Manifest

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
File:                     699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft (raw, json)
Hash identifier:          amEPdjVyHgr3arQ3XVIBLpOM1YwmaprXFTiFLQCDKuQ=
Subject key identifier:   0C:4F:B9:61:6B:F3:29:06:B9:60:52:4B:AC:BE:18:AA:BA:B1:D0:90
Authority key identifier: 69:98:86:F0:94:04:2E:E6:B1:FE:8D:37:FE:D9:E3:AA:49:A2:A5:E5
Certificate issuer:       /CN=699886f094042ee6b1fe8d37fed9e3aa49a2a5e5
Certificate serial:       0C2DFE81CCA688A1D0E69A058FB55DC399067112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
Manifest number:          013C
Signing time:             Sun 20 Sep 2026 06:23:01 +0000
Manifest this update:     Sun 20 Sep 2026 06:18:01 +0000
Manifest next update:     Mon 21 Sep 2026 06:42:01 +0000
Files and hashes:         1: AS198025.asa (hash: 7bfOiiPwBpJtf4YTG78v4mgY3ouSvmoLOxXappQdQ2w=)
                          2: 699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.crl (hash: GqM773bcMJAbrLQholizpRNFSE2FnaS+U0nKqJWC6oY=)
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:fe:81:cc:a6:88:a1:d0:e6:9a:05:8f:b5:5d:c3:99:06:71:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699886f094042ee6b1fe8d37fed9e3aa49a2a5e5
        Validity
            Not Before: Sep 20 06:18:01 2026 GMT
            Not After : Sep 21 06:42:01 2026 GMT
        Subject: CN=0C4FB9616BF32906B960524BACBE18AABAB1D090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:ad:56:ba:25:ff:80:28:b4:e9:23:68:10:
                    12:f9:69:e1:47:28:d2:c1:1a:25:93:73:1f:9e:f1:
                    a2:a2:34:40:5a:53:d6:62:b7:75:8e:d6:69:3a:67:
                    17:99:f0:83:35:c1:60:1b:82:40:12:bb:cc:93:0f:
                    a3:a2:49:e7:12:82:46:a0:18:41:02:62:fe:f4:27:
                    d7:e8:59:98:fb:c2:a8:dd:c0:ed:28:9b:0b:ae:20:
                    1e:21:10:b4:12:45:38:50:7d:04:21:ca:ab:95:1d:
                    3b:3d:47:c9:bc:0e:f7:20:03:fb:66:77:5d:bd:15:
                    7e:f1:28:0b:dd:85:46:b0:d6:20:b5:01:47:96:7a:
                    3a:1e:02:d1:59:4b:7b:67:71:f0:1c:5b:63:7d:3a:
                    b1:be:d0:4d:5a:fa:6f:65:40:52:f0:5e:65:f6:64:
                    da:a5:a9:d3:39:93:62:62:76:1e:06:57:ab:45:38:
                    77:fe:d3:63:1a:3f:9a:33:50:1a:6f:98:53:66:40:
                    0b:c9:32:f7:d2:92:d6:27:59:3e:d8:56:9f:ed:55:
                    b0:bc:0b:16:dc:58:c6:fc:74:d6:c7:30:e8:6f:89:
                    bd:d7:80:ef:8b:58:c6:2d:77:84:0c:0a:3b:9d:1c:
                    29:6a:da:4f:f9:d1:c7:75:62:95:b6:13:1f:26:d8:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:B9:61:6B:F3:29:06:B9:60:52:4B:AC:BE:18:AA:BA:B1:D0:90
            X509v3 Authority Key Identifier:
                keyid:69:98:86:F0:94:04:2E:E6:B1:FE:8D:37:FE:D9:E3:AA:49:A2:A5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZiG8JQELuax_o03_tnjqkmipeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/0/699886F094042EE6B1FE8D37FED9E3AA49A2A5E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:30:1f:a2:36:bf:d0:7a:df:e4:29:f1:64:b1:0b:ee:63:
         9d:9e:f5:0c:56:f2:2b:6f:33:34:09:00:86:b5:06:17:32:cc:
         a6:f4:e0:0a:39:a2:ca:12:57:1c:6c:1a:f5:ca:e2:78:94:d6:
         a4:3b:8c:d3:41:d3:30:ab:85:77:20:58:fb:14:fa:c9:40:ee:
         02:c4:7a:26:cb:55:4d:8f:e3:5f:b6:4e:56:d4:f3:b0:d7:bc:
         45:bf:94:93:c8:bf:00:d1:75:00:b4:ca:af:38:77:65:28:ba:
         c5:81:94:59:a8:ac:08:b4:ee:ca:8f:c3:13:1e:14:90:92:70:
         0f:02:ae:35:52:1e:b4:51:04:35:61:44:b5:5a:6d:18:09:77:
         31:12:8d:90:7f:79:8b:b7:28:fc:ee:c5:58:0f:42:da:cf:c8:
         45:41:fc:c5:e6:dd:0f:1f:ed:cf:33:aa:cb:b5:28:72:86:8f:
         fa:ac:b4:09:f3:32:5c:ea:1b:2c:80:06:bf:de:36:41:4d:29:
         31:ec:34:8d:c1:ae:aa:93:bd:79:e4:49:3a:f9:99:21:62:a5:
         d7:62:95:15:4b:e5:98:65:06:28:fc:25:2e:0e:6f:32:73:b0:
         7c:bc:49:45:31:5b:df:03:59:31:45:cd:b0:96:01:12:8c:68:
         7f:3f:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:24:42 2026 by rpki-client