Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/net186/1/A45B8D1632B3B93F57432533DF04BF77A47D3F5F.mft
File:                     A45B8D1632B3B93F57432533DF04BF77A47D3F5F.mft (raw, json)
Hash identifier:          YNcZdYCP1YPk+rWVnNZh0zofJxtwnUoNiv+M+g4sYhA=
Subject key identifier:   AE:4D:55:91:D3:C2:27:3B:E4:FA:96:54:58:5D:96:AF:81:D4:09:21
Authority key identifier: A4:5B:8D:16:32:B3:B9:3F:57:43:25:33:DF:04:BF:77:A4:7D:3F:5F
Certificate issuer:       /CN=a45b8d1632b3b93f57432533df04bf77a47d3f5f
Certificate serial:       20C522CAA0D409EC10C7CCEB2100BBA904E436E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFuNFjKzuT9XQyUz3wS_d6R9P18.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/net186/1/A45B8D1632B3B93F57432533DF04BF77A47D3F5F.mft
Manifest number:          0161
Signing time:             Sun 29 Mar 2026 04:00:30 +0000
Manifest this update:     Sun 29 Mar 2026 03:55:30 +0000
Manifest next update:     Mon 30 Mar 2026 06:38:30 +0000
Files and hashes:         1: A45B8D1632B3B93F57432533DF04BF77A47D3F5F.crl (hash: x7aPKmM+diyeHaYLpv9EIw1hIIH6x13s0k04pHRsaXg=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/net186/1/A45B8D1632B3B93F57432533DF04BF77A47D3F5F.crl
                          rsync://rpki.sunoaki.net/repo/net186/1/A45B8D1632B3B93F57432533DF04BF77A47D3F5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFuNFjKzuT9XQyUz3wS_d6R9P18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:22:ca:a0:d4:09:ec:10:c7:cc:eb:21:00:bb:a9:04:e4:36:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45b8d1632b3b93f57432533df04bf77a47d3f5f
        Validity
            Not Before: Mar 29 03:55:30 2026 GMT
            Not After : Mar 30 06:38:30 2026 GMT
        Subject: CN=AE4D5591D3C2273BE4FA9654585D96AF81D40921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:58:f5:81:8a:ec:09:00:9b:e8:d8:58:e9:
                    19:b4:b5:dd:11:ef:43:9d:bd:64:de:04:d9:ef:f8:
                    bf:bb:a8:62:e6:5c:1c:88:f6:7c:4c:d0:47:fa:2e:
                    6a:b7:1d:02:ef:c5:37:2a:0f:13:02:97:8f:77:c2:
                    88:5a:a3:d1:68:db:8f:d8:44:06:85:41:87:1f:f7:
                    ee:5b:06:e8:70:7c:28:2e:08:a3:c7:dd:08:b6:1e:
                    18:0e:cb:1a:fd:c8:9d:36:08:cc:95:99:4a:33:35:
                    1b:b4:cc:31:b2:86:2a:c3:7c:99:2a:a8:c4:fd:59:
                    98:9a:ec:14:34:97:30:68:67:46:10:be:f5:fa:ae:
                    9c:a4:05:7c:37:23:4f:ca:1f:a2:2a:d4:1f:58:7c:
                    65:3d:09:03:7d:8f:88:91:cf:aa:87:10:f2:db:2e:
                    4d:f1:c1:e2:eb:f7:1b:52:c9:c9:76:97:07:ca:ae:
                    a1:8d:fc:03:05:c8:4a:26:d1:73:9d:5e:e6:75:63:
                    0b:0c:cb:e2:70:30:1c:b2:5f:99:10:66:3a:5d:23:
                    41:f3:ef:b7:26:17:3e:7a:e0:10:b7:d1:ea:20:dd:
                    90:9d:cc:9d:d6:fe:9e:44:47:2a:80:8e:bc:83:bf:
                    ae:29:3d:59:2c:a3:e1:20:07:dd:50:c4:1b:d0:35:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4D:55:91:D3:C2:27:3B:E4:FA:96:54:58:5D:96:AF:81:D4:09:21
            X509v3 Authority Key Identifier:
                keyid:A4:5B:8D:16:32:B3:B9:3F:57:43:25:33:DF:04:BF:77:A4:7D:3F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/net186/1/A45B8D1632B3B93F57432533DF04BF77A47D3F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFuNFjKzuT9XQyUz3wS_d6R9P18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/net186/1/A45B8D1632B3B93F57432533DF04BF77A47D3F5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c4:ee:d4:dc:f0:57:ea:73:67:73:4a:5a:82:c3:62:a7:07:
         82:a5:c5:74:b1:60:20:2b:a9:fa:98:63:20:3e:8e:83:2a:de:
         77:4f:d0:db:5d:a9:fa:8d:ff:36:44:1f:66:b6:9a:c6:b2:5c:
         30:37:a9:51:16:5a:cc:f5:b2:8c:e7:d7:ee:0b:30:f4:fc:43:
         12:3f:21:5c:b7:90:9e:2a:d1:36:78:e6:a3:d3:fb:e5:66:06:
         98:f7:cf:01:b0:16:19:14:49:44:68:60:8d:49:59:14:b0:08:
         b3:cf:6d:8e:85:cd:f7:06:c1:91:95:5b:22:4b:92:3c:48:da:
         91:49:f8:7c:3b:d8:d5:ad:da:b0:57:61:63:b7:cb:0c:c2:d6:
         2a:fc:5c:8f:1c:0e:f4:e4:05:e0:c4:5a:36:53:72:74:8e:1e:
         61:4a:c1:51:84:04:07:22:ef:d2:6e:b4:9f:a3:54:ff:ae:35:
         16:05:a4:21:31:6c:ef:9f:31:5c:cb:1d:80:78:2b:30:ff:5e:
         27:5b:02:c8:83:aa:00:8b:b0:48:71:5a:b8:25:0e:50:47:57:
         da:e5:b2:80:ef:d4:30:0e:36:8c:aa:df:51:1a:1c:87:83:ca:
         88:7b:ee:34:2f:95:af:e7:ea:15:44:f5:4b:e5:2f:63:4a:aa:
         c0:16:91:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:57 2026 by rpki-client