
Manifest
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
File:                     45FAD4649403F24502E9C3FA40103955BC3B5924.mft (raw, json)
Hash identifier:          93nwT+hirHAn4USgT5CURAtYH373ufkHT4H5WA+J3Lc=
Subject key identifier:   BB:BE:08:74:E8:2F:F9:C3:F0:AD:AF:CF:C0:D0:B4:ED:D3:E5:1D:23
Authority key identifier: 45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
Certificate issuer:       /CN=45fad4649403f24502e9c3fa40103955bc3b5924
Certificate serial:       3DC15FD989C7D8DE99C9E37F1033653D8C3C767B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
Manifest number:          0384
Signing time:             Mon 03 Nov 2025 15:18:07 +0000
Manifest this update:     Mon 03 Nov 2025 15:13:07 +0000
Manifest next update:     Tue 04 Nov 2025 19:15:07 +0000
Files and hashes:         1: 45FAD4649403F24502E9C3FA40103955BC3B5924.crl (hash: +QFmiVEQsYkIznX38xUoZ3uVIAVBzZkiqTt4tNf1QHw=)
                          2: AS205848.asa (hash: B26kO7Xb7jywshCeazF2haISy3OkHcFpl7lXLMxTwNA=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 19:15:07 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c1:5f:d9:89:c7:d8:de:99:c9:e3:7f:10:33:65:3d:8c:3c:76:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fad4649403f24502e9c3fa40103955bc3b5924
        Validity
            Not Before: Nov  3 15:13:07 2025 GMT
            Not After : Nov  4 19:15:07 2025 GMT
        Subject: CN=BBBE0874E82FF9C3F0ADAFCFC0D0B4EDD3E51D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:d4:7c:86:e0:a0:f9:b4:0b:42:f1:f6:1a:
                    be:3b:44:18:7e:54:60:f3:a8:0a:45:86:dc:ff:6f:
                    32:94:c9:f0:e4:1b:49:73:1c:78:d7:c8:59:71:57:
                    5b:52:5f:4c:7e:fe:06:87:dd:9f:1e:25:47:4a:e8:
                    89:52:e3:0e:d2:a2:30:dc:16:35:df:c3:2c:99:99:
                    ec:bb:2a:39:93:65:48:34:af:e6:07:80:b0:95:d5:
                    63:0e:b1:f4:f5:9b:76:f4:ad:3e:f7:f8:06:0e:13:
                    e2:4c:cf:9a:51:5c:42:72:c6:ae:94:23:fb:4f:11:
                    ce:c4:b1:e1:0f:ef:12:0e:3d:f3:f8:9d:b1:e7:f3:
                    84:dc:10:67:5a:e1:74:87:d8:6e:46:e6:72:63:c1:
                    de:62:7d:cc:eb:4e:ba:99:60:cf:f9:93:ad:32:f5:
                    a1:83:c6:73:39:0c:60:3c:3f:0e:2d:9a:f8:ef:c7:
                    06:2e:e5:10:a1:b2:b7:ce:5d:43:7a:b2:e3:41:73:
                    ae:03:78:ad:21:ca:83:5d:34:14:23:67:8d:71:92:
                    19:d9:02:3d:72:f7:d3:67:b8:72:e8:f2:b2:a6:1a:
                    fb:9c:b6:9b:64:fc:93:5e:2d:5c:5d:b3:88:57:41:
                    88:14:ce:7a:bb:f5:80:1a:27:f5:a4:18:16:82:ea:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BE:08:74:E8:2F:F9:C3:F0:AD:AF:CF:C0:D0:B4:ED:D3:E5:1D:23
            X509v3 Authority Key Identifier:
                keyid:45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         91:34:74:36:5c:a0:08:4f:9b:d5:a4:40:0f:3a:ee:80:7c:69:
         93:6d:1c:c5:06:f5:1d:51:55:5f:2e:7a:91:ca:0d:2f:2f:05:
         4f:ce:ec:2c:ec:26:9e:36:06:50:cb:64:a1:c6:cd:1e:47:b8:
         86:50:87:c8:82:b5:d9:40:c3:70:d0:2e:aa:ef:1b:2a:6d:6e:
         72:aa:08:f0:bb:95:c3:63:98:1f:dc:6d:77:ec:85:20:e6:bc:
         cc:c8:27:95:d3:22:93:5c:82:01:c6:6b:bf:59:3d:c3:bc:1f:
         30:77:41:f3:5b:2f:c0:6e:0f:5b:64:7b:e3:9b:b7:73:db:df:
         44:4f:15:dd:9d:0b:c3:d8:58:37:d8:96:a0:a9:ee:67:f7:2c:
         86:34:89:cf:9d:a6:1a:5b:3a:5b:4d:3e:8e:53:61:7d:b6:f2:
         ff:d2:fb:c0:cb:f1:a0:db:0e:c2:49:a8:3c:55:80:c8:fb:dc:
         bf:b1:bd:f1:1a:bf:c6:76:75:7c:e5:8c:3a:53:18:8c:c1:dd:
         4a:6d:a3:0e:29:37:62:15:b1:55:25:8e:1c:e4:12:c1:27:72:
         7c:b0:80:c4:66:6b:8c:ee:1e:d4:22:f7:ac:84:ba:4e:62:35:
         79:91:4d:72:a0:4b:99:0e:36:a6:fd:7f:25:f5:20:15:a1:34:
         ad:e6:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:47:34 2025 by rpki-client