Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
File:                     23D2114BCC16D1306C46A879901900160E1AE9DD.mft (raw, json)
Hash identifier:          gVfa0yVU//zLTxAgfOl710K3ucuJkV0sUsUy2B+QqwY=
Subject key identifier:   0F:24:F6:5A:1F:5F:CB:18:BD:99:D8:A4:D5:7A:73:0C:00:3A:97:C9
Authority key identifier: 23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD
Certificate issuer:       /CN=23d2114bcc16d1306c46a879901900160e1ae9dd
Certificate serial:       6A0D1011DD7C91EB7398B6B0F11196C4ED1CD764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
Manifest number:          46
Signing time:             Tue 28 Jul 2026 10:34:51 +0000
Manifest this update:     Tue 28 Jul 2026 10:29:51 +0000
Manifest next update:     Wed 29 Jul 2026 14:19:51 +0000
Files and hashes:         1: AS219522.asa (hash: Vxb6VvNc3MXnBMR3Yivi4oXxzqNhAXAEGIJ2vRINBq0=)
                          2: 23D2114BCC16D1306C46A879901900160E1AE9DD.crl (hash: TwjhW6vLvJ71Sd+SSvNi5uSLl1WgkvyQvlDG7EXSUPw=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0d:10:11:dd:7c:91:eb:73:98:b6:b0:f1:11:96:c4:ed:1c:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d2114bcc16d1306c46a879901900160e1ae9dd
        Validity
            Not Before: Jul 28 10:29:51 2026 GMT
            Not After : Jul 29 14:19:51 2026 GMT
        Subject: CN=0F24F65A1F5FCB18BD99D8A4D57A730C003A97C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:0c:4e:3f:f7:61:e8:d3:53:e0:7e:45:40:
                    c2:08:f1:fd:51:24:37:22:1e:0b:11:f1:3b:a3:7c:
                    4a:44:b9:6d:94:cb:80:21:70:94:f2:47:c7:d1:1e:
                    5a:c6:cd:7c:19:63:cc:a2:37:4b:66:33:f9:ed:6a:
                    b7:9d:b5:dd:49:b2:bf:43:64:ee:fd:4b:10:20:90:
                    1a:6a:4c:b7:5b:5e:6c:d4:48:34:b0:65:ee:37:f5:
                    52:c9:7a:6f:1b:0f:f4:58:2b:c6:09:4f:66:77:e8:
                    93:6c:12:a5:0d:3a:68:e8:0d:3d:b8:35:af:ba:0c:
                    6e:74:0a:bb:19:15:3a:56:c1:bc:2f:64:79:07:7a:
                    b4:fb:d5:b0:3d:f5:4a:dc:0f:3b:16:b5:67:51:30:
                    d2:bc:11:fc:e6:57:29:77:2e:bb:78:ac:7c:68:c4:
                    9c:44:8d:0a:27:87:b4:ae:f5:3a:5a:a7:03:90:3e:
                    f1:b7:3b:91:39:e6:7c:a1:b7:40:c6:31:e2:a5:32:
                    ed:21:b5:77:e1:32:7c:9c:0b:f2:49:96:69:a0:41:
                    4c:fd:83:25:38:d1:d9:46:71:83:21:a1:8a:83:3e:
                    34:59:2e:04:c0:23:81:0a:71:57:0a:b3:df:46:fe:
                    86:3b:1d:bd:ad:77:23:dc:bd:5d:cf:67:f3:a6:18:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:24:F6:5A:1F:5F:CB:18:BD:99:D8:A4:D5:7A:73:0C:00:3A:97:C9
            X509v3 Authority Key Identifier:
                keyid:23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:4f:bd:13:53:4a:97:bb:86:ac:1c:66:b1:1c:82:b2:8f:
         1c:3b:4b:9f:3f:81:02:1a:f3:b9:c7:6d:2f:98:cf:df:a6:ae:
         8f:8e:92:59:b7:81:b9:be:62:a9:27:be:4a:6d:3d:b5:5a:7a:
         a2:d9:6b:49:ec:66:52:c6:44:86:4d:f1:94:51:c1:9a:34:1f:
         20:88:bc:c2:19:e7:04:e4:3c:d9:d3:21:0c:55:ea:46:28:ed:
         c3:c1:81:32:14:37:af:df:5c:fc:8b:53:9f:12:de:10:73:8e:
         74:e6:fa:fc:c5:f8:0e:f3:a2:b0:4e:95:69:ee:18:29:fa:a1:
         e2:58:0e:02:00:4a:3a:0f:03:96:30:36:cf:6a:aa:ca:c6:af:
         5d:5f:2e:78:d5:63:d3:dc:3b:f4:44:63:2f:54:9c:14:f1:24:
         9b:58:d0:cd:58:16:a6:46:db:f3:14:86:17:70:8e:e1:69:7f:
         d9:6b:70:b6:ae:a8:81:2a:c9:bb:6d:6d:a0:c5:48:34:33:2e:
         82:fd:c7:40:05:3c:5b:99:fa:df:92:57:29:6a:d9:ed:00:fd:
         98:c1:2c:5e:b2:8a:09:9d:ef:19:33:ed:c0:6d:ce:45:53:e0:
         d2:4d:59:ed:ef:a3:72:f7:56:ed:60:55:5f:98:56:c0:fb:48:
         64:26:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:58 2026 by rpki-client