Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
File:                     66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft (raw, json)
Hash identifier:          GKD4Z+xBmRbe6D2Zm3T029qAfERveO0JiF1zD8vSnV4=
Subject key identifier:   C7:00:BB:84:E6:B4:26:EA:8D:97:F2:27:09:DE:84:67:72:EE:2E:AC
Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
Certificate issuer:       /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Certificate serial:       27B5FA9A15E020EFE025F2CA4FA5D0126370998A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
Manifest number:          30
Signing time:             Wed 25 Mar 2026 03:59:10 +0000
Manifest this update:     Wed 25 Mar 2026 03:54:10 +0000
Manifest next update:     Thu 26 Mar 2026 05:33:10 +0000
Files and hashes:         1: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (hash: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U=)
                          2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: eKfFEzgr+H6yF3j6egSuIVRG25C7FeWL17iAWbZC228=)
                          3: 66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl (hash: LDEuUIxAScxWzMmb6YIgITC/zS1kGHQf4lU5VTRO3d8=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 05:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b5:fa:9a:15:e0:20:ef:e0:25:f2:ca:4f:a5:d0:12:63:70:99:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
        Validity
            Not Before: Mar 25 03:54:10 2026 GMT
            Not After : Mar 26 05:33:10 2026 GMT
        Subject: CN=C700BB84E6B426EA8D97F22709DE846772EE2EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:1a:b9:8c:52:0b:6b:4d:5f:0f:c9:fd:e8:
                    bb:f2:1b:54:71:b8:3c:59:1c:56:0f:4b:29:0a:32:
                    8b:7e:15:e1:ed:35:89:ae:44:bd:9d:d0:6d:41:86:
                    be:06:59:a2:91:b8:e8:d7:76:8a:03:a9:6b:bc:7b:
                    72:9f:0f:81:7a:65:0c:d6:5c:36:08:cb:7f:76:84:
                    d6:b6:12:03:4f:79:5d:18:58:61:21:f3:c6:9a:61:
                    6e:25:be:3a:47:78:74:37:ea:45:fe:68:11:8b:a8:
                    7b:44:84:2b:59:b4:7e:69:fb:1e:0a:87:4a:38:cd:
                    1b:46:f9:15:ad:c8:ac:8c:ff:68:83:e1:39:fb:c6:
                    c1:e7:5c:e2:89:33:46:84:d9:97:a1:5f:03:83:7d:
                    c4:59:63:2e:69:71:2e:ff:1a:0d:a9:0d:bd:0f:96:
                    a6:77:e4:5c:db:f4:3f:a7:21:e1:c8:61:a6:36:ec:
                    1f:7c:4f:9a:f6:2d:bf:9d:17:72:ee:2d:e3:af:e5:
                    f0:6c:a5:d4:54:7b:87:8b:7f:47:0e:5f:c7:be:40:
                    47:7e:3b:db:cd:3f:0a:5d:58:1c:0c:0e:4a:76:fe:
                    8c:9d:c1:e7:17:6d:1f:93:c1:30:78:50:9b:42:97:
                    61:75:36:47:ff:c7:d3:c4:92:0c:7a:77:77:2c:d1:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:00:BB:84:E6:B4:26:EA:8D:97:F2:27:09:DE:84:67:72:EE:2E:AC
            X509v3 Authority Key Identifier:
                keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c3:81:8e:e6:14:ab:11:1f:2c:97:83:a2:2f:fc:d6:8e:3e:
         b7:93:1d:59:ed:82:71:4e:51:f2:92:f9:38:57:aa:02:94:30:
         83:13:e0:e7:67:e8:e6:7c:b4:37:96:fe:9a:bc:79:85:99:63:
         aa:0e:d0:04:08:d4:7d:69:b3:39:8c:cd:15:3b:63:d5:04:d6:
         c1:5c:14:b3:b3:44:07:21:c6:de:a4:81:b9:d8:6a:92:7d:b9:
         7d:61:7c:4f:c4:b1:03:26:45:0a:c6:9a:96:45:cc:82:7c:ad:
         f2:ab:1f:c4:3c:1d:ba:af:3b:79:5d:de:6d:5b:ff:c8:3c:13:
         a3:71:bd:fa:9d:d1:f0:58:0c:e2:5f:34:99:57:32:9a:d2:92:
         cf:c3:ce:22:03:c2:2b:74:79:f5:2d:ea:34:f6:85:4d:a2:df:
         2d:2b:aa:bf:c4:6b:4d:69:46:e5:8e:3f:2d:40:20:05:c1:f4:
         b1:e1:2b:a4:c6:43:84:c9:05:5d:43:35:49:a0:08:0c:87:ac:
         a3:92:11:9d:e0:f3:dd:ca:bb:7a:45:39:17:12:e7:93:2b:a8:
         58:0d:bd:f8:1b:b4:c8:09:79:61:7d:0f:93:a1:03:de:4f:a6:
         b7:e5:10:2a:4f:9c:75:cc:c8:04:2f:6b:16:d8:b8:08:3a:ee:
         d0:af:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:17 2026 by rpki-client