Manifest

$ rpki-client -vvvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          JAVwpk56iLi1Y/ju7pm8f/W6LnwKwWqcdHjqYpEL2LI=
Subject key identifier:   82:06:89:DE:EE:8C:93:6C:2C:FD:A9:A4:0F:C1:EA:54:5C:46:26:5E
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       2A7148768E373E5FF827E9B47BEAE901590FAD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          0319
Signing time:             Thu 24 Sep 2026 13:24:44 +0000
Manifest this update:     Thu 24 Sep 2026 13:19:44 +0000
Manifest next update:     Fri 25 Sep 2026 17:06:44 +0000
Files and hashes:         1: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: 7RjbUxLs/mQtWa04NxXYf1nRmbu7t0lcDOaTU/8cRAk=)
                          2: AS47778.asa (hash: GbysVX722g1N5R0RyN2HAwYr+RRUlTeSZGz8UNCYDjI=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:71:48:76:8e:37:3e:5f:f8:27:e9:b4:7b:ea:e9:01:59:0f:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Sep 24 13:19:44 2026 GMT
            Not After : Sep 25 17:06:44 2026 GMT
        Subject: CN=820689DEEE8C936C2CFDA9A40FC1EA545C46265E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:97:23:a6:a3:a6:5d:33:7f:7c:65:24:20:
                    d8:bd:79:4f:a0:aa:58:dc:7a:9a:c7:30:ca:55:e8:
                    24:8b:a0:7f:7e:d9:16:5a:03:05:e1:cc:7b:53:d0:
                    73:f0:0b:74:a7:49:aa:66:63:7a:93:dc:02:d4:eb:
                    31:d4:75:54:74:00:ad:b3:d8:19:73:1a:7f:13:8b:
                    6a:7f:ee:30:85:ad:ed:0e:e5:f5:b8:59:1a:dc:07:
                    ff:6c:e0:5b:35:d8:46:65:0e:2b:98:b4:e2:af:85:
                    1a:6c:54:56:08:da:8a:a4:4e:10:33:f8:28:bf:a7:
                    a8:ab:20:b6:a1:75:49:6a:cb:26:f4:f4:e6:06:30:
                    6a:94:5b:fd:90:fc:f3:fc:82:ed:c1:44:e9:1c:77:
                    40:62:80:94:ef:a1:9a:70:9a:f3:22:5f:6f:ae:b1:
                    c4:2e:a9:15:13:c3:9c:bc:78:e6:8e:42:08:2a:a1:
                    9f:90:46:c8:7e:80:93:a2:9a:0b:ef:62:44:b6:27:
                    f6:27:2c:19:d0:2a:b9:17:db:7d:44:ce:4b:bb:a2:
                    ff:82:0c:98:55:d5:18:a7:11:e6:77:e0:a1:32:f9:
                    75:21:41:f5:0b:0c:d1:79:25:75:4d:b3:c8:eb:78:
                    87:59:10:4c:8a:f2:73:92:b0:77:01:d1:45:7a:61:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:89:DE:EE:8C:93:6C:2C:FD:A9:A4:0F:C1:EA:54:5C:46:26:5E
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:98:13:3f:ed:30:8d:06:d6:9f:de:25:a1:bc:15:d1:f8:
         c4:34:7c:7e:bd:9c:e4:c3:6b:76:7d:40:2c:40:73:82:c8:35:
         ee:a8:00:72:1e:6e:93:f0:c0:93:fa:7a:5f:be:ea:9b:33:86:
         a2:f7:11:1d:8f:21:85:59:2a:fd:10:46:8c:52:c7:15:c6:d7:
         f7:0a:a8:ab:78:b7:b4:68:fd:cf:83:47:52:ea:34:64:47:3b:
         47:e5:aa:ab:2d:0f:a3:72:e1:0b:89:53:37:44:ab:56:22:cb:
         e4:63:ce:85:42:dc:2a:26:7c:66:d6:2a:48:f7:b5:90:43:92:
         60:40:9f:21:54:df:81:09:67:41:88:d1:26:b3:ca:c1:3f:ae:
         7a:a9:bf:3e:29:fa:47:39:72:85:c9:55:e0:e2:e0:d7:74:92:
         6b:15:62:49:9c:6d:84:79:aa:bf:89:7c:28:43:48:57:25:08:
         26:e1:62:ed:50:d2:ef:8c:ae:cf:e4:6c:a9:e5:bf:9a:2e:8f:
         1e:c5:81:49:6e:36:65:74:8a:9b:6b:98:c6:76:fd:7b:e7:83:
         32:4e:69:4d:6b:82:8b:33:f5:55:ea:66:66:53:12:89:e8:e5:
         63:15:92:b3:61:b6:e5:cc:fc:d7:2c:82:c0:b6:37:37:e4:b5:
         7f:54:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:36 2026 by rpki-client