Manifest

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
File:                     F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft (raw, json)
Hash identifier:          QVX/u/gbumP9OXyUtimUrObQ+nAs6Sr3/Kd8ryAKokY=
Subject key identifier:   D2:B0:5F:A6:14:0C:B2:10:D2:6C:8B:24:75:45:0C:C4:35:92:CD:7B
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       72B60093CFCFB3F0AB8D8C1A232CDA7DC2F8598B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
Manifest number:          4A
Signing time:             Sun 19 Oct 2025 16:38:01 +0000
Manifest this update:     Sun 19 Oct 2025 16:33:01 +0000
Manifest next update:     Mon 20 Oct 2025 16:46:01 +0000
Files and hashes:         1: F43B66D2018EF2CDC4298697BF28C89F11886124.cer (hash: Ru1hUedlvyt2m6poO2SxbK8zbfP9khsqPkMqZP22yRs=)
                          2: 326131343a373538303a3735303a3a2f34372d3438203d3e20313534313835.roa (hash: 8K7okE0w6Q9taHg8ohlFBtT6L7BNRj3tU/Xf8wbcLyM=)
                          3: 326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (hash: 6fb57Veu0xfGp/lsDPbJbrrMMIerNBULiahv14AoClk=)
                          4: 326131343a373538303a3735383a3a2f34382d3438203d3e20313938303235.roa (hash: BCFcbpjZg71e9zdCwHg0cw77lRP3j0Uf/hBWuVszu10=)
                          5: F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl (hash: QaoLtFgJMb+ywKCQ1ZBEpR3TSoPx2vg2qx8ru/h4Jaw=)
                          6: 326131343a373538303a3731303a3a2f34342d3438203d3e20313938303235.roa (hash: 5JlRlkv1JvfMUjpWRK+R5SwdaUXACDFLb3NMqfLOO9I=)
                          7: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer (hash: A9l0m1+ri8GXZZVOs1LWnawV707jNn77TC+kU9kiXP8=)
                          8: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (hash: XcTN7EZNbD4mrI90MMncgWZDMze4HuL/sckFXEE2qWo=)
                          9: 326131343a373538303a3732663a3a2f34382d3438203d3e20313534313535.roa (hash: 7juc3ctko4lhMiIlIgbxqGbgiXagd8PB32Jby/jGs3o=)
                          10: 326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (hash: 3s9yOhfor+/2+DoiB4wZMRTY5CEsrzaFRiVfzDJFmag=)
                          11: 326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa (hash: YLqop/WOuAN60nAYpEpMSeBo3PMtjuqeni1FzwnlcqE=)
                          12: 326131343a373538303a3734303a3a2f34342d3434203d3e20313337393038.roa (hash: uy0GVuUN4sutojBoV4GAxdmgTNpURKmfTL7Xr86xhrg=)
                          13: 326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa (hash: v7tYrBh9RxsZvBc7m0GxV1MdZxGgG2JNUp+3vYrTBHQ=)
                          14: 326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa (hash: XbuvTOUP0Wv9mNQYIz2JQJ/TCYzVFVaT139y/rfKWXQ=)
                          15: 326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa (hash: sSL0VU16xArt9OmoVrCdfMg+348//+wOGHLbIsC6bAs=)
                          16: 326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa (hash: qzul46YAnC0dhe1Mr0VkNNr8LTd0RQOHaKUfiXALF6U=)
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b6:00:93:cf:cf:b3:f0:ab:8d:8c:1a:23:2c:da:7d:c2:f8:59:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Oct 19 16:33:01 2025 GMT
            Not After : Oct 20 16:46:01 2025 GMT
        Subject: CN=D2B05FA6140CB210D26C8B2475450CC43592CD7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:55:43:60:02:26:59:51:d6:da:c6:b4:c3:
                    49:f0:73:2a:25:0a:4c:f1:f0:5c:d8:57:66:57:6a:
                    a3:4c:f7:85:0c:5c:1f:c3:4c:16:ff:ea:2f:2f:a2:
                    a3:ac:17:28:ea:8d:35:42:8e:d7:b5:1a:64:df:a2:
                    3d:09:33:93:57:ae:0e:2a:6c:02:7c:f1:17:db:0e:
                    c5:44:6b:dd:c3:84:ca:50:5f:d9:99:6a:d1:7b:b0:
                    a1:a8:c7:54:60:b4:70:74:7f:4e:50:38:92:fb:45:
                    39:32:c0:5f:e1:78:b8:03:ba:92:49:09:13:64:d9:
                    a4:ce:39:21:85:25:df:e8:2a:df:94:97:9d:b9:fd:
                    90:88:ec:d7:b4:c5:67:17:a0:30:3e:c2:bd:a8:8a:
                    2e:3a:e3:f5:60:34:58:28:cc:d9:6f:14:8c:1a:9d:
                    09:3e:d7:c7:3d:ea:bb:ec:03:7f:d3:0e:1e:ef:ef:
                    1e:dc:13:cd:55:83:53:27:39:39:9a:8e:85:2b:62:
                    aa:70:e5:e5:44:b6:d9:6d:fe:ed:29:1b:d3:ce:99:
                    31:7a:e9:a8:8b:e4:26:5c:26:e2:02:4d:53:f7:26:
                    64:ad:8f:5c:99:45:27:cf:b5:fc:80:19:63:ff:95:
                    10:6a:ff:6d:4e:61:15:5d:42:de:59:55:aa:9a:bf:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:5F:A6:14:0C:B2:10:D2:6C:8B:24:75:45:0C:C4:35:92:CD:7B
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:26:d6:14:c7:8e:92:7e:8c:60:bd:96:9b:f3:cb:9e:a5:
         85:4c:5e:c3:61:21:41:20:7a:a1:24:5f:2a:78:f6:7d:95:33:
         08:ea:05:e4:6a:18:0f:f3:01:82:90:22:e6:28:17:57:eb:ec:
         9e:c1:ec:7b:d0:6c:ad:96:ef:fb:79:d6:e0:c6:bc:15:54:37:
         45:d5:bd:b4:75:ea:2a:d4:79:20:62:2a:a3:f0:09:4d:74:e8:
         2f:67:2e:45:78:aa:68:8a:a2:45:bc:3a:97:45:70:1c:6a:0c:
         be:ed:a2:e6:20:f9:0c:17:3c:ba:bf:30:6c:1e:5a:5f:13:99:
         ed:4f:26:46:07:46:2e:4a:df:96:1f:26:db:ad:7f:ed:1f:c3:
         59:0a:4f:77:9c:40:11:e7:c9:ce:69:2a:80:e5:48:98:ad:ef:
         5d:9b:c0:f8:50:d3:39:40:15:ef:87:80:5d:e3:0a:5d:17:ce:
         d2:6d:25:1a:b7:96:d4:a9:c7:7d:8c:53:4a:a1:c4:39:c5:35:
         f0:ed:df:71:51:4d:58:07:03:6b:88:c5:03:b1:4f:33:0c:fc:
         b8:54:1d:51:c5:67:1a:f9:eb:59:87:02:44:ec:91:7a:c8:ab:
         74:f3:42:df:30:2d:63:f5:b6:6a:6c:1f:c0:59:24:82:08:e8:
         f6:ed:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:54 2025 by rpki-client