Manifest

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
File:                     7D425251D51803E61C820ADEF2945E50184448D0.mft (raw, json)
Hash identifier:          zlDj4kHvnOcShnDlBOnbv7cGROyNW5lrQ+mfeVF4pl4=
Subject key identifier:   C0:A5:58:A0:F1:9F:A1:CE:7A:7D:F7:7F:79:31:05:3F:C0:FC:3F:B5
Authority key identifier: 7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0
Certificate issuer:       /CN=7D425251D51803E61C820ADEF2945E50184448D0
Certificate serial:       2C49A6BE6A915BC29475F05A9EDCB20C140BD1A3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
Manifest number:          0A
Signing time:             Tue 04 Nov 2025 08:41:51 +0000
Manifest this update:     Tue 04 Nov 2025 08:36:51 +0000
Manifest next update:     Wed 05 Nov 2025 08:58:51 +0000
Files and hashes:         1: 7D425251D51803E61C820ADEF2945E50184448D0.crl (hash: ro0CXLGZ3dm6JqlHcQA05LvqII7i+ISm5Uny3FB4cCE=)
                          2: 38352e3135352e3232382e302f32342d3234203d3e20323130343634.roa (hash: 0aZfjrvYrPLnv3SP6/H4nxpB3qjjpVdF0uWmjdcoqOQ=)
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:49:a6:be:6a:91:5b:c2:94:75:f0:5a:9e:dc:b2:0c:14:0b:d1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D425251D51803E61C820ADEF2945E50184448D0
        Validity
            Not Before: Nov  4 08:36:51 2025 GMT
            Not After : Nov  5 08:58:51 2025 GMT
        Subject: CN=C0A558A0F19FA1CE7A7DF77F7931053FC0FC3FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:19:2f:ea:6c:32:b2:6a:b4:91:a7:22:3c:
                    c9:85:2e:59:7a:01:f8:18:a5:45:37:9e:37:ea:9f:
                    d3:1a:e0:d7:93:89:b4:79:92:0a:87:f0:cb:e5:50:
                    22:be:2f:5f:72:db:b5:ff:11:bc:8b:45:9f:b3:67:
                    9e:2b:42:82:ee:f8:09:e8:e6:7a:46:ef:ed:27:f8:
                    7f:da:ac:b2:db:39:bf:bd:81:0c:e6:da:20:c3:eb:
                    21:f3:a6:3d:ac:46:6d:3a:fa:c7:5d:7b:17:a1:8a:
                    28:83:5e:a7:75:15:17:ea:03:fb:0f:49:28:14:4e:
                    15:62:c8:5c:b2:4f:2f:a9:92:43:b4:ef:38:3a:a0:
                    66:a3:f8:4e:29:18:63:76:ad:11:38:72:f2:58:d0:
                    12:5e:62:34:d9:32:dd:fe:82:41:7a:c5:07:ac:5a:
                    54:9d:38:71:f8:28:5a:bd:5e:ad:c6:09:09:eb:dd:
                    f9:a1:31:c1:f6:09:be:c4:7c:04:c8:e2:75:44:2f:
                    81:95:c3:ec:b5:82:b2:86:b2:b3:19:c9:b2:97:63:
                    70:6b:94:ea:b9:70:f2:8b:b9:4d:0a:1e:73:03:fe:
                    5f:3a:c5:e7:37:46:c4:1f:b1:26:67:81:86:86:80:
                    01:45:58:f8:21:d7:fa:b5:dc:5f:d4:2e:f5:ed:cd:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A5:58:A0:F1:9F:A1:CE:7A:7D:F7:7F:79:31:05:3F:C0:FC:3F:B5
            X509v3 Authority Key Identifier:
                keyid:7D:42:52:51:D5:18:03:E6:1C:82:0A:DE:F2:94:5E:50:18:44:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/7D425251D51803E61C820ADEF2945E50184448D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/4/7D425251D51803E61C820ADEF2945E50184448D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:11:56:9e:eb:57:6c:a8:9a:aa:20:65:e4:0c:5b:56:81:15:
         67:63:3d:b1:c3:63:37:f1:74:8b:d9:f3:5a:50:30:de:b9:1b:
         a7:3f:90:e3:d4:9a:52:48:ce:84:d9:00:6b:3e:88:36:3d:fc:
         1b:bf:a5:42:0f:fb:b9:92:77:58:2c:d5:0c:50:d5:5a:09:00:
         a4:0d:9d:fb:64:35:6a:77:ed:2c:46:af:d2:55:06:a7:ea:fe:
         d0:cc:c2:7b:ae:ff:20:19:5a:f7:be:59:30:05:1b:2d:94:57:
         d9:a9:13:21:aa:cd:bf:ba:b7:84:23:40:b7:84:04:d4:3e:40:
         82:e9:4e:c0:33:3c:f0:aa:60:80:a5:fa:7f:44:aa:14:50:43:
         8b:d4:e2:bc:20:54:3b:05:de:18:ae:c0:91:13:17:d2:df:df:
         d5:03:ec:fa:57:6b:48:12:2b:ec:e9:f3:35:43:2c:7c:52:d4:
         d0:b9:f4:11:9a:74:54:ba:5c:88:9c:60:95:d7:c1:86:40:36:
         f2:8c:d5:76:65:5b:97:17:01:d7:09:bd:bc:82:f5:85:86:11:
         66:fe:33:53:32:a7:c9:e3:7f:d0:61:cf:af:fa:ac:e5:a3:c3:
         83:ff:0d:a1:c9:d0:28:09:49:a4:36:ae:97:c4:1f:05:b5:d4:
         43:35:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:05 2025 by rpki-client