Manifest

$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft
File:                     3401B6222407FE29448F50FF43067F8CD6451300.mft (raw, json)
Hash identifier:          CGOdsU+nuOGP4dNb5OmJ7QTyLmEkzbtvxhBqWenwtQg=
Subject key identifier:   45:77:48:D5:AE:93:0E:DD:FA:6F:06:61:5B:55:BE:9A:72:E4:50:AB
Authority key identifier: 34:01:B6:22:24:07:FE:29:44:8F:50:FF:43:06:7F:8C:D6:45:13:00
Certificate issuer:       /CN=3401b6222407fe29448f50ff43067f8cd6451300
Certificate serial:       678B10FCD2C6D321FC4FED246F694F345FDE206D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAG2IiQH_ilEj1D_QwZ_jNZFEwA.cer
Subject info access:      rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft
Manifest number:          14
Signing time:             Sat 14 Nov 2026 04:38:38 +0000
Manifest this update:     Sat 14 Nov 2026 04:33:38 +0000
Manifest next update:     Sun 15 Nov 2026 06:22:38 +0000
Files and hashes:         1: AS205941.asa (hash: 5tOTzEj6yq8L+hN67PSiEW76HWWs+9FI7fQ02zxFV08=)
                          2: 3401B6222407FE29448F50FF43067F8CD6451300.crl (hash: pUAclQltgHnaaz9hzLvRJ3BPDum7M3HXe8Bb4+wuxGs=)
Validation:               OK
Signature path:           rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.crl
                          rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAG2IiQH_ilEj1D_QwZ_jNZFEwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 06:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8b:10:fc:d2:c6:d3:21:fc:4f:ed:24:6f:69:4f:34:5f:de:20:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3401b6222407fe29448f50ff43067f8cd6451300
        Validity
            Not Before: Nov 14 04:33:38 2026 GMT
            Not After : Nov 15 06:22:38 2026 GMT
        Subject: CN=457748D5AE930EDDFA6F06615B55BE9A72E450AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:fd:01:3d:77:80:f4:61:b9:bb:78:44:a5:
                    6e:d8:6e:7d:5a:7c:b2:86:21:7d:d8:3f:9b:51:8e:
                    c1:82:ae:d3:19:0b:0e:94:b4:5d:dc:1f:17:95:81:
                    91:80:e6:0a:db:ee:ec:a1:8a:af:2f:80:3a:ba:b3:
                    f5:5a:55:5a:b5:9e:06:3b:3c:ea:8b:79:8c:33:d9:
                    ac:5f:52:ab:8e:bf:ec:5d:35:4c:62:10:e4:7f:cd:
                    3b:df:1f:d2:a4:0a:87:58:c4:6b:19:a1:3b:c9:6a:
                    c0:2b:29:b7:d5:ac:ad:8c:47:07:45:62:29:93:28:
                    ed:99:91:9e:ca:44:da:ec:43:aa:c9:ff:06:10:8e:
                    01:e2:c9:9a:7c:16:80:5b:05:da:b7:5b:5b:59:12:
                    00:0e:50:0c:d6:02:67:da:2e:56:be:fb:4a:5e:5a:
                    b5:8e:25:77:39:8a:f9:bd:7e:09:ac:91:bf:c0:fd:
                    9d:3c:7c:46:fb:e3:7f:5a:67:7d:51:8f:fc:fb:90:
                    45:56:c1:24:8a:7a:c1:1c:de:58:4f:98:f5:a5:ec:
                    78:7e:3d:61:99:8b:e6:f9:af:70:b3:2c:02:4f:b2:
                    4c:24:95:da:68:2e:6e:29:06:b8:8a:00:ed:3f:6d:
                    6c:3a:5f:c3:3a:ee:95:fa:83:cb:f6:11:82:97:ad:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:77:48:D5:AE:93:0E:DD:FA:6F:06:61:5B:55:BE:9A:72:E4:50:AB
            X509v3 Authority Key Identifier:
                keyid:34:01:B6:22:24:07:FE:29:44:8F:50:FF:43:06:7F:8C:D6:45:13:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAG2IiQH_ilEj1D_QwZ_jNZFEwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/0/3401B6222407FE29448F50FF43067F8CD6451300.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:94:f3:10:ee:b8:f0:01:f7:5a:82:a4:b5:2c:b7:4d:f4:a5:
         c1:17:60:0b:b3:07:cc:bf:c5:db:48:3a:63:c2:fd:63:14:26:
         8b:dc:18:4b:fd:a1:b2:4c:9f:47:40:00:e0:11:33:90:4c:6b:
         6e:51:97:aa:49:a8:ba:eb:15:69:69:e0:18:83:9f:ab:7e:05:
         ad:78:0d:81:3b:ef:1f:bb:a9:48:8f:e3:30:76:d0:af:5f:e1:
         16:f9:5d:1e:db:2a:4f:9f:26:e4:6f:04:78:1f:2a:be:a2:e8:
         4f:67:1b:dd:d9:f8:97:1e:77:c1:05:9c:87:05:95:cb:ea:fe:
         3e:b7:93:99:83:5e:51:fc:56:03:45:02:bd:3e:f4:47:f9:40:
         5a:9a:26:c4:bb:c2:3f:3b:a2:77:7c:c5:cf:58:21:7f:8f:c3:
         7e:3e:66:c4:17:ff:6a:f2:4a:be:f5:8e:7f:df:51:a8:bc:96:
         9a:83:e9:01:1a:63:4e:7d:05:d1:8b:d8:db:f3:c3:e1:07:4d:
         58:02:5e:14:ad:fc:36:77:6f:48:c6:9b:91:06:f8:85:fe:7b:
         22:65:db:02:96:db:85:ae:12:88:4a:11:b6:94:3b:e5:9c:5e:
         59:df:f9:b4:d6:b8:7a:b7:4e:73:69:7f:4c:c3:48:7e:93:93:
         f1:84:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:17 2026 by rpki-client