update:     Mon 29 Jun 2026 15:57:55 +0000
Files and hashes:         1: AS52025.asa (hash: 2JR2pEqA6x/1baj/xed/qzOkKqSb5UfW1OaXFVq/sYY=)
                          2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: vmGimnzMjOT/OLbyFb7a11HLAs1vvRyuWxg/m0YvJo8=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 15:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0b:f9:73:55:2e:e2:95:83:d5:be:cd:51:41:20:d2:02:14:7d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Jun 28 14:12:55 2026 GMT
            Not After : Jun 29 15:57:55 2026 GMT
        Subject: CN=60EE12DB95C9A3FBAB9FC2BA94B1630E6844938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:31:cb:bf:cf:9f:a5:d2:28:6d:9d:ec:b5:
                    ce:7b:2d:a7:b7:11:26:ff:2d:ee:40:85:84:09:e0:
                    fc:10:c7:fc:c1:67:6a:45:4c:91:fd:4e:08:ea:24:
                    7e:50:2f:a3:11:7e:af:bc:9b:ba:6d:9a:df:0d:a0:
                    d6:17:4b:24:dc:ac:b5:41:b1:dc:2f:6b:4e:23:d2:
                    09:e8:f0:54:42:13:32:08:4d:9a:12:73:06:a2:94:
                    d2:64:18:46:7e:6b:f9:12:8d:11:ec:80:68:f8:c8:
                    3e:fd:6c:76:38:fb:72:63:9d:7b:87:fc:c7:84:ec:
                    76:fb:61:a2:3d:1f:73:dc:bb:e2:1d:ce:8b:24:11:
                    0b:68:bf:db:1a:9d:0c:e8:1d:15:01:c6:88:11:63:
                    a3:61:b8:ad:ab:bc:38:af:c2:12:7a:d9:ca:b8:70:
                    48:a3:68:63:b8:78:f7:da:a0:15:a0:3e:3e:b7:ee:
                    f3:de:28:a4:88:d2:8d:22:86:9f:50:48:58:5c:be:
                    f5:5d:73:3d:7f:08:b4:d9:80:bb:66:50:7c:06:a2:
                    af:df:db:57:85:64:03:03:dd:1c:0b:02:5d:60:42:
                    05:20:53:54:9c:4a:4c:14:35:73:21:1b:0f:69:8e:
                    34:ec:b0:6c:23:2a:cb:95:ee:69:80:02:96:6f:68:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:12:DB:95:C9:A3:FB:AB:9F:C2:BA:94:B1:63:0E:68:44:93:8F
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:fc:3e:fe:c4:b0:ba:07:ab:16:5d:63:d3:24:6d:c9:b4:
         02:24:9c:95:8d:82:65:f7:75:7f:fb:1f:8e:06:a6:44:85:cb:
         05:44:b2:df:cc:b0:81:a6:53:96:1c:19:4e:d8:a9:80:b4:1e:
         fd:e7:44:af:49:d4:b2:36:0a:31:bd:d8:16:4e:fb:e8:24:4c:
         38:33:f2:fa:53:16:d2:83:e3:ba:6a:78:92:ef:64:03:62:ce:
         02:2d:c5:ef:9e:ad:37:40:14:81:05:5d:f6:f6:13:71:f0:a7:
         52:04:4c:82:b5:31:e1:4e:27:45:ad:5d:77:11:54:f8:98:cf:
         0b:d3:53:07:44:6c:33:96:8f:0c:a9:7a:df:d8:b5:6f:3b:47:
         17:19:14:2d:21:4c:37:71:9f:7a:5b:60:ff:fb:14:dc:a8:6d:
         01:78:1a:1d:3d:7b:f5:06:91:3b:fb:55:b6:92:c0:43:e9:c8:
         1b:e5:be:99:08:47:85:2f:71:0e:51:b7:e4:11:da:ea:44:9e:
         8d:49:7b:6e:ed:45:09:a7:d1:fa:ba:a6:e8:e7:fe:5d:d5:71:
         36:b0:45:5b:03:06:3c:75:c4:72:86:f5:1b:be:2c:4b:09:01:
         fa:ab:c4:ec:75:ef:f7:6e:4f:f6:f7:94:3b:1e:d0:f0:e6:a1:
         da:6e:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:16 2026 by rpki-client