Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
File:                     E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft (raw, json)
Hash identifier:          u5BbScNQnjYgpPTbqHrZt1LXRCEIs3D0FAwgr8DaeOU=
Subject key identifier:   F4:7F:95:B1:4F:08:0D:37:B2:A4:52:9E:2B:3D:39:D5:61:20:87:12
Authority key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5
Certificate issuer:       /CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
Certificate serial:       417C9CCAD6C65DBB2F4D29B437F75CA7D21D3391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
Manifest number:          011F
Signing time:             Thu 23 Jul 2026 04:32:15 +0000
Manifest this update:     Thu 23 Jul 2026 04:27:15 +0000
Manifest next update:     Fri 24 Jul 2026 05:05:15 +0000
Files and hashes:         1: AS51087.asa (hash: X21QaHTZFlUThEZtGAbEPD7ITdq1PhcSgSjGdI55HPI=)
                          2: E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl (hash: Iq2PuTUHuT+9+IPwBOaq2SpvoMqP2U1anKM8XL7hKtg=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 05:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7c:9c:ca:d6:c6:5d:bb:2f:4d:29:b4:37:f7:5c:a7:d2:1d:33:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
        Validity
            Not Before: Jul 23 04:27:15 2026 GMT
            Not After : Jul 24 05:05:15 2026 GMT
        Subject: CN=F47F95B14F080D37B2A4529E2B3D39D561208712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:d0:29:58:db:78:58:8d:e8:e7:3c:75:51:
                    3b:26:cb:4c:c4:98:67:e2:38:84:81:ce:f2:d3:dd:
                    86:aa:df:e7:d6:99:f5:23:8c:77:4c:01:98:54:80:
                    75:45:de:d8:04:7b:46:cd:60:e2:11:f4:43:27:32:
                    24:6b:f1:1c:d8:c6:85:76:5a:1a:35:24:16:10:96:
                    88:d1:31:34:3e:c3:ea:c0:20:fb:2b:9e:61:47:33:
                    95:ed:7b:97:e1:12:e4:2b:ba:b7:e7:83:0d:88:06:
                    b5:b3:f8:32:c2:7f:9b:9c:5e:ef:76:35:7a:9c:26:
                    8b:30:ed:fa:f3:0a:49:41:d4:7f:c4:1e:0f:3e:94:
                    01:c9:27:d5:96:03:40:29:2e:95:77:d0:66:6d:ad:
                    94:49:7d:89:b7:01:b0:65:c7:c3:73:33:4c:0f:2c:
                    9b:b8:62:06:39:16:bd:37:48:1c:66:27:7d:80:1f:
                    9f:fd:c0:34:aa:c7:69:19:24:b9:b2:15:bb:c6:5f:
                    5a:5d:2c:a7:06:e8:b5:ad:b6:32:2f:9a:6a:92:44:
                    13:01:d4:c5:e0:16:06:93:ba:fd:c1:78:86:7f:b5:
                    01:79:2f:e9:93:3f:84:5a:48:1d:82:e4:13:4b:7a:
                    31:88:5d:6b:5a:ad:bc:8b:62:67:95:a2:e5:ee:9d:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:95:B1:4F:08:0D:37:B2:A4:52:9E:2B:3D:39:D5:61:20:87:12
            X509v3 Authority Key Identifier:
                keyid:E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:06:a0:11:97:44:11:84:02:0e:72:43:67:bd:f9:c2:ca:66:
         8f:3c:5a:b2:8d:58:38:7b:5f:89:3c:c3:f7:28:22:11:46:7d:
         5f:66:5e:d1:42:da:23:70:00:da:ec:ed:d7:27:b0:5a:29:da:
         2d:91:6e:89:a2:a6:a6:fc:eb:e1:01:93:71:db:67:e6:c6:1e:
         21:69:d6:45:68:cb:99:5d:08:af:7d:81:66:90:1f:4a:fb:b6:
         54:f8:3b:d6:d7:27:42:6b:a4:16:0b:e4:27:6d:df:58:fb:36:
         0c:96:91:89:97:95:50:da:b5:15:c2:c7:a9:01:fc:0c:34:27:
         78:32:9a:3a:6f:d7:84:d0:ee:61:46:8d:86:f3:f5:fd:5d:30:
         b1:43:9b:5c:cd:60:dd:3f:87:55:6f:ae:eb:6e:27:d0:fb:63:
         b0:26:d2:ba:f5:e8:3c:74:d0:d3:ff:23:1e:78:a1:4f:d4:8d:
         24:2f:f0:99:eb:69:f3:48:b4:44:88:c5:5a:76:ca:8a:0d:39:
         c3:8b:22:d4:57:bc:59:07:1f:25:ee:76:35:fa:8e:2a:41:c8:
         7e:8b:34:ed:34:7c:ce:c7:72:63:d6:8d:7a:ce:bd:d4:b5:47:
         d5:13:2e:75:66:af:3b:27:b2:e2:c1:b6:13:b1:ac:e0:67:2b:
         af:e8:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:03 2026 by rpki-client