Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File:                     354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier:          DGVisKYtH7JTXxEFJzVyQ9RTJkQjqqrTY79wt4SEFOk=
Subject key identifier:   D2:4A:30:7A:09:CB:8A:17:B6:EC:6F:A5:B2:47:61:E5:9C:05:01:40
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer:       /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial:       35AFB3D19122998882D1DE05924739704BB2FE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number:          6F
Signing time:             Tue 12 May 2026 10:24:19 +0000
Manifest this update:     Tue 12 May 2026 10:19:19 +0000
Manifest next update:     Wed 13 May 2026 10:36:19 +0000
Files and hashes:         1: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: h9ddS/qSKZ0ndmPaEU2l4a/wy/o3IR9wgOzutxm5/5A=)
                          2: 323030313a3637383a313230633a3a2f34382d3438203d3e20323134373439.roa (hash: qD58tjRXh1Sgzaanz8hHs0X4Bt+9XwLVW6v6y8GKf0Q=)
                          3: AS214749.asa (hash: wpekWomZYfDa84TSKNusNzBIk/1TTrrEHTUGOFIyHMs=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 10:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:af:b3:d1:91:22:99:88:82:d1:de:05:92:47:39:70:4b:b2:fe:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
        Validity
            Not Before: May 12 10:19:19 2026 GMT
            Not After : May 13 10:36:19 2026 GMT
        Subject: CN=D24A307A09CB8A17B6EC6FA5B24761E59C050140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:f0:42:06:38:17:77:0d:cd:1f:57:a1:10:
                    d8:90:eb:23:48:69:11:42:80:6e:69:ce:52:9d:76:
                    7f:e3:e5:8a:77:57:50:9e:9b:41:69:f5:5e:e5:02:
                    b2:18:3b:83:e8:b1:b8:ca:96:b4:50:14:72:b0:7e:
                    6e:f7:b1:42:e6:41:73:a4:d4:d1:75:59:ab:df:f4:
                    f1:cc:05:a0:87:b1:83:13:c7:7c:81:6c:c2:52:5c:
                    62:27:3d:9f:75:54:30:52:62:c7:b9:d5:0f:18:82:
                    22:ab:a2:86:45:e4:37:d3:21:9c:2a:a3:93:18:e6:
                    57:cf:93:2a:64:0b:f1:4d:d6:e2:12:7e:64:79:ba:
                    76:71:e0:24:8e:ea:90:1f:f7:aa:4e:5f:a1:e6:c9:
                    f8:fb:88:86:dd:9d:80:1d:08:d0:e6:24:7a:17:13:
                    36:54:da:e4:38:dc:18:62:1e:18:46:3a:db:f0:72:
                    b1:34:26:c7:aa:b2:1e:90:ae:8f:e9:a2:b1:16:dd:
                    66:95:d0:d2:96:3f:9a:fa:56:24:1d:3e:de:46:2e:
                    9e:04:ad:bd:64:09:42:07:e6:6c:89:99:14:10:7c:
                    85:5c:ef:c6:18:d1:b4:24:a1:8e:ba:b8:31:e3:5c:
                    7b:20:b9:6b:40:ed:bb:4f:c0:b3:d0:78:92:f8:13:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4A:30:7A:09:CB:8A:17:B6:EC:6F:A5:B2:47:61:E5:9C:05:01:40
            X509v3 Authority Key Identifier:
                keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fd:7e:56:ad:7f:50:d4:47:a3:2f:50:7c:01:89:36:4b:2f:
         7a:eb:67:00:80:72:f6:0e:47:d3:6b:b8:2d:c2:9a:8c:17:b7:
         32:3f:69:c2:c4:3b:58:b9:55:4d:37:1a:4e:2e:36:11:55:92:
         18:13:a2:a7:5b:4d:ce:d4:8a:20:03:ea:2a:82:52:98:eb:e4:
         81:cf:7b:0e:f5:8c:6c:d9:35:04:23:34:c9:6a:24:2a:94:c3:
         b7:f0:74:4f:bb:5a:f6:d5:da:d4:db:59:aa:67:02:07:c9:f9:
         a0:b9:a9:fa:c3:43:07:22:7e:da:a7:ad:6a:79:af:f6:1c:08:
         71:6d:04:1b:dc:ab:91:ea:be:cd:4d:bf:4a:a3:71:fc:fd:47:
         98:d9:f0:b1:7a:3c:13:e8:64:93:9e:4d:18:ec:77:3b:bb:08:
         5e:9a:62:95:13:20:7e:26:ee:ab:ad:9b:ee:b9:fa:52:f0:ca:
         d3:40:fb:38:34:0c:be:5a:88:fa:28:73:50:6a:88:42:f6:a8:
         73:75:a2:ba:80:a6:21:b2:fb:db:0b:19:33:43:94:2a:92:22:
         43:d6:85:e8:dd:5a:91:3a:b8:32:b0:75:0b:89:c0:d4:72:c5:
         e3:3f:27:78:73:f9:b0:6e:59:ef:ac:20:f8:c5:67:05:a0:b2:
         cf:82:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:14 2026 by rpki-client