Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
File:                     E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft (raw, json)
Hash identifier:          Sl4sTnSdPDvE6VZiWRXMuS55eUbtmVRBj9rLX0O6l2k=
Subject key identifier:   93:70:1A:A7:CD:FD:7B:20:84:B3:B2:45:0B:DC:98:9B:4C:15:13:3D
Authority key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5
Certificate issuer:       /CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
Certificate serial:       06DF0D9320C793C7B6C410AE8F99BEB398FABDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
Manifest number:          C2
Signing time:             Tue 12 May 2026 14:38:52 +0000
Manifest this update:     Tue 12 May 2026 14:33:52 +0000
Manifest next update:     Wed 13 May 2026 18:05:52 +0000
Files and hashes:         1: E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl (hash: ipHxCPO8QaVN/+cN5WNqyBL1k7ue7bqCPSLHFoULBEQ=)
                          2: AS51087.asa (hash: X21QaHTZFlUThEZtGAbEPD7ITdq1PhcSgSjGdI55HPI=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:0d:93:20:c7:93:c7:b6:c4:10:ae:8f:99:be:b3:98:fa:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
        Validity
            Not Before: May 12 14:33:52 2026 GMT
            Not After : May 13 18:05:52 2026 GMT
        Subject: CN=93701AA7CDFD7B2084B3B2450BDC989B4C15133D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:50:2e:aa:0c:f6:0d:6e:03:29:9b:58:a7:
                    3b:fa:42:24:e8:a0:83:8e:52:1f:d3:c2:8e:00:68:
                    fd:15:6b:ae:c8:c4:35:7b:34:b7:fc:6b:dd:02:0e:
                    5d:e8:3b:ba:e9:66:13:a1:9f:70:d6:cb:1f:f2:0b:
                    d7:4d:d4:6b:ef:7e:72:d3:33:fe:64:89:e6:b5:64:
                    0d:a2:45:9a:02:03:9c:6a:ef:1a:1a:c8:7e:9b:85:
                    e4:5e:a3:6f:da:4b:68:8a:74:be:a0:55:d1:3d:ec:
                    8e:74:83:51:24:18:dd:47:c4:f3:56:e2:7d:e0:7f:
                    7a:b3:3c:0d:dd:d2:67:3d:3f:4c:79:b8:ed:4a:cf:
                    8e:cf:22:da:1e:75:b7:5b:68:a7:7b:1c:84:c5:40:
                    d4:aa:7a:1b:ad:a8:f5:80:60:64:61:20:5f:19:78:
                    d7:5b:80:8f:c8:e4:c9:2c:27:3c:f3:8a:18:8a:54:
                    96:e5:a6:5f:0d:2c:31:53:5b:18:66:64:0b:49:47:
                    ff:17:df:91:e5:9e:a7:22:13:57:59:07:7f:0d:6f:
                    b7:46:ba:18:39:a8:75:29:31:99:62:a8:55:39:c1:
                    75:92:99:50:43:c3:12:ff:0d:ae:45:e8:01:aa:57:
                    93:71:20:8b:70:42:4d:c0:9c:5a:7f:8b:12:0f:14:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:70:1A:A7:CD:FD:7B:20:84:B3:B2:45:0B:DC:98:9B:4C:15:13:3D
            X509v3 Authority Key Identifier:
                keyid:E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:e2:9b:8e:b6:a1:ff:30:cd:59:fc:c1:c6:86:0c:1a:d5:
         be:43:4b:3d:05:df:e0:ae:e1:1c:78:7b:1c:e3:c9:29:47:92:
         3b:51:f9:0f:eb:39:ea:b2:79:02:5b:50:06:ad:00:ac:89:78:
         41:02:9c:93:40:7b:55:22:07:dc:45:f1:71:66:c8:dd:8c:02:
         f8:12:65:56:ee:72:de:ce:6c:3f:9f:63:19:80:4f:24:f3:bb:
         89:b8:9a:4f:14:b9:8c:ac:f2:4c:56:f4:e4:28:2b:de:bc:4c:
         27:b7:cc:e2:aa:29:cb:73:23:38:11:e6:7b:e5:7f:37:1d:a7:
         3d:62:24:82:4a:88:b6:03:5d:3f:b8:d4:0d:eb:f3:36:b1:00:
         ff:43:49:32:46:5e:62:f2:6d:8f:e8:8a:21:a2:af:39:74:9f:
         14:d1:6e:6f:51:3b:d5:68:e8:89:72:fb:61:d5:ca:3b:be:60:
         3d:35:52:06:d1:c6:fe:89:a2:44:06:04:db:bc:cd:44:55:d2:
         42:58:34:1a:13:ca:da:4a:a9:85:2a:9d:21:5e:98:5a:35:9e:
         a2:c8:ba:99:e4:f8:82:13:20:68:2a:83:12:1b:ba:34:ce:58:
         a9:2c:0e:2f:0f:c5:2a:1b:2f:28:24:ed:c2:89:7e:3c:b8:90:
         df:2c:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:04 2026 by rpki-client