Manifest

$ rpki-client -vvvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          6En7WYdjOKjrukCjU9rJBaNqhsCXBsm/7JOG8OrB2Lw=
Subject key identifier:   5C:AE:7E:9F:8C:27:E3:25:9B:46:CB:5B:CA:C5:3B:80:6E:2C:A8:57
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       179F656DCCA55E0FB67C97977EF00657E2DB7031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          08A1
Signing time:             Sun 20 Sep 2026 15:40:36 +0000
Manifest this update:     Sun 20 Sep 2026 15:35:36 +0000
Manifest next update:     Mon 21 Sep 2026 18:45:36 +0000
Files and hashes:         1: AS52025.asa (hash: OI2kY0XPpPvO7i1Va7hJSXXdFf121QOV1luG70fJFGE=)
                          2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: QqzNcIkyf/2dm6iwJwhabLomr/jJsOz0EyrkHVb4t1Y=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 18:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9f:65:6d:cc:a5:5e:0f:b6:7c:97:97:7e:f0:06:57:e2:db:70:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Sep 20 15:35:36 2026 GMT
            Not After : Sep 21 18:45:36 2026 GMT
        Subject: CN=5CAE7E9F8C27E3259B46CB5BCAC53B806E2CA857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:44:fe:d3:3c:8c:19:28:b0:df:d1:5d:a9:
                    96:2a:44:3e:42:f6:ad:cd:63:5a:2e:e7:07:44:c5:
                    ae:f2:7a:5a:7a:b0:73:ef:de:ae:da:a1:8e:78:5b:
                    14:17:b9:40:80:b9:87:bf:42:07:49:a3:b7:1c:a1:
                    be:72:52:7e:b0:f8:62:db:11:c9:53:1d:c4:e2:23:
                    81:3a:57:4c:24:ea:76:d3:6f:79:c8:5e:36:94:b9:
                    ac:dd:71:64:91:a9:0d:07:62:71:0f:b8:d6:38:a4:
                    b9:f0:52:1f:10:27:dc:04:98:d1:1a:0c:4a:ca:bf:
                    fa:99:4c:ac:1f:dd:df:c2:63:49:96:f4:3f:dd:5f:
                    0c:de:48:cc:1b:dc:a1:c9:86:e5:53:7c:e4:f5:09:
                    40:c8:e7:2f:78:5f:34:1b:95:a0:b0:0d:63:b8:92:
                    57:e0:d8:70:30:cc:01:c9:7b:9c:66:1a:24:b6:a7:
                    da:9c:4a:f9:9f:ed:d1:12:3d:2f:fc:af:08:25:d3:
                    52:83:ae:55:71:de:7a:75:14:70:c9:43:3d:4e:4e:
                    a8:fa:5b:b8:39:3a:fd:d5:f3:f4:77:54:77:45:e8:
                    f4:24:bc:9d:1d:6c:93:b5:a9:f0:d2:78:b0:32:52:
                    43:3a:88:2d:ff:c5:6f:d8:5a:42:a2:db:60:a3:bf:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:7E:9F:8C:27:E3:25:9B:46:CB:5B:CA:C5:3B:80:6E:2C:A8:57
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:86:9b:0e:4e:73:9e:5f:4a:10:60:67:78:3b:a6:5c:26:d0:
         a2:d8:f6:50:80:fe:e6:3f:0c:67:8a:7a:74:72:e7:fd:41:d2:
         4a:3f:44:ac:79:13:12:87:38:d6:14:36:f2:88:18:30:84:98:
         07:7a:48:ad:dd:6a:23:f7:f3:c5:ff:65:f9:30:f9:2b:c8:c3:
         98:46:82:71:f7:91:38:80:25:ba:94:f8:fe:82:89:ff:87:24:
         32:f0:9b:d6:35:8e:9b:80:f5:bb:73:30:3f:d7:d8:cc:1e:bd:
         40:a9:2e:c1:04:6c:37:14:86:3c:cd:ad:b4:d9:97:8b:63:6a:
         f0:c7:cb:1b:03:4e:4d:73:4c:93:6b:b4:50:9e:f0:63:17:90:
         d5:20:14:61:7b:7e:5a:51:5a:64:cf:c7:ad:ba:6e:18:b5:43:
         30:b1:7b:5a:9c:3b:d8:f4:52:b7:b1:9f:44:d8:0b:72:be:9a:
         39:4f:b3:22:a3:d9:32:04:87:38:4f:7b:13:5b:fa:6b:bb:05:
         18:e0:5b:a8:2b:fb:03:d6:b4:c7:a9:d6:79:ef:59:78:d2:7e:
         8e:84:95:11:5b:5f:fc:33:73:4c:06:b7:e7:47:fb:cc:e8:d2:
         06:c9:2d:8e:3a:32:17:f3:48:36:ee:7f:59:17:69:30:79:27:
         81:6d:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----