Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          R2c18k6Jl/bKXx5RoDajDW1bqhGsVbhKKEAJ/tSg+kU=
Subject key identifier:   7E:8E:83:DF:F7:E6:F9:2A:F8:C3:83:6A:25:33:CC:7C:8C:A3:32:1D
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       7141B563C9C008E4C47E1DC8A00C3C3920C3B856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          061B
Signing time:             Sun 07 Sep 2025 01:59:33 +0000
Manifest this update:     Sun 07 Sep 2025 01:54:33 +0000
Manifest next update:     Mon 08 Sep 2025 14:15:33 +0000
Files and hashes:         1: AS52025.asa (hash: tRwDhB2fCfi4WlE9h/+KAiXulT1s7p6mz7bJ4qX4gD4=)
                          2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: Mf2wVVJ1ZYyA5gr9MOsTb1YdHIP0atKxLzYmoJ4NJzY=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 14:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:41:b5:63:c9:c0:08:e4:c4:7e:1d:c8:a0:0c:3c:39:20:c3:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Sep  7 01:54:33 2025 GMT
            Not After : Sep  8 14:15:33 2025 GMT
        Subject: CN=7E8E83DFF7E6F92AF8C3836A2533CC7C8CA3321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:65:a8:00:ae:5a:ab:22:2e:dc:b8:c4:b4:
                    10:af:58:89:b6:50:7c:8c:db:dc:05:b3:6d:9a:b7:
                    ab:c7:5d:54:f8:01:b3:a0:6b:9b:1d:44:60:c5:20:
                    16:f8:7b:0c:59:ae:c8:58:95:df:58:91:b1:ba:e0:
                    f0:63:b8:b1:2f:4b:6e:a0:a0:c7:ea:7c:40:e6:99:
                    48:34:10:fd:4d:28:a7:47:fe:c1:ee:b5:cb:84:bd:
                    af:b8:35:bf:d1:a0:d7:de:15:2f:0c:9e:0b:fc:1c:
                    8e:a0:dd:45:8d:c2:5d:d1:aa:c6:dc:96:b6:2c:34:
                    63:ac:01:7a:a3:76:d5:ae:6c:7e:c0:4b:20:22:d5:
                    a0:27:be:45:8b:e0:71:98:03:91:e8:14:97:f2:74:
                    46:be:f4:85:13:73:10:1d:e9:05:4b:b0:4d:8d:85:
                    09:ee:db:b1:2a:2d:71:01:16:14:af:a8:70:f1:f4:
                    91:d7:b5:09:29:d3:e5:8f:f3:e4:4a:c7:34:67:3e:
                    66:54:85:36:73:71:5b:69:b3:a0:fd:55:b9:73:62:
                    b5:d2:04:25:6b:da:cb:86:06:34:07:3d:6a:47:16:
                    25:84:b2:33:db:ca:24:8f:14:82:45:58:6b:0f:e1:
                    d2:63:5a:54:5b:79:f2:16:ab:b7:31:5c:a8:ab:62:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8E:83:DF:F7:E6:F9:2A:F8:C3:83:6A:25:33:CC:7C:8C:A3:32:1D
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8d:e0:b3:dc:70:17:82:b4:dc:2e:ad:48:06:94:22:ec:f7:
         11:cf:83:8e:30:05:a1:09:5d:1e:d1:6f:00:97:f2:e1:71:b7:
         62:7e:bd:26:64:88:ec:06:a5:65:65:d8:eb:16:08:f3:8f:39:
         4f:4a:68:4c:c1:09:40:fe:74:08:08:b7:f9:bb:1c:21:32:9b:
         d6:a2:8a:9b:e7:2d:22:24:d7:35:2b:84:b3:72:13:04:5c:01:
         d6:17:c3:e4:9f:49:85:96:ee:41:8c:95:dc:02:51:88:a5:32:
         d0:65:ad:0c:2f:88:24:c5:d3:1e:da:d1:69:87:79:ca:de:52:
         8f:99:b8:a0:16:c3:59:3b:e5:c4:e6:d5:76:80:18:49:08:26:
         77:a9:5b:bd:e3:c8:34:0e:3d:3f:4a:57:a4:f8:66:87:ac:c1:
         c9:f6:e2:d0:0b:37:47:21:5b:12:bf:d9:ce:24:82:8e:24:df:
         6d:bf:af:c5:9b:0d:a3:42:7e:b5:99:3b:e7:31:ea:40:eb:2d:
         f2:2e:58:14:57:a2:bc:12:da:5f:83:d6:60:e3:11:46:c8:22:
         c8:fa:e2:96:03:46:67:3d:c0:4a:2b:30:2d:fa:79:8c:ff:35:
         2b:23:b6:37:19:e1:0b:a5:5c:41:f6:03:d9:fb:5a:a9:10:61:
         d9:8b:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:04:28 2025 by rpki-client