Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
File:                     EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft (raw, json)
Hash identifier:          Hjqxo4jj2/f4q43oQ65d0kkJ6VNcWINjQeECiiKXOIA=
Subject key identifier:   21:81:48:64:27:E7:75:B5:91:AB:F1:4E:46:F0:7B:91:75:F6:A0:EC
Authority key identifier: EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56
Certificate issuer:       /CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56
Certificate serial:       20E41F5CF08F82EAF19529396C062F96E701685E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
Manifest number:          29
Signing time:             Wed 05 Nov 2025 04:56:53 +0000
Manifest this update:     Wed 05 Nov 2025 04:51:53 +0000
Manifest next update:     Thu 06 Nov 2025 05:09:53 +0000
Files and hashes:         1: EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl (hash: TqQ206qqNoMqQrGARtLPm5tlVTfYhDzGlxpBJ1Xu69g=)
                          2: AS214976.asa (hash: YHABTuzlbO4T82WDdGRIeo12XIwcp/xmEuN99D69NCg=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 05:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e4:1f:5c:f0:8f:82:ea:f1:95:29:39:6c:06:2f:96:e7:01:68:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea29f191dc6ce747da4a2a2d9f13e557f50adf56
        Validity
            Not Before: Nov  5 04:51:53 2025 GMT
            Not After : Nov  6 05:09:53 2025 GMT
        Subject: CN=2181486427E775B591ABF14E46F07B9175F6A0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:87:36:64:cf:ad:86:62:b1:5f:bf:bb:71:
                    79:30:e4:ed:da:e0:00:ae:5d:46:bd:fe:7d:0a:ab:
                    00:b2:9a:bb:b2:7f:91:f5:bb:09:54:46:98:b1:9f:
                    c6:7f:5e:96:a6:f1:67:25:2a:10:4b:b0:22:95:46:
                    75:3c:6c:f4:7c:2c:68:a1:47:22:aa:82:03:9a:d0:
                    e5:30:d9:33:4d:ed:fd:bb:56:08:42:b3:68:dd:17:
                    76:5f:7c:18:bd:1e:50:2a:2e:39:6d:e5:a1:04:ff:
                    05:56:11:fc:b2:66:ba:b8:7d:d6:a8:8f:96:5a:9f:
                    ed:71:4d:77:d9:9e:6f:6d:ec:a6:3e:14:77:98:bd:
                    27:10:9a:ad:b0:65:a5:20:21:d0:78:42:0a:54:db:
                    8f:64:f0:b3:ce:2e:72:95:36:c6:a8:ca:c1:d1:99:
                    7d:c9:ba:7d:db:42:8e:20:69:f7:44:a4:ed:17:9d:
                    91:72:11:67:66:4e:04:fe:7d:88:0c:2e:12:b0:f4:
                    e9:c8:91:84:04:bd:21:34:6e:b4:42:15:48:d7:89:
                    09:0d:ed:4f:92:ee:63:21:70:b8:a1:96:0a:ea:b9:
                    60:81:8a:b7:c5:0c:59:f8:fc:2e:31:01:8f:c9:a7:
                    a7:85:13:c9:4a:7f:0f:bc:06:ca:02:fb:f1:27:43:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:48:64:27:E7:75:B5:91:AB:F1:4E:46:F0:7B:91:75:F6:A0:EC
            X509v3 Authority Key Identifier:
                keyid:EA:29:F1:91:DC:6C:E7:47:DA:4A:2A:2D:9F:13:E5:57:F5:0A:DF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6inxkdxs50faSiotnxPlV_UK31Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/1/EA29F191DC6CE747DA4A2A2D9F13E557F50ADF56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:81:c4:a2:1a:6f:96:5c:23:4c:df:ca:a7:70:59:6d:1d:de:
         85:25:ab:48:d6:f0:be:78:04:a7:d0:c8:4b:22:e0:3a:fe:d4:
         6c:bb:9c:e1:01:ec:af:9a:25:8e:56:20:64:0f:66:a3:60:4d:
         66:60:54:d5:1f:c5:3c:ec:70:c7:da:54:91:54:2a:60:f2:5c:
         88:37:64:4e:6e:89:59:83:a5:a3:0a:34:90:cf:dc:f5:3f:98:
         86:8f:a1:62:8e:97:8b:4e:1c:6a:51:4d:ca:73:88:61:b2:56:
         94:60:a1:52:dd:24:74:0c:12:00:9f:34:1b:49:cd:a0:0a:a3:
         0c:27:de:0a:1d:f3:17:5e:a7:1a:ef:f8:34:04:8a:d0:54:22:
         c8:4d:a4:06:39:05:6b:4f:a6:24:cb:0e:f8:e8:dc:3d:82:20:
         0c:b3:3f:d1:da:a4:14:83:d9:a3:e5:6e:56:be:c2:b1:67:fa:
         90:fd:0c:e5:0c:6c:bc:0a:75:8f:7f:8e:64:cb:d5:a2:54:cd:
         fc:78:66:13:94:24:41:7a:da:14:14:a5:3b:ba:d8:8e:d6:6b:
         f2:9a:55:cf:c5:11:f2:b9:41:0b:c8:34:b9:7c:f4:8b:05:cf:
         98:bd:d7:26:cf:4a:1d:d8:35:ca:47:89:20:c3:b7:bd:3f:4b:
         31:33:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:20:44 2025 by rpki-client