Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
File:                     23D2114BCC16D1306C46A879901900160E1AE9DD.mft (raw, json)
Hash identifier:          i7Sb5DaMSzzdnE+3W8EFK0hFtmzFj02r7taUejpwKnE=
Subject key identifier:   46:9D:98:88:DC:A7:32:5E:2A:6E:18:99:60:2F:75:AE:48:92:E9:64
Authority key identifier: 23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD
Certificate issuer:       /CN=23d2114bcc16d1306c46a879901900160e1ae9dd
Certificate serial:       101EE428B3F08CD3264BF3BCB964F873C66C25A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 05:24:39 +0000
Manifest this update:     Thu 23 Jul 2026 05:19:39 +0000
Manifest next update:     Fri 24 Jul 2026 07:02:39 +0000
Files and hashes:         1: 23D2114BCC16D1306C46A879901900160E1AE9DD.crl (hash: QDakO4XBuDPE6lGige0VjezhfFSgOQb5dQ8Ua8MhRc0=)
                          2: AS219522.asa (hash: Vxb6VvNc3MXnBMR3Yivi4oXxzqNhAXAEGIJ2vRINBq0=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1e:e4:28:b3:f0:8c:d3:26:4b:f3:bc:b9:64:f8:73:c6:6c:25:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d2114bcc16d1306c46a879901900160e1ae9dd
        Validity
            Not Before: Jul 23 05:19:39 2026 GMT
            Not After : Jul 24 07:02:39 2026 GMT
        Subject: CN=469D9888DCA7325E2A6E1899602F75AE4892E964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:17:e6:51:3d:68:bb:dd:58:cc:5f:b3:ab:
                    8a:bc:ae:83:2b:48:5a:18:30:1c:55:ef:6d:34:44:
                    be:2b:9a:44:64:36:d2:a4:b4:7e:5e:48:92:55:57:
                    e6:40:cf:cb:0d:e9:08:00:f8:0b:36:2f:4c:c2:65:
                    a8:a6:8c:6e:ff:41:f4:1c:7b:44:4e:84:53:e6:2c:
                    c0:e4:db:02:2d:0e:82:8a:df:1c:1d:91:b0:b1:dc:
                    40:32:cf:a4:20:0b:42:3b:83:15:f0:d8:ae:48:f3:
                    05:c9:10:3b:7f:a9:2f:32:cc:6d:44:28:ba:41:25:
                    0e:29:4f:82:73:dd:f5:7a:1a:75:95:7f:f4:17:f6:
                    23:db:53:c4:5f:b7:ee:67:d1:42:d7:51:2e:b7:e7:
                    d7:12:67:06:e7:37:47:ac:9e:9c:3c:28:8a:66:59:
                    5d:7a:1a:36:07:9b:e4:4d:0d:35:04:d3:f9:c7:d6:
                    c3:78:0e:08:13:c2:50:bd:9c:1d:1d:dc:db:ee:c7:
                    4b:58:f4:f0:e5:68:c3:3d:cd:96:ff:cf:f1:4d:7b:
                    7e:1d:3b:c6:f5:42:d3:db:b8:5c:3e:dc:6b:73:b6:
                    93:ec:01:9e:1c:a1:4f:6d:19:08:d8:cb:61:74:11:
                    cb:28:d4:33:15:9a:45:77:a5:ac:bc:64:1c:f7:d8:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:98:88:DC:A7:32:5E:2A:6E:18:99:60:2F:75:AE:48:92:E9:64
            X509v3 Authority Key Identifier:
                keyid:23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:ae:d9:5c:51:1e:44:05:24:71:f0:36:cd:cf:e5:66:f1:
         45:d3:42:b1:95:12:8a:84:a0:51:5b:99:e4:07:21:04:6f:74:
         08:a3:e3:2f:ea:8b:6e:a4:d8:44:17:90:30:8d:5e:fa:64:03:
         d0:8f:6f:e5:ca:e8:09:24:4a:32:a2:7d:c3:72:db:19:56:e3:
         aa:a6:61:a0:4b:96:15:9c:7b:3d:af:c1:a9:b5:d1:02:68:c6:
         07:e2:c6:5d:1b:c6:23:d1:56:0a:ae:66:4b:97:a0:ce:a1:26:
         44:32:d5:72:11:8a:54:8d:ec:e0:ac:53:10:0a:fd:7c:ed:01:
         9a:57:12:58:e1:3a:dc:7f:08:e6:d6:75:ea:59:0e:20:de:81:
         9f:80:14:64:b5:71:41:0e:b2:eb:0a:f3:fc:89:a0:2a:ee:a0:
         57:7b:80:41:e3:ef:68:0b:9e:0e:89:42:70:69:f3:fb:8e:99:
         40:f0:58:ed:73:af:a0:b4:5a:65:d4:b9:d8:f1:08:22:6b:2a:
         2e:0f:9c:ec:18:97:7e:f4:29:98:0f:c3:bc:4c:2a:48:29:b5:
         78:79:63:47:04:13:04:d0:6a:38:da:eb:7d:0b:64:29:b0:1c:
         39:0d:47:83:e9:1c:03:aa:15:46:e5:0e:28:9f:44:8a:bf:77:
         3d:1c:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:31 2026 by rpki-client