Manifest

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          UrsmOOfzU8l9107b3+Leg9mrG5bYL1zFYhQJmPpQq4E=
Subject key identifier:   61:9A:5A:03:76:10:CF:34:FC:82:E9:BA:4B:F3:CF:E7:6F:F0:E4:2D
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       22FE4F3A80A31B8CA8CB617699F49F9956714597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          08A7
Signing time:             Fri 25 Sep 2026 18:00:02 +0000
Manifest this update:     Fri 25 Sep 2026 17:55:02 +0000
Manifest next update:     Sat 26 Sep 2026 21:56:02 +0000
Files and hashes:         1: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: CNLWImBA13IUGXlsw/DM1T9N7SvTimTOzrv1l1ByiTA=)
                          2: AS52025.asa (hash: OI2kY0XPpPvO7i1Va7hJSXXdFf121QOV1luG70fJFGE=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fe:4f:3a:80:a3:1b:8c:a8:cb:61:76:99:f4:9f:99:56:71:45:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Sep 25 17:55:02 2026 GMT
            Not After : Sep 26 21:56:02 2026 GMT
        Subject: CN=619A5A037610CF34FC82E9BA4BF3CFE76FF0E42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:7d:7a:ec:0e:c6:48:b0:c2:37:89:6c:f0:
                    47:89:76:99:04:af:97:28:36:0e:6c:55:2a:5a:6a:
                    75:1f:50:1c:9d:3f:85:d9:45:68:9e:1a:e3:30:7a:
                    17:27:20:2d:ed:57:b5:80:5f:a9:9b:2f:81:b8:0f:
                    dd:4f:53:c7:16:66:7f:2f:42:d9:a8:e0:0f:9f:fe:
                    d5:d2:bc:b1:da:d1:53:d4:16:bb:fb:47:1a:d5:a8:
                    8b:05:c5:aa:0f:12:81:43:c6:cc:10:74:6e:74:9a:
                    66:b0:13:23:dd:11:8a:41:dd:bf:a3:d4:de:90:4d:
                    3a:3e:55:0d:9f:a8:f0:88:09:2d:2a:9a:6f:b8:2f:
                    06:97:eb:1d:ce:eb:dc:3e:6b:fe:f5:a2:17:eb:bd:
                    79:5c:ea:d6:ef:f8:cd:33:38:8f:86:3f:9f:2f:28:
                    4d:7d:1a:5e:37:7b:7e:34:ed:13:23:d4:eb:9b:56:
                    b6:39:5a:bd:07:19:30:a7:6a:13:f4:1b:54:52:ed:
                    3d:64:96:88:b1:d3:86:09:53:95:ec:d4:29:cb:5b:
                    eb:32:e7:fe:56:8d:21:f8:27:7b:15:d8:c7:79:f5:
                    bf:2f:25:f1:e3:ec:83:af:32:fb:b9:af:67:73:5d:
                    db:7f:ba:f7:13:68:d6:37:f1:7c:bd:47:18:fc:ca:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9A:5A:03:76:10:CF:34:FC:82:E9:BA:4B:F3:CF:E7:6F:F0:E4:2D
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:bb:6a:cf:eb:fb:c1:a4:69:e7:cf:ce:4d:c9:97:00:2f:
         6c:28:a9:32:af:23:bf:f5:bf:80:3f:b7:40:9b:0b:c4:14:91:
         a1:9d:81:13:6c:bb:61:39:d7:ac:85:7d:c1:56:b3:49:ab:79:
         44:e8:16:ff:6f:98:fc:47:65:6c:d9:c2:dc:6b:ff:c9:77:f6:
         17:fa:e9:a9:c2:2b:11:45:f3:36:1e:02:ec:49:73:a8:7a:5a:
         b0:5b:97:03:88:33:d4:36:c7:c2:ae:75:16:cc:12:43:0d:5b:
         50:28:74:03:9c:bd:2a:78:ca:02:a6:29:07:be:2b:a2:c8:76:
         c0:ad:3c:ae:b8:1d:b1:f3:ad:f5:c0:1d:d8:fd:b1:a4:c2:79:
         69:d5:b3:30:ad:f8:a8:3d:90:cf:9a:94:85:44:7f:95:b8:55:
         82:cf:9e:ef:de:9a:52:a1:df:d7:1a:0b:12:ef:f2:7a:b8:a2:
         27:90:5f:1e:ca:fa:fc:2d:6d:dc:28:96:54:f1:c7:be:43:0f:
         2a:e1:ba:bb:0e:00:8e:e9:9a:0f:e4:67:61:fa:f0:be:8f:c4:
         d5:81:e9:e7:39:27:54:26:af:63:68:a1:93:15:32:45:39:8b:
         15:72:ce:83:92:0f:f2:e9:8d:16:58:50:1d:74:c6:b7:6e:9f:
         5c:84:bd:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUIv5POoCjG4yoy2F2mfSfmVZxRZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3
MTI0MmFjYzAeFw0yNjA5MjUxNzU1MDJaFw0yNjA5MjYyMTU2MDJaMDMxMTAvBgNV
BAMTKDYxOUE1QTAzNzYxMENGMzRGQzgyRTlCQTRCRjNDRkU3NkZGMEU0MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbY3167A7GSLDCN4ls8EeJdpkE
r5coNg5sVSpaanUfUBydP4XZRWieGuMwehcnIC3tV7WAX6mbL4G4D91PU8cWZn8v
Qtmo4A+f/tXSvLHa0VPUFrv7RxrVqIsFxaoPEoFDxswQdG50mmawEyPdEYpB3b+j
1N6QTTo+VQ2fqPCICS0qmm+4LwaX6x3O69w+a/71ohfrvXlc6tbv+M0zOI+GP58v
KE19Gl43e3407RMj1OubVrY5Wr0HGTCnahP0G1RS7T1kloix04YJU5Xs1CnLW+sy
5/5WjSH4J3sV2Md59b8vJfHj7IOvMvu5r2dzXdt/uvcTaNY38Xy9Rxj8ykKrAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUYZpaA3YQzzT8gum6S/PP52/w5C0wHwYDVR0j
BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx
MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC
VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz
eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w
QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg+K7as/r+8GkaefPzk3JlwAvbCipMq8jv/W/gD+3QJsLxBSRoZ2BE2y7YTnX
rIV9wVazSat5ROgW/2+Y/EdlbNnC3Gv/yXf2F/rpqcIrEUXzNh4C7ElzqHpasFuX
A4gz1DbHwq51FswSQw1bUCh0A5y9KnjKAqYpB74rosh2wK08rrgdsfOt9cAd2P2x
pMJ5adWzMK34qD2Qz5qUhUR/lbhVgs+e796aUqHf1xoLEu/yeriiJ5BfHsr6/C1t
3CiWVPHHvkMPKuG6uw4AjumaD+RnYfrwvo/E1YHp5zknVCavY2ihkxUyRTmLFXLO
g5IP8umNFlhQHXTGt26fXIS9ZQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:51 2026 by rpki-client