Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
File:                     4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft (raw, json)
Hash identifier:          XbXonkNUgFlPHD12ersVr+Wn02H6aEvre0xVy3WIFWk=
Subject key identifier:   55:56:47:23:28:6B:1D:81:FC:F5:2E:84:FD:FD:73:84:FC:18:55:46
Authority key identifier: 4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F
Certificate issuer:       /CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F
Certificate serial:       02E8EA43D2239E34561AB9436C2354D5C84749A2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
Manifest number:          C3
Signing time:             Tue 12 May 2026 19:58:53 +0000
Manifest this update:     Tue 12 May 2026 19:53:53 +0000
Manifest next update:     Wed 13 May 2026 22:05:53 +0000
Files and hashes:         1: 326131343a373538303a663830303a3a2f34302d3438203d3e203531303837.roa (hash: 6wqby/Mrx9cd27NqiWdmDbK4L+jiWVktq5w3hJHDKq8=)
                          2: 4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl (hash: GoBglx5dgl7awoA80iayh28JcK36vertpghX01nQpus=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl
                          rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e8:ea:43:d2:23:9e:34:56:1a:b9:43:6c:23:54:d5:c8:47:49:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F
        Validity
            Not Before: May 12 19:53:53 2026 GMT
            Not After : May 13 22:05:53 2026 GMT
        Subject: CN=55564723286B1D81FCF52E84FDFD7384FC185546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:69:ce:a5:99:4c:e4:5b:ff:de:66:6a:9c:
                    6f:3e:08:ff:ee:92:29:95:da:0f:a4:0f:e3:6c:71:
                    2d:90:1f:d4:56:bc:c2:62:94:e6:21:e5:6f:85:ce:
                    61:f9:1f:0a:0b:e0:69:bd:af:27:86:7e:94:28:3f:
                    05:33:9e:3b:aa:30:0d:7f:42:b2:85:51:55:6d:70:
                    df:b3:4b:88:68:6d:39:d0:0d:57:08:28:c7:da:47:
                    ff:14:0f:3f:60:4a:01:0f:a1:f0:9d:17:bf:c2:5b:
                    91:d5:33:5b:9a:a9:a0:c2:af:d8:35:a1:79:75:57:
                    c1:e8:1f:57:0d:19:0c:1c:d5:12:df:94:ff:2d:0f:
                    fb:b8:02:1a:83:6d:9b:72:46:67:b8:5d:71:c0:19:
                    93:ed:6f:1d:71:0e:4c:67:9a:7e:48:ba:e0:c2:a8:
                    b5:c9:b6:11:9a:3c:07:8d:b2:87:43:8a:17:b7:4e:
                    9c:4c:00:4f:c4:e7:e5:50:66:ba:1e:b4:c9:d8:56:
                    26:cf:5f:ea:df:d6:86:d2:79:ae:82:b9:bc:8b:3b:
                    2e:9e:98:9c:eb:1e:d8:c5:23:fb:93:89:66:a0:f8:
                    8c:fc:7e:d9:f0:cc:e1:82:e5:fc:b1:70:23:99:2d:
                    20:d7:6c:9a:2e:c2:68:dc:c4:6e:93:b1:0c:dc:56:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:47:23:28:6B:1D:81:FC:F5:2E:84:FD:FD:73:84:FC:18:55:46
            X509v3 Authority Key Identifier:
                keyid:4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:36:fc:0d:35:cf:87:82:63:3c:21:38:a2:43:e2:4b:21:98:
         49:32:cb:a5:d4:99:f9:43:8d:45:dc:91:76:d4:f2:d4:15:f1:
         22:96:80:df:84:c1:70:0f:cb:3c:82:58:d4:da:16:bf:59:7f:
         5e:a8:e0:8a:3a:a3:84:d1:d9:67:cb:3b:ab:c9:a3:d3:1c:c6:
         9f:e8:1e:0e:c1:3d:90:22:da:14:d5:84:00:fb:a4:6e:e7:bc:
         f0:34:a6:08:ce:53:ae:f6:db:95:8b:ac:11:14:c8:ff:9e:db:
         55:1e:bf:53:8e:c8:d8:79:a2:55:26:b6:51:c2:84:63:9f:59:
         3f:b6:c9:18:27:34:c0:94:0b:8f:c4:2b:d0:64:29:14:f3:7a:
         74:28:4f:77:62:35:d2:e4:a2:48:75:e7:8f:99:1b:26:0e:88:
         bd:c1:82:92:c9:df:4c:ed:f6:f9:00:3b:bf:af:c7:22:f9:3e:
         9d:4b:08:6f:65:a3:20:18:a9:ec:d9:c5:43:7d:38:96:8b:60:
         2f:23:09:ca:c5:66:04:34:01:43:f6:4b:20:94:a1:c5:49:bb:
         a2:d2:40:e4:fb:09:1a:96:d2:4a:b5:f3:86:0f:77:2c:07:92:
         43:a2:20:64:0a:32:ff:41:e1:d0:9a:cb:25:15:5a:1b:ca:59:
         20:2a:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:09 2026 by rpki-client