Manifest

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
File:                     BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft (raw, json)
Hash identifier:          Ri3Z2m4bxysj7bvJE30c327xHmxk7y05YqKxn+4sCN8=
Subject key identifier:   CE:DB:3F:55:9A:82:42:38:4D:BD:B2:EC:4C:41:81:EE:64:82:05:75
Authority key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Certificate issuer:       /CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Certificate serial:       1B69F7BECD8065D0A25D5E9B01C48B60247AAE96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
Manifest number:          015F
Signing time:             Fri 21 Aug 2026 01:21:19 +0000
Manifest this update:     Fri 21 Aug 2026 01:16:19 +0000
Manifest next update:     Sat 22 Aug 2026 01:44:19 +0000
Files and hashes:         1: AS200454.asa (hash: niaO5itGOgM5yJefkbbicM5xDBdwreU4VJc+rDCZ5mY=)
                          2: BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl (hash: gFLsKolVaSEMVh1IHmlleetcVtywmS9VhMWWW8xyF8M=)
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:69:f7:be:cd:80:65:d0:a2:5d:5e:9b:01:c4:8b:60:24:7a:ae:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
        Validity
            Not Before: Aug 21 01:16:19 2026 GMT
            Not After : Aug 22 01:44:19 2026 GMT
        Subject: CN=CEDB3F559A8242384DBDB2EC4C4181EE64820575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:60:d9:59:c6:28:00:80:03:65:3d:dd:2c:
                    f7:bd:b5:4c:e6:fa:f1:31:59:60:d0:bb:b2:50:2d:
                    1c:0a:ee:c6:f0:0e:ed:15:f5:d2:8f:01:da:41:d2:
                    7b:ea:d2:63:e6:09:ce:ec:b9:ec:64:79:5c:cb:92:
                    f8:d9:1d:fa:6a:7b:1b:25:f4:31:99:67:f9:de:34:
                    b1:6f:af:b1:1e:f5:1d:7b:d4:c4:3e:f3:08:ec:71:
                    d3:17:8b:3f:ec:13:64:49:cd:09:0d:ad:93:a0:8d:
                    89:20:24:ac:ee:67:7b:1c:45:23:5a:7e:29:48:13:
                    b5:f3:d8:18:18:39:31:c5:53:bc:db:68:37:d6:c1:
                    8f:f2:2a:fc:5f:da:cf:ca:43:fa:f5:c4:6d:8a:05:
                    fd:92:44:6d:9e:48:ac:4c:73:1f:15:6c:35:7e:3d:
                    28:a0:15:cd:47:ae:2e:80:e2:37:08:a6:a6:b0:8e:
                    bc:af:a8:74:14:36:1e:1e:78:cf:cf:46:45:37:89:
                    5f:0c:52:a9:06:47:14:40:4d:3e:ff:61:d9:1b:84:
                    d8:53:d1:ef:b2:1e:6f:af:e2:4a:59:ce:61:10:2f:
                    ae:dd:34:11:35:59:c7:23:cb:10:5d:a1:7a:82:26:
                    36:d8:ac:ec:b0:7a:59:f9:0e:12:f8:e9:7a:db:e9:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:3F:55:9A:82:42:38:4D:BD:B2:EC:4C:41:81:EE:64:82:05:75
            X509v3 Authority Key Identifier:
                keyid:BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:ab:da:25:3c:58:26:68:c3:69:a4:44:37:af:88:05:34:
         4f:31:4d:b1:6e:06:00:16:08:9b:7c:cf:44:80:6a:41:43:87:
         84:59:6f:e6:10:51:b7:ab:49:02:95:8b:d5:18:81:dc:6b:57:
         b2:26:01:e5:75:3e:71:35:cf:a4:17:36:3e:cb:de:c5:2c:45:
         42:43:de:bc:f9:e8:e3:6a:31:60:60:06:36:66:21:37:24:ae:
         73:d1:21:11:34:24:97:67:c7:5f:0a:40:4b:20:96:ee:1c:13:
         14:22:fa:e6:b4:18:b2:ff:de:0a:34:17:18:19:53:17:39:ce:
         a4:6c:86:30:05:f9:fc:e1:43:f5:19:08:17:e3:25:de:23:e9:
         64:a2:d4:e1:f5:5d:fb:d7:69:ae:c0:d2:b7:79:5a:8c:b4:38:
         cd:0f:90:36:f5:71:ca:10:67:c1:aa:b1:3c:00:b8:56:b6:4d:
         34:32:12:4a:c6:91:23:b4:20:aa:b9:23:e7:82:92:f7:43:31:
         f7:d5:9d:b1:6f:cc:3c:f9:2a:f7:c1:43:54:5d:a2:04:32:19:
         da:2d:33:68:ee:38:e5:3b:93:dc:09:eb:6e:9d:f4:3e:7b:bc:
         10:24:54:7b:1b:1b:c9:f3:24:c8:42:09:ff:1b:08:5f:57:66:
         22:48:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 18:33:36 2026 by rpki-client