Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          8q4RF09Kri0HOWUHf51d8OdC4fqV+ztn8S0jRZnTJRE=
Subject key identifier:   0B:29:E7:6C:04:AF:14:25:E4:E4:D1:3B:18:FE:A6:44:DA:8A:5F:D9
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       1560A05FB21304F35967C08E9CE06A1B0B2FFFAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          4D
Signing time:             Sun 31 Aug 2025 16:17:56 +0000
Manifest this update:     Sun 31 Aug 2025 16:12:56 +0000
Manifest next update:     Mon 01 Sep 2025 19:05:56 +0000
Files and hashes:         1: AS47778.asa (hash: r7x168jc/t4kC2CKt3ERONBsUJWICgaP/67P2/IU3Wc=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: 7TS3AdHCa8feVsXflFQS3zB5uFka1Oj2Qhv7IsrQ1V4=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Sep 2025 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:60:a0:5f:b2:13:04:f3:59:67:c0:8e:9c:e0:6a:1b:0b:2f:ff:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Aug 31 16:12:56 2025 GMT
            Not After : Sep  1 19:05:56 2025 GMT
        Subject: CN=0B29E76C04AF1425E4E4D13B18FEA644DA8A5FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:a8:0a:75:3c:71:dc:37:e1:be:99:f8:7b:
                    74:d4:38:b7:79:3a:fc:f1:49:18:9f:64:57:0e:ea:
                    9b:29:04:e6:5f:d9:18:2f:6f:53:73:71:e9:ca:4c:
                    e0:6c:dc:0a:c9:aa:94:40:4f:e8:43:b2:f4:c0:ef:
                    77:34:fe:82:3d:c0:d9:c0:24:5f:5f:14:8c:cc:3b:
                    34:61:84:79:eb:cb:91:6a:60:be:f1:b4:bf:22:7d:
                    85:51:cf:a3:78:4d:19:f1:44:ba:8a:78:86:f2:07:
                    f0:e3:93:24:62:8e:12:91:5f:af:a5:51:d0:33:a5:
                    64:6e:c8:77:38:85:fe:bf:b1:3a:55:6b:a4:35:d8:
                    45:ef:77:ab:47:7d:c9:c9:28:62:10:e0:99:42:2b:
                    81:24:4f:0d:26:bd:73:84:9c:ce:cf:7f:41:74:b6:
                    04:83:5b:28:ee:46:0b:d5:90:30:69:85:ca:90:94:
                    f0:23:24:65:f9:bb:d5:25:56:23:ac:e8:ff:bd:21:
                    9a:a1:60:14:8a:c8:3a:be:66:a8:d9:fd:35:8c:68:
                    f5:d6:6c:9e:75:dd:da:d3:28:84:dc:d1:6c:cd:f4:
                    ed:7a:b3:f2:ba:b8:29:c6:75:a9:5b:bb:74:57:0b:
                    11:8a:6c:de:28:47:a5:8c:cf:f5:6c:13:dd:6e:57:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:29:E7:6C:04:AF:14:25:E4:E4:D1:3B:18:FE:A6:44:DA:8A:5F:D9
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:67:df:9b:14:84:be:23:6a:c7:ce:27:10:18:a4:53:55:60:
         fa:03:21:3d:a4:22:53:b3:d2:18:e0:a5:57:97:3a:61:b3:fd:
         fb:86:12:5b:71:22:9f:b0:9b:ca:82:de:8d:79:bc:2a:61:98:
         41:fa:74:0c:0e:dd:dc:23:a8:f5:7c:92:05:8c:4a:f8:51:06:
         eb:11:a6:76:f7:0b:b3:63:31:5f:23:f8:db:82:ef:04:be:0b:
         2a:e9:4a:99:8d:cf:5a:d5:3e:d7:b6:d1:b0:27:03:b1:39:ba:
         2c:5a:82:79:ca:4e:d0:23:e1:68:08:f6:3a:3e:85:d8:23:bf:
         9f:35:01:c9:8b:3a:3b:fb:2d:d3:ab:f0:07:99:46:c4:56:81:
         81:b4:77:10:37:eb:3b:ef:18:79:f9:84:bc:58:d3:4c:58:66:
         46:86:93:0e:6d:3d:31:e9:5c:88:c4:91:00:fb:2f:8e:54:f9:
         ca:1a:83:75:1c:46:0c:e2:2d:ff:b6:fb:e5:8a:f2:d3:1d:87:
         8d:11:c2:10:8b:9c:1a:1d:16:a3:55:54:24:31:d5:9b:77:d9:
         30:bf:dc:ca:9a:19:1e:bc:20:70:95:2d:47:d8:7c:45:fb:b8:
         ce:c2:75:17:b5:0e:a5:3b:b9:fc:ae:65:da:40:d4:76:d9:a0:
         b1:8e:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 22:16:12 2025 by rpki-client