Manifest

$ rpki-client -vvvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          CSYLbxfaFUZifq6M4NVj10wq396cM9o+mnQLln/+xJY=
Subject key identifier:   59:57:B4:DD:23:46:F2:D1:C4:0E:04:B5:64:36:43:F2:A3:70:31:23
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       5073930E12D21EF8387F5546E41CB7D76A6E14DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          0361
Signing time:             Sun 15 Nov 2026 09:57:20 +0000
Manifest this update:     Sun 15 Nov 2026 09:52:20 +0000
Manifest next update:     Mon 16 Nov 2026 10:10:20 +0000
Files and hashes:         1: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: x4vFptQgvMz2VHhDLml93LyGVUdkspI6hrqgeMM8Tfk=)
                          2: AS47778.asa (hash: GbysVX722g1N5R0RyN2HAwYr+RRUlTeSZGz8UNCYDjI=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:73:93:0e:12:d2:1e:f8:38:7f:55:46:e4:1c:b7:d7:6a:6e:14:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Nov 15 09:52:20 2026 GMT
            Not After : Nov 16 10:10:20 2026 GMT
        Subject: CN=5957B4DD2346F2D1C40E04B5643643F2A3703123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:56:a8:e4:09:ef:39:dd:c7:86:bd:a1:50:
                    2e:b5:f9:f5:3e:ce:5f:84:f8:31:c4:f1:c8:7b:9d:
                    2e:96:de:4a:ff:7f:b6:68:fe:51:51:ff:dd:0d:81:
                    32:25:81:13:9f:a5:5f:82:46:b9:9f:90:d3:52:0b:
                    47:0a:d4:d6:30:d0:35:dc:5e:3e:2a:06:f7:cd:f3:
                    69:92:06:d3:38:a2:d3:5e:3a:dc:ff:66:e3:86:3a:
                    f0:1e:83:18:3c:c3:21:b8:0c:de:7a:59:e7:56:f1:
                    9c:7a:5c:52:81:7d:66:31:71:b6:47:4f:63:c0:38:
                    a8:93:df:bf:06:42:38:ad:f1:36:fb:cf:9b:39:52:
                    30:03:19:73:1a:5b:c0:de:74:f2:e4:4e:76:43:ce:
                    b2:8c:53:3a:4d:a1:43:7d:d9:c3:75:61:b6:a5:f9:
                    6f:16:43:72:31:51:0f:ec:b7:e4:8a:9c:67:54:1b:
                    8c:b4:15:2f:ac:27:a5:ab:90:ef:a8:d3:07:af:93:
                    21:d0:4e:f8:58:94:72:c1:c8:b1:77:ea:d1:9d:c9:
                    de:eb:76:db:34:22:b9:dd:31:f5:66:f2:70:ab:25:
                    08:29:17:02:d0:c7:e0:c6:44:be:ca:ae:aa:bf:61:
                    86:7a:be:72:69:6e:60:a3:07:1a:b2:90:95:93:8a:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:57:B4:DD:23:46:F2:D1:C4:0E:04:B5:64:36:43:F2:A3:70:31:23
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:bf:0a:9a:f9:58:13:3b:27:a9:a1:61:89:8b:77:86:4a:
         b3:11:f0:61:35:7a:69:72:7b:28:bf:18:96:a9:14:b1:b5:66:
         a1:ce:79:92:93:f4:71:00:3a:ca:9b:6d:94:1c:e9:32:d1:e6:
         66:85:7d:7f:27:01:07:5f:ae:9b:ce:a6:69:cf:3a:54:2c:a3:
         b1:c8:99:6b:01:93:69:40:1b:93:c4:bf:de:1d:f3:d0:42:28:
         25:55:6c:9c:24:42:e0:7a:04:df:2e:f8:e8:d7:53:fa:b4:fa:
         dd:c9:8b:b0:4b:88:97:5a:8b:2f:b4:d1:2d:c2:76:b1:13:01:
         d4:b4:35:03:79:a1:19:9c:6d:d5:29:c3:fb:26:13:cd:b4:3d:
         49:6c:e6:f9:ab:f3:29:8d:8b:fc:d9:d3:4d:78:91:ce:ff:1e:
         dc:b8:de:39:b4:53:61:cf:d1:4b:4d:a1:37:dc:65:87:49:ca:
         06:2f:0b:fc:de:8f:9c:34:4e:17:33:8a:97:4e:86:ca:d1:15:
         65:fd:52:49:21:0a:63:87:b0:d8:a2:3b:ad:48:7a:7e:b8:42:
         8f:33:2b:40:96:d4:bf:df:60:fd:55:3a:e5:b0:a1:71:fc:d5:
         ab:39:75:02:d5:78:28:d9:46:bf:11:cd:7f:3c:b8:16:ef:3c:
         d1:10:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:08:16 2026 by rpki-client