Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          gGqTGas+68t3wdOyMhu9jDggDr8seB3Co4CXJDufeAk=
Subject key identifier:   EA:7B:F3:EE:20:6D:72:43:3E:ED:7B:92:53:66:FA:5E:A7:93:9A:F7
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       4C4E6AD36DBB134602B4C53DB570A6932BF8D1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          02A2
Signing time:             Sun 28 Jun 2026 21:47:15 +0000
Manifest this update:     Sun 28 Jun 2026 21:42:15 +0000
Manifest next update:     Tue 30 Jun 2026 01:27:15 +0000
Files and hashes:         1: AS47778.asa (hash: GbysVX722g1N5R0RyN2HAwYr+RRUlTeSZGz8UNCYDjI=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: YQwljIeuEfNRBlUu9OUweFLvGwC7zLYGpdjX7G0626k=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:6a:d3:6d:bb:13:46:02:b4:c5:3d:b5:70:a6:93:2b:f8:d1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Jun 28 21:42:15 2026 GMT
            Not After : Jun 30 01:27:15 2026 GMT
        Subject: CN=EA7BF3EE206D72433EED7B925366FA5EA7939AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:80:67:3b:64:2d:f6:15:06:04:9e:01:41:
                    e1:fe:ad:93:86:fc:f6:51:f6:88:2a:9e:f5:44:8b:
                    7e:12:2c:66:6b:2f:a8:b7:7b:13:f4:5a:1f:c3:11:
                    63:2f:5d:97:bf:c8:39:54:1d:19:4b:b7:83:79:f9:
                    38:6f:89:ae:b0:64:95:cf:c4:cd:a4:3e:a2:b5:d4:
                    95:03:1d:f7:6c:a8:43:a2:76:e1:42:99:0a:11:d3:
                    52:a0:dc:15:86:70:7a:ac:9d:36:43:a2:8b:6f:81:
                    8e:ca:e1:6d:13:09:17:11:73:d3:a4:a6:c9:60:c5:
                    0c:66:c8:b3:dc:d1:0f:0c:43:28:a3:c8:b4:20:cc:
                    0e:cc:07:e1:99:71:7a:b3:08:01:03:e5:c1:70:a5:
                    8a:42:c0:e9:a3:0a:b9:ff:92:33:e3:0f:a4:e0:d9:
                    67:53:30:65:e3:99:91:3a:e9:02:1f:0e:82:e0:d0:
                    30:c5:fe:b7:8e:56:25:27:0d:ff:d4:77:75:7c:44:
                    7c:4f:f6:f6:c0:a0:71:a5:67:50:3d:7b:ac:3a:b4:
                    3c:32:82:11:01:9f:c0:f7:6c:bc:a5:96:ac:7a:d9:
                    ee:7e:d4:13:9b:80:21:d7:c8:23:9c:0a:5d:43:ab:
                    2d:f5:f8:96:81:02:f1:4f:9e:49:59:73:2d:38:6e:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7B:F3:EE:20:6D:72:43:3E:ED:7B:92:53:66:FA:5E:A7:93:9A:F7
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:06:da:27:5d:7f:77:3d:69:d3:41:7d:0d:55:35:dc:e3:07:
         64:b3:c7:6b:e7:99:b2:5a:9c:ca:13:74:3d:80:0f:48:34:25:
         5d:f4:3e:19:aa:54:7d:9b:b3:69:5e:53:57:66:be:cf:1d:bc:
         03:ad:85:17:81:be:45:0a:dc:df:5f:14:6d:54:c8:38:5b:d6:
         14:2b:79:51:a3:8d:8a:f3:f5:f4:2e:30:f5:69:42:55:cf:72:
         b9:c0:87:3e:d0:8e:b7:a3:b0:af:d4:23:02:0e:13:87:34:23:
         93:3f:0b:e2:69:ca:52:09:64:a4:e3:7c:c9:4a:fe:f2:03:2c:
         14:5b:bf:99:7d:45:61:e3:75:bc:79:04:87:1c:ae:7e:d2:29:
         ce:80:14:a2:b2:ba:27:2d:29:89:12:93:cf:af:33:8d:3f:19:
         c8:1c:62:67:e0:18:71:88:5d:5f:41:62:1e:aa:ea:0a:79:45:
         bc:09:ce:8a:39:9f:f5:e6:4f:c6:79:53:e1:76:f4:f5:80:3b:
         44:70:ce:d9:37:31:8b:a4:a5:c5:83:05:3b:c1:70:ea:ee:6d:
         d6:1c:4c:b9:1a:58:c5:fb:3a:e1:70:24:ab:95:44:b3:59:1d:
         2a:30:7e:3e:d0:d2:79:42:16:b0:19:5e:15:1c:33:7f:0d:b8:
         ce:38:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:20 2026 by rpki-client