Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
File:                     8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft (raw, json)
Hash identifier:          O6CDZ5lvMpjmLoy9Y4bXT6/m7V5qyrkIG5gSEXNMU+w=
Subject key identifier:   4F:42:BC:DF:92:1F:5A:4B:C4:2E:50:ED:EF:98:37:A3:E3:A8:E2:B0
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       267D50F20A35155A0AFA0B791C0C1C2145552BBB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
Manifest number:          B5
Signing time:             Thu 06 Nov 2025 15:18:07 +0000
Manifest this update:     Thu 06 Nov 2025 15:13:07 +0000
Manifest next update:     Fri 07 Nov 2025 19:04:07 +0000
Files and hashes:         1: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: Hbng6Qs3gtMCfgNOvlhVaZG81qH5D1zb+3kXz9K52lY=)
                          2: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=)
                          3: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: htr7q3jqwGtRhcinI8choYJGldgn6DHWcxEmRIqoS04=)
                          4: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl (hash: JkMDxdCkXQ6D+gPkjaZHDuQA+bOEFrE1mf5aTYEzkNU=)
                          5: 326130363a313238323a3a2f33322d3438203d3e2030.roa (hash: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ=)
                          6: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=)
                          7: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: DCknWSFkXEL9nevlPCXr7YdoenSsMMYUI7/Zj/O4jvs=)
                          8: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: XXcmCcNAJFyusTP4fLJdInjZVJsyLkvh3OAm7Ll9RAg=)
                          9: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=)
                          10: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: ONwiyOYFzhgKKPFJfWzCUzPFz/scs7X8q3Hvxa24A0Y=)
                          11: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Nov 2025 19:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7d:50:f2:0a:35:15:5a:0a:fa:0b:79:1c:0c:1c:21:45:55:2b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Nov  6 15:13:07 2025 GMT
            Not After : Nov  7 19:04:07 2025 GMT
        Subject: CN=4F42BCDF921F5A4BC42E50EDEF9837A3E3A8E2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:c2:b3:46:3d:18:bb:fa:63:07:d4:ab:43:
                    8b:9b:32:ac:a6:8d:a4:21:0b:89:22:54:6a:65:a2:
                    d1:39:9f:1e:a9:38:19:81:15:b7:fe:c4:c8:0d:af:
                    64:6d:71:ea:48:2b:2b:d0:10:69:95:eb:00:bf:8c:
                    23:66:4e:96:88:c0:97:6f:fa:a4:e1:42:c6:d1:b4:
                    46:1c:86:76:9b:56:7f:c6:b4:da:ef:5c:ce:18:ed:
                    0a:46:14:b9:2b:69:71:1c:f6:87:cc:d1:31:a8:d4:
                    ef:6c:a3:7e:2c:31:af:a4:19:ef:34:c5:a2:ed:7f:
                    51:3b:bd:ba:fe:c9:b0:81:f3:b3:72:3e:4b:4e:b8:
                    8a:0b:05:4e:72:3b:69:0c:b6:b5:e5:9b:cd:3e:2c:
                    5e:93:e4:bd:f3:13:c9:fd:b3:36:92:91:e2:6f:00:
                    2e:f0:da:6b:43:09:d7:1a:3c:b8:1d:54:e2:ea:fb:
                    10:93:65:f2:58:3d:35:28:6e:34:d2:73:af:93:d3:
                    30:3b:3c:a8:e5:77:f3:ce:43:59:b5:80:db:d0:86:
                    d6:79:02:1a:4d:12:fe:17:05:8d:54:f5:02:4f:e9:
                    4f:e8:da:ac:b9:5d:fe:56:8c:de:08:59:63:ca:f5:
                    bb:7f:ce:99:d7:eb:c5:72:1b:ea:c1:bb:14:0c:75:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:BC:DF:92:1F:5A:4B:C4:2E:50:ED:EF:98:37:A3:E3:A8:E2:B0
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:73:a2:1e:b0:75:67:98:f6:c4:1d:c2:10:e3:f9:46:57:
         83:fc:68:d1:56:ba:dd:f1:2d:cb:01:f9:fa:9b:61:d7:05:fa:
         b7:ed:c3:1d:9a:9a:31:85:d5:b6:81:09:19:5b:15:be:fa:6c:
         f4:18:85:6f:a1:9f:da:bb:78:c7:ca:f6:9c:b2:5e:d8:89:3b:
         4d:2d:f5:e5:fc:40:d1:65:03:0e:b9:93:af:7d:ce:96:6e:35:
         45:fd:37:a8:d1:a6:bd:43:a5:85:16:8c:60:04:6e:47:ee:dc:
         15:be:31:8a:ad:b2:05:23:7d:2d:68:c0:6e:24:93:0d:d6:98:
         57:a9:ba:a1:8f:08:20:25:85:ad:2c:66:a6:05:8b:ff:de:27:
         e7:b3:1b:e4:7a:bf:99:c0:6f:8f:23:9a:26:bf:e0:b4:36:a8:
         43:2e:ce:e7:2c:c7:fc:17:4a:81:d5:10:13:f4:3a:57:6e:f2:
         22:87:a1:ba:41:af:90:b5:0a:56:b7:b1:38:be:db:31:0e:69:
         71:6d:1e:8d:0f:13:f9:06:a8:d5:c7:30:40:b4:fb:cc:2c:7f:
         66:3f:e7:09:17:c6:87:84:65:14:53:d6:f2:6b:34:b2:2d:08:
         c0:59:59:f7:e2:24:65:52:65:7a:2f:1c:c6:1f:3c:c0:93:0d:
         c0:0b:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 04:40:12 2025 by rpki-client