Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          AEeT3SyS7Ls7Ls/dL3RsK46Jm5jVnEec4ayODszTez0=
Subject key identifier:   4C:50:BD:97:34:B3:75:A3:96:2B:E8:2D:23:49:E8:F3:C4:20:4B:1C
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       791E6BE1CFB4706E73B2081D93C5009D3BA101A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          0750
Signing time:             Tue 12 May 2026 18:00:02 +0000
Manifest this update:     Tue 12 May 2026 17:55:02 +0000
Manifest next update:     Wed 13 May 2026 19:25:02 +0000
Files and hashes:         1: AS52025.asa (hash: OajRaACDYCQWSJH3cbKXlpAfnquxEDG2vlrt8APYbV0=)
                          2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: lva8IjkSDoj25YIceSYCjUjVXXl5BUgFyMVswEpuM0Q=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1e:6b:e1:cf:b4:70:6e:73:b2:08:1d:93:c5:00:9d:3b:a1:01:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: May 12 17:55:02 2026 GMT
            Not After : May 13 19:25:02 2026 GMT
        Subject: CN=4C50BD9734B375A3962BE82D2349E8F3C4204B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:bb:16:89:da:dd:89:4c:50:64:5f:a2:d0:
                    64:d6:d4:fe:18:71:58:6a:14:40:45:0b:b8:5f:5f:
                    06:8c:b8:c4:91:37:ab:cf:90:10:b7:39:c4:c9:ec:
                    8d:25:85:5c:13:10:67:cb:82:48:5f:aa:8c:5d:df:
                    89:80:f9:6e:38:69:9a:aa:c0:2e:ac:ab:e0:fe:17:
                    59:5d:41:eb:1e:36:a7:02:2c:3b:a0:3f:d0:23:bd:
                    be:4f:d4:c2:3e:4f:9a:93:8d:9b:3f:7a:e1:8f:25:
                    34:a6:fd:b2:c4:b0:42:99:6e:ec:6c:90:ef:c3:f9:
                    a1:13:b3:42:fd:3c:42:05:8b:4b:a5:71:ce:5a:70:
                    f2:bc:82:6d:4e:68:f8:af:f0:9d:86:40:79:e1:f8:
                    8c:cf:65:df:80:2b:30:36:e3:89:bc:0a:23:e3:04:
                    65:a3:c5:30:58:e1:f8:c3:e9:b0:4c:4a:59:fa:36:
                    0c:86:8f:08:12:ad:d4:9c:01:75:81:3f:9f:64:97:
                    6d:2e:84:ff:28:11:0b:6b:a5:a4:aa:66:a0:c8:89:
                    26:9f:21:0c:96:39:5a:bc:15:05:15:7e:e9:1d:4d:
                    10:d5:a4:ac:47:8f:4d:af:29:41:55:fe:8d:71:65:
                    47:8a:fa:4d:30:3f:9b:e4:37:e9:e8:c7:10:f4:36:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:BD:97:34:B3:75:A3:96:2B:E8:2D:23:49:E8:F3:C4:20:4B:1C
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:05:98:9a:cb:20:7a:fb:bc:51:83:9a:1e:34:2b:ef:08:
         09:a8:bd:e1:3d:de:1f:cf:fd:83:b5:f5:00:64:20:d8:8f:9c:
         60:fd:5f:2b:43:24:9e:9c:e5:b5:ef:a1:a6:90:78:99:ff:8a:
         4f:3d:64:70:46:bd:e7:6d:f4:f1:e5:d0:0f:2a:28:69:6d:fe:
         cf:b3:81:54:30:6a:6a:45:2d:ca:7d:4c:35:47:ae:79:99:66:
         57:45:d8:e7:34:ba:29:b6:53:f7:b1:c1:47:ec:9b:02:be:ec:
         5a:ad:21:ba:a3:d3:38:ac:58:01:3e:09:a7:d0:90:37:87:ff:
         72:5c:af:4a:2c:35:ca:6f:d2:fe:60:f0:ef:b9:87:9c:0a:e4:
         c7:d4:b8:9a:6a:20:c9:7a:08:f8:cb:b0:e8:f9:a6:e9:2e:92:
         3a:21:27:01:81:62:6a:15:cb:00:be:47:f1:fe:4b:02:d6:67:
         9f:b8:83:e7:de:11:77:09:99:40:d1:9a:7e:e6:79:86:b2:b3:
         e7:f9:b3:2c:97:6d:e9:20:d0:f7:64:d3:b5:6d:27:75:5c:30:
         1d:31:58:f3:90:7c:f1:ec:a1:ff:79:df:d2:47:88:17:01:92:
         1f:c4:19:dd:4d:45:75:b9:3e:f5:fa:43:2c:d6:e3:ef:6f:4b:
         03:b7:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:29 2026 by rpki-client