Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          OkpkJfGDBruhXytJD3JrNHzQavXlUSg9tyZVYp7biBU=
Subject key identifier:   CE:43:02:1E:5F:AA:8C:77:05:CB:D7:1E:40:97:E7:E3:73:5A:CA:D2
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       7D2799E4F340304FB8A6CDA0E6CF4C6C382B9446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          02CA
Signing time:             Tue 28 Jul 2026 07:03:06 +0000
Manifest this update:     Tue 28 Jul 2026 06:58:06 +0000
Manifest next update:     Wed 29 Jul 2026 09:35:06 +0000
Files and hashes:         1: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: c52KJQ8pZB4T3CJ4ZzdIIf/7tJt3nO03Up2BYc+IAKc=)
                          2: AS47778.asa (hash: GbysVX722g1N5R0RyN2HAwYr+RRUlTeSZGz8UNCYDjI=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:27:99:e4:f3:40:30:4f:b8:a6:cd:a0:e6:cf:4c:6c:38:2b:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Jul 28 06:58:06 2026 GMT
            Not After : Jul 29 09:35:06 2026 GMT
        Subject: CN=CE43021E5FAA8C7705CBD71E4097E7E3735ACAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:32:ee:36:bf:f6:cc:15:30:16:86:4f:e7:
                    dc:c4:22:32:6c:7a:0c:d9:f5:9e:01:0a:41:07:7b:
                    6a:fa:53:df:b5:b8:2b:86:9c:2c:fb:23:d2:b4:e9:
                    c9:a6:4e:c1:1e:e6:e8:20:f3:cd:93:f6:2e:ab:0b:
                    8e:a8:07:f1:12:69:b3:ab:3e:c0:5b:da:dd:0b:a0:
                    43:c9:07:c4:28:3b:7b:5a:3a:7d:7a:f0:f3:26:ff:
                    f5:cb:cd:63:42:9f:cf:97:15:5b:a5:b5:dd:9e:26:
                    2d:4b:72:82:1f:19:36:ff:78:cd:3b:b1:d0:42:83:
                    4d:a5:7f:86:f2:76:d7:cf:be:95:f2:16:31:8a:df:
                    ef:fc:ef:de:ca:b8:a0:1e:93:43:09:36:90:20:1a:
                    67:b2:9f:3e:a5:d6:da:70:76:56:9e:2b:6f:23:21:
                    1a:3b:a7:80:47:d0:7f:5f:aa:23:12:d8:d7:a6:80:
                    f8:7c:70:6d:d7:2d:ff:9e:d4:d7:ea:6c:78:01:6f:
                    e1:7a:8c:ff:bd:15:b7:fe:d3:17:40:98:e5:e8:e7:
                    64:2e:fd:60:63:2a:fa:22:14:0a:f0:c5:9c:9b:fa:
                    8e:f1:d0:3b:aa:24:06:43:60:1f:12:76:6f:b4:c6:
                    09:79:a2:bf:17:61:f3:ec:7b:d4:b9:be:c4:70:78:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:43:02:1E:5F:AA:8C:77:05:CB:D7:1E:40:97:E7:E3:73:5A:CA:D2
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:54:e5:26:36:66:05:93:01:1e:98:b6:72:aa:88:6a:a8:
         07:a8:10:8f:6b:ab:90:65:b4:e3:50:b1:23:d2:0a:7a:40:f7:
         6c:78:87:93:fc:99:a4:e7:a0:a0:97:8b:8a:3e:3f:9e:67:54:
         05:98:ae:de:25:7f:a4:0e:d3:52:cc:0c:f6:17:d5:6e:eb:d6:
         21:ee:b3:7f:4e:79:99:2e:f1:58:29:4c:ee:1f:f5:22:ff:98:
         97:af:41:bd:ae:4b:e8:45:12:cf:b7:59:17:8c:5e:cc:7a:be:
         4d:53:26:34:b7:f8:98:0e:b0:1c:cc:8a:c1:63:9f:02:61:68:
         d9:c9:35:57:ec:fe:68:16:5b:3f:0f:5b:af:94:96:19:78:de:
         2e:f6:54:79:11:25:7c:0c:71:fa:16:ab:76:12:87:cb:ba:71:
         38:54:73:e4:cb:b6:29:b8:d3:01:05:1e:c7:5f:0c:75:13:af:
         7c:5c:2f:36:bc:aa:c9:37:12:3f:b1:62:f9:db:5d:7d:66:94:
         5d:ce:79:4a:ea:bf:37:31:99:7d:61:7c:a3:3c:4e:fe:37:c8:
         85:21:73:f9:e8:12:8c:b1:2b:3a:b4:72:1f:9b:03:10:02:82:
         46:ac:55:e0:1f:3f:62:bf:13:09:3a:3c:0d:75:4e:c2:2b:de:
         af:81:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:53 2026 by rpki-client