Manifest

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
File:                     699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft (raw, json)
Hash identifier:          6lUJw89hG6IMVcbTebJF9kETVcmcwpDUGLiRtwXHmZo=
Subject key identifier:   8B:2E:FA:A9:EB:8F:83:7F:4F:11:D2:99:23:C8:FB:0D:A2:F3:D8:50
Authority key identifier: 69:98:86:F0:94:04:2E:E6:B1:FE:8D:37:FE:D9:E3:AA:49:A2:A5:E5
Certificate issuer:       /CN=699886f094042ee6b1fe8d37fed9e3aa49a2a5e5
Certificate serial:       584F5BE208751F9085F36B8A1C1FB02FBFECAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
Manifest number:          0119
Signing time:             Wed 25 Mar 2026 21:21:54 +0000
Manifest this update:     Wed 25 Mar 2026 21:16:54 +0000
Manifest next update:     Thu 26 Mar 2026 21:33:54 +0000
Files and hashes:         1: 699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.crl (hash: jtAMCpEIg7kwwAkR/BCd66UYII8mtTrEd8L0Qt429MY=)
                          2: AS198025.asa (hash: 7bfOiiPwBpJtf4YTG78v4mgY3ouSvmoLOxXappQdQ2w=)
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4f:5b:e2:08:75:1f:90:85:f3:6b:8a:1c:1f:b0:2f:bf:ec:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699886f094042ee6b1fe8d37fed9e3aa49a2a5e5
        Validity
            Not Before: Mar 25 21:16:54 2026 GMT
            Not After : Mar 26 21:33:54 2026 GMT
        Subject: CN=8B2EFAA9EB8F837F4F11D29923C8FB0DA2F3D850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:10:3a:bd:e8:15:26:a1:36:41:b4:64:62:
                    21:b1:6b:15:84:19:a6:2f:9c:87:03:35:c2:f8:04:
                    c7:42:ee:16:67:de:65:e1:28:bb:f3:9d:76:14:f4:
                    7a:06:05:d9:d2:5c:2e:79:9c:f1:de:45:65:8f:a8:
                    99:a8:cf:9c:10:7c:fd:ad:71:8f:3a:3e:25:c1:21:
                    a0:7b:5a:b8:09:8c:43:76:4d:89:1c:fa:5b:e8:f1:
                    ab:b8:17:64:f5:b9:84:4a:83:e3:ef:04:9c:1a:4c:
                    88:d2:be:c3:79:52:b5:51:d7:d8:c7:68:a9:12:db:
                    54:17:7b:31:5e:3e:5c:68:32:7d:cc:38:c7:fb:fb:
                    52:a4:b4:0e:19:49:65:76:d5:68:a9:99:84:a0:91:
                    e8:1f:da:e1:eb:db:09:f8:67:e0:ca:4a:17:6d:37:
                    30:a9:dd:b8:52:de:9c:22:da:2f:fb:0d:61:0a:43:
                    50:47:ec:57:49:26:12:2e:74:f4:46:c1:e3:85:11:
                    dd:25:74:5a:85:a9:59:48:23:88:6e:24:7e:91:9e:
                    19:44:07:59:41:8d:2d:62:8c:57:19:b7:a1:87:da:
                    fc:72:af:52:da:54:ee:1a:24:95:49:cb:1e:93:12:
                    66:b5:0d:9d:5c:9a:e5:fe:d0:30:8d:ba:df:a5:f2:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:FA:A9:EB:8F:83:7F:4F:11:D2:99:23:C8:FB:0D:A2:F3:D8:50
            X509v3 Authority Key Identifier:
                keyid:69:98:86:F0:94:04:2E:E6:B1:FE:8D:37:FE:D9:E3:AA:49:A2:A5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:82:1a:48:de:3e:5c:7a:5f:9d:82:d0:bf:dd:4e:4b:4f:
         ba:86:48:69:e2:ec:ee:6a:2d:a1:9f:bc:7e:aa:6a:22:b6:e4:
         3c:00:74:1d:35:29:45:53:0f:5c:3f:79:57:18:7b:cb:46:a5:
         53:c6:4c:69:cb:17:05:29:5c:98:b2:c0:8d:74:8d:b4:06:9e:
         e8:c1:0c:c2:81:fc:22:88:8a:60:8d:44:89:ec:8c:27:4a:e7:
         71:58:85:1c:6f:80:fa:79:8c:65:3b:ef:61:cc:33:3f:1a:2d:
         14:da:ad:b5:f4:59:e9:5c:a3:8e:e4:d7:b8:15:1f:bc:b2:95:
         90:6e:80:c5:f7:a7:fe:d9:d6:93:7b:b0:6b:5b:c7:61:ae:03:
         a0:44:58:52:41:88:36:6f:ac:21:68:e4:bf:07:5d:53:5a:42:
         d2:1b:c2:7c:af:7e:6b:3c:2b:46:4b:80:3d:b8:03:bd:11:4d:
         63:eb:11:81:53:2d:25:3c:6b:d8:8b:5f:df:fb:53:ea:04:20:
         47:2a:2f:19:e4:a6:e6:f0:f7:7c:e7:da:00:e0:a6:a2:31:b2:
         af:3d:54:15:48:a9:77:5d:0b:02:e3:de:6d:2b:90:c5:25:86:
         4e:00:31:6f:73:67:55:ac:05:3f:e7:ec:02:99:37:be:4a:ac:
         96:e1:84:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:33:44 2026 by rpki-client