
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
File:                     A609E97AC39E3F53678C0C9422F89947B6146002.mft (raw, json)
Hash identifier:          wn77tG0Lrki/P5+HeYxNDv9ZWzdZ3XfLYpzFtdg6eQA=
Subject key identifier:   D6:1F:65:12:2C:0E:19:C6:A7:51:FB:22:FF:02:36:C8:88:1F:E0:3E
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       020AA8B0DA93A3A581B2240B113A63A0B8DA42F8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
Manifest number:          6D
Signing time:             Mon 03 Nov 2025 16:11:51 +0000
Manifest this update:     Mon 03 Nov 2025 16:06:51 +0000
Manifest next update:     Tue 04 Nov 2025 17:58:51 +0000
Files and hashes:         1: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: K0Co1onM5BbkXQH/tFwckZOljCdXDgCDtKHluZWcCxU=)
                          2: 326131343a373538333a3a2f33362d3336203d3e203233353037.roa (hash: glgfdV+PhGCRRHNDDvcfZnj+YSVY9ZJ2VPzzf2KV134=)
                          3: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: +wJjjEed1Hiq+IO3zR9/ZUn4Yc6NLql02f1VUhQS1AI=)
                          4: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: ghgUC1FkuuCEpl7atds36b5VAhGeigyHvpmuAij4NF8=)
                          5: 326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa (hash: Rl24KpeRszfXP63EEYdjHphgvip3cAS9ZcbTz0D4RVw=)
                          6: 326131343a373538333a3930303a3a2f34302d3430203d3e20323134393736.roa (hash: 0qT1c1K69lqN9nUqtSWlpWhbn6N1fTr4T30eQdNLLRw=)
                          7: 326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa (hash: mdPIsjImm3Eov7vPFeQtRSCN6wSJCAI1UyJtxVzVYR4=)
                          8: 326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa (hash: hNUMEEnDrH2gkkUUmyGjFLZFZ1Ez86CcMERf0SfeX4o=)
                          9: 326131343a373538333a6430303a3a2f34302d3430203d3e20323134393736.roa (hash: Q1Yc9aGEws5YYwK+QCg05EsB0jEAev+H6mymjWBSJyk=)
                          10: 326131343a373538333a3a2f34302d3430203d3e20323134373537.roa (hash: hcCpHwIQLDuq622pIwKuAMoJYid6gLvp4xFqggJmodo=)
                          11: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: h/faRutmshXccwksfhnp0IW/q8FgXwcvdBIuyRruBio=)
                          12: A609E97AC39E3F53678C0C9422F89947B6146002.crl (hash: JfPbA9pzNIWZex84/SwUh/+iSoaPwSVEWOLbMoNvf+s=)
                          13: 326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa (hash: qQlstETzls89/hXo5myM2bkOC7VSlCrPNYMmfyxC3IU=)
                          14: 326131343a373538333a3a2f33392d3339203d3e20323130343634.roa (hash: MjDlqyLqXAPlx4G6jj/eAEcU/aLYqdD8Oi3UpDW5w0M=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 17:58:51 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0a:a8:b0:da:93:a3:a5:81:b2:24:0b:11:3a:63:a0:b8:da:42:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Nov  3 16:06:51 2025 GMT
            Not After : Nov  4 17:58:51 2025 GMT
        Subject: CN=D61F65122C0E19C6A751FB22FF0236C8881FE03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:7a:14:25:81:ac:76:7f:e7:22:86:33:6c:
                    18:7b:c6:b6:fd:7c:e8:fe:66:82:a2:03:dd:36:c8:
                    24:16:98:79:29:59:f6:fd:d7:ad:2d:65:e4:0e:7f:
                    52:13:d7:70:7e:bb:bf:78:42:7c:fc:71:7e:f6:0d:
                    d5:40:06:6c:8c:e1:02:29:7b:0c:72:f8:5a:af:50:
                    61:c7:54:77:a7:92:36:b4:87:41:38:45:f4:a0:45:
                    32:f0:b1:65:77:0f:d8:22:6f:f6:eb:81:bf:b9:18:
                    f6:ae:86:f1:8d:7d:f4:3d:70:d4:69:e9:ce:80:4d:
                    bc:82:cf:f3:87:9c:ec:cf:e0:55:e8:e6:2f:28:c0:
                    56:a9:99:82:2d:11:2d:5d:0f:8b:81:13:48:df:3c:
                    6f:8f:27:ee:6f:9a:96:f1:2b:59:84:1f:3d:4f:34:
                    b0:82:f8:96:75:4e:dc:06:bc:aa:ea:4d:bd:b5:4a:
                    8a:a1:5a:61:cd:5d:0e:dc:5d:1f:08:92:d6:4e:85:
                    2d:68:33:fb:79:0c:79:6c:e5:a6:f4:92:10:c5:d3:
                    81:09:f6:2b:99:dc:bd:7b:61:86:60:aa:30:6a:26:
                    90:34:8c:c5:5f:d1:bf:d2:be:9a:54:04:18:a4:cf:
                    db:ae:60:f2:7e:ac:8c:c7:68:ea:4e:4e:01:0c:d4:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1F:65:12:2C:0E:19:C6:A7:51:FB:22:FF:02:36:C8:88:1F:E0:3E
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         12:6c:f0:a6:5a:c9:7f:83:17:39:1c:fb:05:52:ca:ab:06:51:
         dc:2b:6e:2f:6e:dc:d3:a5:32:95:2e:a6:7e:52:61:de:74:62:
         cb:65:c6:3e:49:77:05:bd:dc:3e:91:58:2a:ba:55:f7:b0:1c:
         95:c1:60:fe:21:b1:5a:a4:43:ad:48:7e:62:42:53:af:45:98:
         24:7f:fe:bf:40:88:e8:70:c4:74:51:36:4c:ee:cc:d1:7e:a0:
         e9:64:26:44:ef:f0:30:5f:64:aa:bf:76:3b:05:2f:c6:82:dd:
         e8:76:db:15:0a:2f:95:a8:3b:bd:d8:22:f7:60:3e:53:eb:bd:
         4c:34:96:05:d9:0b:c4:ae:c9:a0:cf:47:af:bb:0f:5f:39:f5:
         be:56:a5:07:ff:25:28:32:04:99:bf:6f:7d:5f:ee:96:68:fb:
         64:17:1f:5c:68:df:fd:fe:2a:5e:73:0e:81:a9:12:ca:10:f3:
         a6:39:63:e2:d9:84:48:d1:3d:59:4f:2a:2c:64:05:b2:f5:26:
         38:9c:e4:df:8a:b0:0d:79:a8:93:e3:07:3f:68:41:5f:2d:5a:
         f1:10:53:8b:34:83:3a:d0:ba:ef:22:97:f3:f3:48:0c:17:b4:
         10:ac:c4:a6:44:fe:78:f0:f1:18:82:a3:ec:ed:e4:e6:06:09:
         0f:2b:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:55:21 2025 by rpki-client