Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
File:                     23D2114BCC16D1306C46A879901900160E1AE9DD.mft (raw, json)
Hash identifier:          Ll5PGP41DtHDjjq2tBuUXpvfluSGMmtA6xL0aUdu/Xg=
Subject key identifier:   D9:6C:7C:5A:54:E3:C9:AB:40:8B:78:D3:10:14:B6:DA:BB:39:57:A5
Authority key identifier: 23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD
Certificate issuer:       /CN=23d2114bcc16d1306c46a879901900160e1ae9dd
Certificate serial:       2F1566EAB5FF1774C0CACE62DDCE2F60CFF0A085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
Manifest number:          19
Signing time:             Wed 24 Jun 2026 18:14:27 +0000
Manifest this update:     Wed 24 Jun 2026 18:09:27 +0000
Manifest next update:     Thu 25 Jun 2026 20:41:27 +0000
Files and hashes:         1: AS219522.asa (hash: Vxb6VvNc3MXnBMR3Yivi4oXxzqNhAXAEGIJ2vRINBq0=)
                          2: 23D2114BCC16D1306C46A879901900160E1AE9DD.crl (hash: NENn8B5k4blMScKyW+wOtalI/f+f+5Mc6tzaCMf/bTw=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 20:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:15:66:ea:b5:ff:17:74:c0:ca:ce:62:dd:ce:2f:60:cf:f0:a0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d2114bcc16d1306c46a879901900160e1ae9dd
        Validity
            Not Before: Jun 24 18:09:27 2026 GMT
            Not After : Jun 25 20:41:27 2026 GMT
        Subject: CN=D96C7C5A54E3C9AB408B78D31014B6DABB3957A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:8d:d4:03:e9:ca:e9:b7:ce:65:1d:86:77:
                    7b:eb:d5:c2:72:c5:7c:b4:f5:d3:b8:2e:bf:88:c8:
                    77:89:ca:65:72:f2:82:26:4d:7d:51:d6:b6:f9:73:
                    e7:0e:53:f1:78:34:19:f9:f5:73:13:49:48:a1:d9:
                    e6:a8:4e:8b:65:12:38:e5:6f:f5:1b:5a:fa:e9:73:
                    23:ab:8a:2a:76:f0:58:70:60:f1:15:0d:a1:7c:a8:
                    ba:cd:e4:a6:5c:7e:24:91:f9:e8:5b:ea:9c:76:b9:
                    9c:70:a3:d1:c8:a5:87:31:d0:13:4e:d8:64:8f:5f:
                    43:85:8d:91:37:a0:20:ae:d5:cc:88:7b:09:8c:4f:
                    83:43:66:b8:77:cc:a8:46:e1:a3:0e:74:a1:a8:e5:
                    96:58:f6:ad:98:3d:b7:99:f8:e2:6b:38:94:de:f5:
                    c8:9d:50:0e:cb:be:2f:a7:6a:bb:1b:66:57:40:ec:
                    df:5c:99:66:f6:76:6e:1a:fe:97:10:ed:47:d7:06:
                    3c:a7:58:dc:45:b5:b2:e0:c9:48:4b:32:c2:4e:5c:
                    4d:31:91:f3:ca:ef:95:07:80:5e:c7:ed:c8:b5:25:
                    6b:f4:60:5f:e5:96:fb:34:15:7a:ed:98:d8:60:5d:
                    22:ba:cd:52:9c:3d:34:b8:86:8f:59:c9:86:f1:69:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6C:7C:5A:54:E3:C9:AB:40:8B:78:D3:10:14:B6:DA:BB:39:57:A5
            X509v3 Authority Key Identifier:
                keyid:23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:75:a9:a0:e3:37:1f:5f:e5:cf:34:9c:49:5c:eb:f7:69:
         ff:d3:75:17:9c:ec:08:82:1b:af:51:f4:4e:4a:e2:ba:47:e2:
         01:27:62:49:5e:1f:19:5d:c9:47:0a:07:96:c3:86:f8:89:a1:
         c2:f3:95:cf:e5:0d:21:1e:b4:dd:94:08:21:ff:9a:8b:16:44:
         94:00:a7:f3:a6:3c:1d:97:71:c3:5b:2d:d4:72:78:d2:95:b0:
         25:37:c9:a1:ee:89:78:0a:11:c5:60:b4:4c:d3:5b:fb:eb:61:
         cb:59:4f:60:6a:f0:bd:93:c4:0f:89:c2:5c:fb:a8:cc:11:4d:
         0b:69:59:f3:4f:d9:74:ed:d8:85:1e:9e:cf:20:05:86:13:42:
         cd:dc:9c:41:37:ab:3c:2d:af:9f:c2:80:3e:4f:51:93:af:2e:
         4f:30:8a:e2:82:a0:e5:72:97:0f:c9:6e:70:c3:d7:87:b7:61:
         b8:1d:7c:3d:a2:82:e2:94:63:a9:39:9c:d4:de:03:96:97:b4:
         a0:2d:b9:19:9a:82:4a:63:de:20:7f:e6:5b:ec:c6:b0:58:41:
         5c:a0:21:76:4d:10:41:50:01:dc:fe:a0:11:f0:dc:46:a0:b8:
         04:96:21:76:00:e5:34:db:f8:fc:9a:cc:7a:b2:31:9d:8f:61:
         95:ad:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:34 2026 by rpki-client