Manifest

$ rpki-client -vvvf rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
File:                     23D2114BCC16D1306C46A879901900160E1AE9DD.mft (raw, json)
Hash identifier:          HlET3tdaYsuiI+GBwuQ+jbmS/Z2GKU9uLgtDJOFde/o=
Subject key identifier:   52:2B:29:54:97:31:92:90:AC:A7:C1:F0:DE:56:4D:0E:19:02:6C:DA
Authority key identifier: 23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD
Certificate issuer:       /CN=23d2114bcc16d1306c46a879901900160e1ae9dd
Certificate serial:       76EF3746B9A59F947576BF5CBFDBD9D16B7DD3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
Manifest number:          98
Signing time:             Mon 28 Sep 2026 08:19:57 +0000
Manifest this update:     Mon 28 Sep 2026 08:14:57 +0000
Manifest next update:     Tue 29 Sep 2026 08:31:57 +0000
Files and hashes:         1: 23D2114BCC16D1306C46A879901900160E1AE9DD.crl (hash: fsRiXkaFhL/oT0zdOi9gmTC7UQfuV8Ri+Lw2QWalIyI=)
                          2: AS219522.asa (hash: Vxb6VvNc3MXnBMR3Yivi4oXxzqNhAXAEGIJ2vRINBq0=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ef:37:46:b9:a5:9f:94:75:76:bf:5c:bf:db:d9:d1:6b:7d:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d2114bcc16d1306c46a879901900160e1ae9dd
        Validity
            Not Before: Sep 28 08:14:57 2026 GMT
            Not After : Sep 29 08:31:57 2026 GMT
        Subject: CN=522B295497319290ACA7C1F0DE564D0E19026CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:26:bb:89:2c:58:72:cb:6d:0b:d9:e3:25:
                    ea:6b:fe:7e:1f:66:c2:8f:82:f6:1f:c8:05:18:25:
                    ac:d7:c3:cb:1f:9b:ab:b1:59:8f:2c:4b:43:20:6e:
                    f0:75:74:03:d0:b0:9d:87:43:8a:de:6b:62:f2:e7:
                    1a:0d:39:f9:88:34:a4:0f:1a:59:e1:ed:4e:1c:b7:
                    d3:78:63:3f:c3:89:ff:86:92:af:29:16:08:8b:29:
                    2b:09:3e:ac:d4:70:c3:8a:2e:cb:e7:c0:62:07:0e:
                    e2:d5:e0:6c:f2:86:8a:57:e0:a8:fa:e5:7e:6b:e8:
                    ce:09:d8:df:48:f2:12:02:96:c0:35:d4:d3:89:36:
                    e3:73:bc:4c:33:ca:63:76:82:7e:6d:4e:9e:1b:ae:
                    2d:f3:ab:b7:21:5c:53:e1:3a:e4:e0:e4:69:e2:06:
                    54:cc:e1:74:6e:c6:d0:f7:91:00:7d:2e:76:71:ca:
                    c4:ca:12:50:0f:a5:43:f5:5b:d0:45:6e:08:95:28:
                    33:5c:d9:e5:76:1c:66:21:00:97:9b:d7:31:58:90:
                    e2:9e:5e:e8:87:0b:42:b3:1e:f9:7d:64:a4:c5:fb:
                    74:94:9f:78:4e:22:c0:27:c1:3b:0e:07:46:7e:c8:
                    9a:5e:d1:e2:b5:d8:a2:12:4a:6a:f5:50:2a:78:96:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2B:29:54:97:31:92:90:AC:A7:C1:F0:DE:56:4D:0E:19:02:6C:DA
            X509v3 Authority Key Identifier:
                keyid:23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:01:39:17:f0:22:d9:26:2e:26:f3:09:8a:3f:6d:b1:7d:ed:
         83:af:94:46:a4:56:78:bb:36:e2:fe:c8:c6:2b:93:56:96:50:
         1d:8e:e0:61:e7:6a:1a:da:7b:71:9e:2c:c3:ee:7a:00:8f:4b:
         d6:b8:99:1b:cc:ed:17:19:c2:bf:a1:b8:3c:c7:38:43:c5:63:
         76:15:48:36:32:0c:e6:f4:f1:af:6d:9e:f0:6c:5e:0d:ad:cf:
         1e:fa:59:fa:2b:c1:1d:dd:33:b9:10:e5:d1:3f:51:c6:b4:8d:
         be:d9:03:b9:f0:c3:0b:27:17:31:29:ab:cd:ad:f1:5c:48:4e:
         b1:53:dd:5a:9e:90:d9:86:aa:56:1b:16:5c:a8:e3:57:df:ba:
         4a:bd:d7:dc:ac:8e:e7:d4:3f:17:79:ac:bc:d0:34:7e:ea:c3:
         2b:57:56:9c:b1:a0:c4:44:1d:26:60:4c:98:e0:d3:61:42:fe:
         1f:83:ab:a0:8a:4b:7a:26:f1:de:41:05:18:6b:61:7e:6a:46:
         3a:99:40:9e:0e:28:70:9d:31:63:10:09:c9:eb:e4:da:83:73:
         06:b0:78:8a:e7:cb:26:50:42:a3:ee:2c:a3:2d:45:53:6e:7d:
         2c:3f:3c:72:88:0e:bc:52:23:4d:7c:75:31:d5:9a:19:87:37:
         77:03:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:30 2026 by rpki-client