Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
File:                     EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft (raw, json)
Hash identifier:          s2r9hfKzUsmt8NHio/FboVT9XSSpYCZHE4VmYmZpRMs=
Subject key identifier:   4F:60:83:97:03:B4:4B:9C:91:1C:EA:A3:AD:27:B5:A9:3D:F0:1B:68
Authority key identifier: EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56
Certificate issuer:       /CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56
Certificate serial:       76F0034CBE252BE397693497986E366BD045562C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
Manifest number:          05
Signing time:             Tue 21 Oct 2025 01:16:41 +0000
Manifest this update:     Tue 21 Oct 2025 01:11:41 +0000
Manifest next update:     Wed 22 Oct 2025 04:06:41 +0000
Files and hashes:         1: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl (hash: pNng0oPJytCRjzE3Rx7B+pBmPXEME1F94JxHTCP7BEc=)
                          2: AS210464.asa (hash: bG+khhh1boBg4Hx41nPcaTNcbU2rax3TsK+5Yr2Zny4=)
                          3: AS214976.asa (hash: YHABTuzlbO4T82WDdGRIeo12XIwcp/xmEuN99D69NCg=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 04:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f0:03:4c:be:25:2b:e3:97:69:34:97:98:6e:36:6b:d0:45:56:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56
        Validity
            Not Before: Oct 21 01:11:41 2025 GMT
            Not After : Oct 22 04:06:41 2025 GMT
        Subject: CN=4F60839703B44B9C911CEAA3AD27B5A93DF01B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:fd:d0:e0:d7:c1:8c:b3:0a:b3:5d:95:e3:
                    9e:41:59:da:b3:68:07:6e:28:07:e6:69:0b:7b:95:
                    5b:55:03:35:90:bb:bc:b0:01:05:24:51:00:03:ad:
                    c7:0f:05:cd:7f:3a:1a:d0:e8:63:03:4b:fe:be:1d:
                    01:be:de:da:5b:b5:f3:c2:30:22:e6:50:08:a2:1e:
                    6b:ab:3a:1a:64:f7:01:22:0f:c9:25:e7:4e:8e:9c:
                    42:a6:e5:3a:8b:fb:2e:b9:f7:9d:c5:29:ee:53:f0:
                    c1:da:99:c1:bf:74:e5:00:4d:df:c0:41:a7:7d:68:
                    f8:f8:8e:77:a0:ab:d6:8d:66:bb:e8:a2:ec:78:28:
                    ef:8c:1c:49:9a:81:c3:93:da:cb:51:e9:37:9d:2e:
                    fb:e4:f2:be:77:73:66:33:f6:86:d9:1c:fc:c5:47:
                    db:d3:1c:ea:c7:d5:30:b5:61:e0:6e:e0:da:18:bc:
                    47:dc:ea:ff:a1:11:7e:f7:94:80:4a:51:9e:c6:23:
                    93:ac:c5:de:87:51:66:fd:3b:be:5b:f9:07:62:88:
                    7a:b0:45:45:e0:7f:f9:a1:71:04:ba:e8:d6:e6:93:
                    fc:0f:79:65:ec:ba:07:31:a2:d4:40:3f:e9:3d:2d:
                    e0:08:a2:be:64:e4:60:b8:88:40:3b:1c:6d:25:67:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:60:83:97:03:B4:4B:9C:91:1C:EA:A3:AD:27:B5:A9:3D:F0:1B:68
            X509v3 Authority Key Identifier:
                keyid:EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:89:c8:73:b2:ba:d1:9b:36:ee:0a:2c:79:a2:fc:d0:d1:20:
         fc:59:14:ea:cb:d0:c9:af:55:79:8c:e3:07:15:65:0b:89:58:
         5e:13:e4:0d:a5:63:be:36:52:42:e0:7a:ab:6f:a4:61:76:a8:
         a3:34:39:5d:95:e1:c7:ff:18:40:37:48:95:57:88:2a:65:d5:
         74:14:7f:99:94:47:a6:2d:d1:36:f0:46:87:75:f4:67:41:f5:
         a3:91:eb:8f:a6:fe:71:63:67:5c:ee:bc:43:78:c7:56:34:f1:
         ec:e9:20:e4:cf:ef:04:52:f7:27:99:81:ff:76:c2:ea:90:37:
         74:18:47:2d:0e:6a:ee:8a:b3:a9:2a:d8:68:da:b3:30:56:26:
         b7:05:2a:4b:72:89:64:c4:f0:19:85:0e:21:8e:85:f8:53:34:
         e6:04:c2:03:39:8e:c9:7e:6a:5e:cf:09:69:6f:70:af:b0:52:
         a2:2d:b5:66:eb:97:48:d9:55:93:8c:11:22:43:95:12:e5:1f:
         90:29:20:e1:d7:aa:e0:63:aa:ca:91:a6:50:f7:f4:ae:b9:b5:
         d0:0a:e9:53:9a:77:73:74:c2:1a:0c:19:9d:14:d6:04:10:1d:
         3d:40:ad:74:74:d9:ff:02:5e:a4:7d:d2:c2:0b:11:ed:0d:77:
         87:6e:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:48:14 2025 by rpki-client