Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
File:                     EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft (raw, json)
Hash identifier:          m6sO3qIfu+6+lxF7JjKctpdOjp/DqJYZMi6gNPtOjYU=
Subject key identifier:   35:A7:AD:EF:22:F9:72:D4:91:BE:AC:9F:23:FD:2A:D9:F4:FC:68:DE
Authority key identifier: EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56
Certificate issuer:       /CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56
Certificate serial:       29D1192FBD58B7BA18BBEB0FA485F0F8E3DB7519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
Manifest number:          2B
Signing time:             Thu 06 Nov 2025 16:21:53 +0000
Manifest this update:     Thu 06 Nov 2025 16:16:53 +0000
Manifest next update:     Fri 07 Nov 2025 19:12:53 +0000
Files and hashes:         1: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl (hash: ioXIlQtkiTWCnRp4PYtnxPcUEio/6dfpgBHyXSDp7B4=)
                          2: AS214976.asa (hash: YHABTuzlbO4T82WDdGRIeo12XIwcp/xmEuN99D69NCg=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Nov 2025 19:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d1:19:2f:bd:58:b7:ba:18:bb:eb:0f:a4:85:f0:f8:e3:db:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56
        Validity
            Not Before: Nov  6 16:16:53 2025 GMT
            Not After : Nov  7 19:12:53 2025 GMT
        Subject: CN=35A7ADEF22F972D491BEAC9F23FD2AD9F4FC68DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:3a:cb:14:64:30:4b:75:4a:73:8a:e6:af:
                    dc:d4:27:43:1f:56:f8:4b:c1:29:f8:31:2c:f4:92:
                    a2:9b:a6:d2:ab:bf:ed:b2:f6:7c:ba:01:c3:5e:81:
                    59:15:63:e1:24:b3:ac:a1:69:fd:99:aa:14:ac:7a:
                    67:ba:52:da:f3:b2:c7:b8:6c:a3:1f:81:19:db:1f:
                    87:51:18:ef:67:5f:70:e3:d0:51:4c:28:e5:b9:b3:
                    09:34:a7:05:a2:bb:df:d1:3f:27:76:e4:6d:9e:7f:
                    11:c6:68:29:cc:ea:cc:46:be:c4:43:ec:20:53:54:
                    c0:5d:95:d5:84:99:e7:ee:1f:fd:21:62:0e:cd:81:
                    83:9c:b4:9d:74:7b:bd:ad:3c:ac:51:61:c3:11:13:
                    16:48:2b:f5:6e:ff:2a:86:4a:11:69:69:08:68:db:
                    f1:84:16:02:c2:a5:7e:8f:f5:4f:45:5d:76:fa:40:
                    a7:d7:ce:bf:c6:ad:9b:a6:a6:d2:64:77:7e:ed:83:
                    7b:6f:1f:09:79:15:66:3e:e0:8d:0c:25:e4:4f:2f:
                    43:be:ba:ba:c0:6b:ee:df:57:65:e0:d6:42:fa:4e:
                    bb:ff:96:db:da:c8:de:6d:47:c5:04:2e:74:df:b3:
                    6e:7f:a8:44:56:55:d8:76:f8:68:48:65:65:a4:e7:
                    55:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:AD:EF:22:F9:72:D4:91:BE:AC:9F:23:FD:2A:D9:F4:FC:68:DE
            X509v3 Authority Key Identifier:
                keyid:EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f0:75:3c:a3:7b:9e:6c:02:d4:cf:7e:09:2a:2d:00:a2:81:
         28:19:05:08:c8:0b:51:d9:75:cb:7b:fa:e1:87:96:cb:10:78:
         ec:fb:79:c5:b8:21:9c:72:02:2c:ef:cd:5f:94:81:01:e8:dd:
         8f:f7:51:a8:1f:87:72:ec:45:03:87:96:cc:ee:bd:7d:c8:ad:
         99:4f:d4:d7:f7:16:aa:60:12:c7:0b:f3:a8:24:57:36:57:c3:
         38:9c:e4:01:67:6e:37:8a:72:65:7e:45:ea:bf:5d:58:4c:31:
         ce:db:89:22:16:8a:81:70:3f:3e:8c:ca:69:bd:ea:e6:f3:6d:
         f4:99:20:8a:6d:f7:32:41:f7:f0:d8:39:6f:56:fe:24:b8:70:
         38:0a:b8:c4:09:87:f8:39:db:41:5a:56:72:af:e4:bb:ff:89:
         06:dd:9d:d3:92:33:01:c5:e1:68:da:42:01:65:f0:53:1e:d1:
         87:bd:e6:35:ce:78:04:8a:88:74:60:e7:42:7a:e5:74:be:ea:
         aa:f8:d8:f3:f6:87:c6:82:3d:5f:00:97:a6:fc:a7:3a:77:2f:
         95:9d:f2:91:aa:09:a7:e3:ab:5b:6b:40:81:66:f1:a4:1c:b7:
         0f:03:de:fe:14:0e:31:c5:f0:78:fd:3b:7d:63:60:3f:fc:56:
         b5:ef:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 07:56:14 2025 by rpki-client