Manifest

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft
File:                     D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft (raw, json)
Hash identifier:          Bq0ezwBP/QySp69hyvHkxSGhQD/5angWcMiQ55sBkLg=
Subject key identifier:   BE:8D:5F:15:FD:30:E4:66:6F:7B:10:2F:D5:4E:85:BB:30:EE:B3:6D
Authority key identifier: D6:59:A7:AF:0F:A7:DC:A3:31:94:D3:52:FC:97:14:0A:E7:0E:8E:3A
Certificate issuer:       /CN=d659a7af0fa7dca33194d352fc97140ae70e8e3a
Certificate serial:       49186AAF7A77F5CCB630538730C185E90F80D043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lmnrw-n3KMxlNNS_JcUCucOjjo.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft
Manifest number:          25
Signing time:             Tue 12 May 2026 11:20:51 +0000
Manifest this update:     Tue 12 May 2026 11:15:51 +0000
Manifest next update:     Fri 12 Jun 2026 11:20:51 +0000
Files and hashes:         1: D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.crl (hash: 2cRvhaMPIwogOB7qGu66xjT2T6pa0mzNaEDhFzCwOEc=)
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.crl
                          rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lmnrw-n3KMxlNNS_JcUCucOjjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:18:6a:af:7a:77:f5:cc:b6:30:53:87:30:c1:85:e9:0f:80:d0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d659a7af0fa7dca33194d352fc97140ae70e8e3a
        Validity
            Not Before: May 12 11:15:51 2026 GMT
            Not After : Jun 12 11:20:51 2026 GMT
        Subject: CN=BE8D5F15FD30E4666F7B102FD54E85BB30EEB36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:dd:b0:15:01:ca:80:cc:fe:72:33:db:27:
                    84:3f:5c:88:bb:be:1d:b7:3a:66:20:2c:c1:55:2d:
                    94:92:a5:e7:32:ad:94:d6:0a:59:8b:56:a3:c1:1c:
                    7f:41:f2:0e:03:bb:7b:4f:d4:d1:09:a8:ac:84:2f:
                    87:7c:b5:6f:37:cf:86:f1:ba:7a:eb:9d:67:d9:fe:
                    bf:eb:f6:84:80:22:20:c2:f1:e1:76:b9:42:ec:f5:
                    57:3e:b2:1d:d1:53:62:d1:ff:be:73:bc:e3:6a:fb:
                    b9:cd:77:85:a8:c2:48:73:ad:52:df:f1:a8:4b:19:
                    1e:b1:10:5c:a5:18:96:97:0c:53:9b:08:5f:49:e3:
                    47:38:fa:d5:cd:ba:1c:d0:1b:c8:95:29:25:b3:a8:
                    c5:46:01:53:07:35:23:04:19:d6:31:29:28:af:84:
                    d4:fe:91:ad:ac:42:12:3f:ae:05:ed:c5:58:90:87:
                    26:43:30:b6:1c:61:82:57:55:94:f9:a6:26:03:4a:
                    86:f1:41:07:2e:2f:f9:74:a8:0f:f6:bc:43:65:10:
                    8d:1f:38:2d:62:88:4a:7d:c6:24:b6:bb:cd:5e:91:
                    d7:f7:12:02:16:9a:f8:8e:a8:a4:f9:5e:2c:4d:ef:
                    07:d4:4c:e1:6a:ac:0b:14:b6:3d:3c:81:be:51:63:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8D:5F:15:FD:30:E4:66:6F:7B:10:2F:D5:4E:85:BB:30:EE:B3:6D
            X509v3 Authority Key Identifier:
                keyid:D6:59:A7:AF:0F:A7:DC:A3:31:94:D3:52:FC:97:14:0A:E7:0E:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lmnrw-n3KMxlNNS_JcUCucOjjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/17/D659A7AF0FA7DCA33194D352FC97140AE70E8E3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:72:5a:be:71:8f:74:b1:aa:f9:4f:a5:95:07:8d:f3:91:c7:
         d6:dd:3c:1e:0d:30:95:ec:78:a0:f3:74:4b:17:91:38:dd:47:
         40:19:9e:4b:56:79:d4:e8:05:6d:bd:08:d4:91:6a:88:3e:27:
         9c:9f:af:e5:4c:c7:d5:71:7a:32:eb:db:8e:96:40:8f:dc:51:
         6b:86:9c:90:68:e0:c5:4b:6e:5a:96:7f:91:40:e5:3c:a5:45:
         f1:8b:8a:6d:97:0f:ea:d4:b0:2f:3f:a9:a4:af:e9:61:c5:e9:
         3f:9c:c5:d2:ef:72:bb:eb:1c:eb:44:a6:ac:bd:2e:af:20:62:
         84:3e:8b:6e:c0:41:31:c6:d6:ef:25:11:6a:52:56:cd:18:04:
         38:63:6f:e3:13:4d:39:59:51:1a:56:e2:b8:90:be:de:22:56:
         5c:21:9c:5b:42:da:bc:fc:4e:18:4d:97:62:3f:43:8c:c7:2e:
         13:70:63:ef:48:20:9d:a4:10:28:30:9b:65:90:20:69:1f:09:
         3d:80:20:c8:92:5f:51:7d:f9:6c:5d:5a:52:80:29:09:12:25:
         aa:27:72:a1:07:74:13:ac:85:e9:4b:2c:52:cf:8d:67:20:b7:
         4f:d5:d9:06:b8:04:12:1e:e7:e2:9a:80:6c:6b:ea:94:80:61:
         e2:12:5b:52
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUSRhqr3p39cy2MFOHMMGF6Q+A0EMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDY1OWE3YWYwZmE3ZGNhMzMxOTRkMzUyZmM5NzE0MGFl
NzBlOGUzYTAeFw0yNjA1MTIxMTE1NTFaFw0yNjA2MTIxMTIwNTFaMDMxMTAvBgNV
BAMTKEJFOEQ1RjE1RkQzMEU0NjY2RjdCMTAyRkQ1NEU4NUJCMzBFRUIzNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllt2wFQHKgMz+cjPbJ4Q/XIi7
vh23OmYgLMFVLZSSpecyrZTWClmLVqPBHH9B8g4Du3tP1NEJqKyEL4d8tW83z4bx
unrrnWfZ/r/r9oSAIiDC8eF2uULs9Vc+sh3RU2LR/75zvONq+7nNd4WowkhzrVLf
8ahLGR6xEFylGJaXDFObCF9J40c4+tXNuhzQG8iVKSWzqMVGAVMHNSMEGdYxKSiv
hNT+ka2sQhI/rgXtxViQhyZDMLYcYYJXVZT5piYDSobxQQcuL/l0qA/2vENlEI0f
OC1iiEp9xiS2u81ekdf3EgIWmviOqKT5XixN7wfUTOFqrAsUtj08gb5RY8X1AgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUvo1fFf0w5GZvexAv1U6FuzDus20wHwYDVR0j
BBgwFoAU1lmnrw+n3KMxlNNS/JcUCucOjjowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vYWthbmUubWFydS5jby5qcC9yZXBvLzEwNzNj
Ni8xNy9ENjU5QTdBRjBGQTdEQ0EzMzE5NEQzNTJGQzk3MTQwQUU3MEU4RTNBLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWxtbnJ3LW4zS014bE5OU19KY1VDdWNP
ampvLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vYWth
bmUubWFydS5jby5qcC9yZXBvLzEwNzNjNi8xNy9ENjU5QTdBRjBGQTdEQ0EzMzE5
NEQzNTJGQzk3MTQwQUU3MEU4RTNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXJavnGPdLGq+U+llQeN
85HH1t08Hg0wlex4oPN0SxeRON1HQBmeS1Z51OgFbb0I1JFqiD4nnJ+v5UzH1XF6
MuvbjpZAj9xRa4ackGjgxUtuWpZ/kUDlPKVF8YuKbZcP6tSwLz+ppK/pYcXpP5zF
0u9yu+sc60SmrL0uryBihD6LbsBBMcbW7yURalJWzRgEOGNv4xNNOVlRGlbiuJC+
3iJWXCGcW0LavPxOGE2XYj9DjMcuE3Bj70ggnaQQKDCbZZAgaR8JPYAgyJJfUX35
bF1aUoApCRIlqidyoQd0E6yF6UssUs+NZyC3T9XZBrgEEh7n4pqAbGvqlIBh4hJb
Ug==
-----END CERTIFICATE-----
Generated at Tue May 12 21:07:55 2026 by rpki-client