Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File:                     354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier:          pqxIF1B+sQrIPrwkxCMSuEkC08gwt6SW3sknJ2d3teE=
Subject key identifier:   B5:67:CD:71:3A:A2:23:2B:1D:98:6C:57:A5:74:95:35:7C:8C:B3:5D
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer:       /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial:       409B82A07134F769C19C3A8686A7FA5FAC57F86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number:          D6
Signing time:             Tue 28 Jul 2026 02:09:51 +0000
Manifest this update:     Tue 28 Jul 2026 02:04:51 +0000
Manifest next update:     Wed 29 Jul 2026 05:38:51 +0000
Files and hashes:         1: 323030313a3637383a313230633a3a2f34382d3438203d3e20323134373439.roa (hash: qD58tjRXh1Sgzaanz8hHs0X4Bt+9XwLVW6v6y8GKf0Q=)
                          2: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: pO/eYHU5mS8ozh2jw0cqMEXA3ZkUTbsztfMufSWeiDc=)
                          3: AS214749.asa (hash: P1PAJj8FCISVY9D7d5RHoczjCsEinVsl6zRTS2N8cWk=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9b:82:a0:71:34:f7:69:c1:9c:3a:86:86:a7:fa:5f:ac:57:f8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
        Validity
            Not Before: Jul 28 02:04:51 2026 GMT
            Not After : Jul 29 05:38:51 2026 GMT
        Subject: CN=B567CD713AA2232B1D986C57A57495357C8CB35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:94:60:4f:b2:48:ad:b6:88:ec:7e:25:57:
                    d1:ca:88:61:93:fb:4c:28:fa:49:3b:15:d8:65:ed:
                    5c:20:13:53:d4:1d:a4:9c:c9:a1:fa:9f:31:3b:80:
                    a2:0c:72:a9:51:ea:43:8f:45:8d:5f:a3:51:dc:25:
                    42:8a:93:17:2e:8e:b5:b5:d1:79:9f:f3:4d:ac:4a:
                    e4:4d:d1:d2:21:07:91:7a:61:2d:96:9b:07:b8:48:
                    bd:75:fc:d8:c6:92:f1:e4:ec:54:1c:9d:2f:07:8d:
                    5f:60:e4:17:55:64:e6:ef:fe:42:18:4a:f2:44:69:
                    3f:14:15:3f:53:63:4e:2d:82:a3:ca:de:02:96:a4:
                    b0:4b:1c:8f:cb:f9:dc:e4:73:6f:c8:4f:7d:10:f3:
                    9f:19:67:71:66:19:8d:33:4c:34:74:7a:80:d4:0f:
                    71:83:db:b3:d6:4d:d4:8e:dc:c6:ad:73:1f:12:c0:
                    b5:e1:c7:46:fc:8f:b3:41:a8:67:61:1d:e3:ca:16:
                    0f:36:eb:67:95:7c:2f:6b:14:55:e2:b5:0c:62:29:
                    4d:27:0f:df:2b:f6:40:1b:f7:b2:7d:2e:5d:66:2d:
                    6f:29:dd:53:28:ca:0e:3f:4e:ba:57:c7:db:12:8c:
                    34:c7:b7:29:15:64:8d:7d:01:17:98:c0:cb:50:04:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:67:CD:71:3A:A2:23:2B:1D:98:6C:57:A5:74:95:35:7C:8C:B3:5D
            X509v3 Authority Key Identifier:
                keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:57:0c:60:72:3d:a7:f8:77:4a:ad:33:19:b4:01:c7:47:9f:
         c5:08:11:69:ed:ca:26:8b:cf:de:b9:22:71:4f:c1:3b:fe:07:
         64:1f:d6:ec:7e:49:f2:b7:ae:ea:25:32:b4:a5:c9:96:b5:2b:
         de:52:e0:1e:65:e6:7f:df:2c:d1:3e:0d:cd:ec:4b:e1:c5:0e:
         76:80:ca:e8:77:f7:af:dc:51:c2:49:ff:dd:97:9b:b4:55:96:
         c8:57:4d:cb:64:1a:bc:64:91:2d:99:a7:d7:2a:0b:a4:98:7b:
         a4:59:98:d3:b0:54:2a:72:27:a5:0a:c7:2e:95:e4:cd:3c:74:
         b2:98:66:0c:ab:15:40:fa:88:b0:ae:ae:aa:f1:9a:a9:27:ea:
         6a:a3:db:c2:bc:38:42:c6:4a:d5:07:dc:60:14:16:ad:d1:11:
         8a:08:58:fd:00:f5:fb:1e:67:49:0d:3b:1b:a6:9f:7c:72:a6:
         6a:bf:5b:72:b9:97:fb:4d:4a:ad:08:cd:6e:46:6d:fc:30:81:
         f3:b3:7b:10:5c:e1:a7:e4:02:2e:aa:ba:c6:ab:e6:bd:5e:b3:
         f5:5d:73:ef:9e:be:9d:0f:51:be:97:b9:ee:f2:c6:73:19:83:
         b6:57:ae:34:99:2f:c7:c7:e8:2a:2c:91:cb:a6:b1:3b:37:36:
         1f:cd:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:09 2026 by rpki-client