Manifest

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
File:                     23D2114BCC16D1306C46A879901900160E1AE9DD.mft (raw, json)
Hash identifier:          yNR6nTqqVomgZzjx/kViwbIVMIgdbARQCrDsRNAiMT0=
Subject key identifier:   B7:3C:E3:57:90:0F:D4:77:B9:64:7A:1D:38:79:E1:00:2E:63:59:B2
Authority key identifier: 23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD
Certificate issuer:       /CN=23d2114bcc16d1306c46a879901900160e1ae9dd
Certificate serial:       083618B5B6BFFD4D814E9C91E480A1B24934F16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
Manifest number:          09
Signing time:             Fri 12 Jun 2026 17:14:25 +0000
Manifest this update:     Fri 12 Jun 2026 17:09:25 +0000
Manifest next update:     Sat 13 Jun 2026 20:43:25 +0000
Files and hashes:         1: 23D2114BCC16D1306C46A879901900160E1AE9DD.crl (hash: gd1x4GASyKzl3ApgtkNqN32vT/h8XGHT6BqeaO1b868=)
                          2: AS219522.asa (hash: Vxb6VvNc3MXnBMR3Yivi4oXxzqNhAXAEGIJ2vRINBq0=)
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:36:18:b5:b6:bf:fd:4d:81:4e:9c:91:e4:80:a1:b2:49:34:f1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d2114bcc16d1306c46a879901900160e1ae9dd
        Validity
            Not Before: Jun 12 17:09:25 2026 GMT
            Not After : Jun 13 20:43:25 2026 GMT
        Subject: CN=B73CE357900FD477B9647A1D3879E1002E6359B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:4c:34:16:5e:e3:f3:59:4d:84:c3:92:a8:
                    29:51:14:80:48:57:9c:ba:8d:e1:01:14:a3:51:99:
                    d7:47:4e:e7:b8:de:da:96:eb:03:48:42:ef:2e:7a:
                    6c:6a:93:d6:fd:53:50:b8:7b:6f:8c:4c:cf:73:1a:
                    54:a8:6c:4c:48:a6:f9:f7:23:be:02:23:68:dd:ee:
                    1f:ef:dc:82:05:29:ce:26:40:f5:94:45:53:27:c3:
                    42:8c:ed:0b:8a:eb:30:18:10:f5:17:3a:f0:37:02:
                    59:2e:cb:6c:ec:97:8a:61:63:57:43:84:ad:e3:49:
                    85:11:cb:ec:72:b8:0f:82:ae:84:68:60:43:dc:10:
                    8d:cf:bb:4f:80:49:68:cf:99:4a:f4:e0:af:c9:89:
                    5e:0d:7e:19:f5:87:59:ff:3e:8a:f6:b3:70:f4:b7:
                    92:3b:21:72:99:af:3f:4c:20:52:97:81:c5:0b:47:
                    06:aa:25:fd:75:e7:e8:01:a7:6d:ed:93:3b:9d:2d:
                    fe:90:75:48:cd:d1:9d:7f:dd:f2:19:cb:15:9b:8c:
                    f9:48:65:b3:53:05:61:c0:e0:d4:b8:52:29:81:5f:
                    f2:2e:c9:56:ce:dd:75:bb:bd:6d:9e:d7:23:90:fd:
                    6d:19:18:54:b8:78:96:b5:f7:86:8b:3c:a8:85:c2:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3C:E3:57:90:0F:D4:77:B9:64:7A:1D:38:79:E1:00:2E:63:59:B2
            X509v3 Authority Key Identifier:
                keyid:23:D2:11:4B:CC:16:D1:30:6C:46:A8:79:90:19:00:16:0E:1A:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9IRS8wW0TBsRqh5kBkAFg4a6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/5/23D2114BCC16D1306C46A879901900160E1AE9DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:f6:14:78:db:f2:4e:63:c7:fc:c3:07:c0:5f:a8:ed:71:
         de:95:ae:7d:6c:af:15:74:7b:80:98:94:2b:39:e7:17:d4:28:
         9a:b9:76:43:df:99:be:d6:6b:5e:ec:30:30:4e:a9:2b:33:26:
         f0:36:c3:d4:86:e0:75:ad:4f:c4:54:18:70:33:d7:86:93:bf:
         5f:b8:50:5f:93:c9:b5:46:4c:c9:40:65:80:1d:9c:fa:48:da:
         e3:3a:34:e1:30:52:c5:6d:93:c4:90:6c:f0:69:e9:a5:95:05:
         50:17:98:0d:b4:29:14:72:f6:ac:2b:d8:ea:07:36:a0:e3:4c:
         9b:5a:40:d0:a2:a6:b9:e8:ec:ec:ca:b0:69:1c:52:6e:36:97:
         84:a8:0d:45:44:7a:78:17:e6:98:5d:ab:b7:5a:32:5e:f1:16:
         24:ff:11:e6:05:79:2d:9c:80:00:21:22:72:e1:90:b3:d4:b1:
         61:cb:66:04:41:b2:47:4c:6d:64:7e:a0:a7:b1:72:da:ae:49:
         4f:c5:64:ad:9c:d9:3f:55:0f:4b:60:fb:58:f3:a7:0d:ad:61:
         1e:4d:e4:12:61:61:d8:cc:bd:7c:78:b7:45:e7:10:d5:c1:2e:
         9e:1f:86:6a:67:d5:85:9d:ee:28:5e:b8:f1:3d:5a:4f:38:80:
         e8:44:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:30 2026 by rpki-client