Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
File:                     E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft (raw, json)
Hash identifier:          SbaG/EKbNgERhK4WV23tYSFRvq4bgVccolkuTdfo5Vk=
Subject key identifier:   8A:9B:00:99:CF:27:8D:37:66:2E:41:B5:6B:C1:0F:4E:14:26:AD:6C
Authority key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5
Certificate issuer:       /CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
Certificate serial:       514E6E29A0A82E7C65B75B9CC561257274713B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
Manifest number:          82
Signing time:             Wed 25 Mar 2026 13:36:53 +0000
Manifest this update:     Wed 25 Mar 2026 13:31:53 +0000
Manifest next update:     Thu 26 Mar 2026 16:34:53 +0000
Files and hashes:         1: E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl (hash: FtoCp+DL2jrYRXJ1IkYqgDYcWNXSyzzTvMTKHBwWO2o=)
                          2: AS51087.asa (hash: X21QaHTZFlUThEZtGAbEPD7ITdq1PhcSgSjGdI55HPI=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4e:6e:29:a0:a8:2e:7c:65:b7:5b:9c:c5:61:25:72:74:71:3b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
        Validity
            Not Before: Mar 25 13:31:53 2026 GMT
            Not After : Mar 26 16:34:53 2026 GMT
        Subject: CN=8A9B0099CF278D37662E41B56BC10F4E1426AD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b4:d3:4a:3a:ed:88:2d:fc:ed:4e:d7:9b:3d:
                    33:01:2d:fb:d6:e3:b2:1a:b8:8c:2e:3a:13:f1:d9:
                    c2:0f:21:7a:00:c4:82:0a:54:89:6a:0f:6e:23:c9:
                    95:06:6f:68:7a:a0:6f:1a:6a:70:90:51:d8:33:9b:
                    5a:9d:b5:8d:74:4f:10:53:56:88:fa:36:e5:1c:ff:
                    f4:6e:73:ea:9b:16:18:7e:cd:be:16:07:64:2f:d5:
                    4e:07:ee:58:c8:c4:ff:be:13:ff:d1:90:19:c4:9e:
                    42:ed:36:84:20:c7:27:91:5d:4e:0a:90:78:2d:d5:
                    e4:1f:cb:2c:5b:f1:90:91:70:88:f8:b8:62:37:5b:
                    ca:f4:4b:89:61:d7:a9:42:50:c2:61:4b:09:86:5f:
                    15:7b:c9:76:b5:83:03:e8:d8:71:dc:88:c0:8d:6f:
                    61:6e:bd:38:92:b7:52:d1:13:71:9a:10:cf:b9:81:
                    1a:13:be:af:bc:f4:76:33:f8:40:89:bd:c1:29:14:
                    23:fb:30:9f:70:6c:6f:33:d3:5c:ee:93:3f:0a:16:
                    43:14:35:eb:76:c1:34:bf:35:1b:0f:07:6c:bc:32:
                    0c:28:31:31:7f:a1:67:78:3f:ae:03:3a:28:86:51:
                    25:7b:fe:58:f2:4a:6b:18:65:ef:ee:a2:b6:5e:80:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:00:99:CF:27:8D:37:66:2E:41:B5:6B:C1:0F:4E:14:26:AD:6C
            X509v3 Authority Key Identifier:
                keyid:E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:38:55:e2:a6:01:a9:e4:80:ae:02:d3:ca:d0:c8:62:61:
         dc:c2:48:19:47:19:c0:06:b0:78:ee:88:94:03:17:7a:fb:8b:
         2d:fe:9d:ce:3b:c8:a0:0d:d9:6c:67:a7:b6:8a:a0:1c:eb:a7:
         1a:3c:e6:d2:81:25:e2:4c:ed:ae:dd:03:e1:db:46:8c:f0:c3:
         94:68:b9:98:55:c0:b3:88:b2:cb:4e:cc:13:84:26:e4:4c:7c:
         ab:62:0b:39:96:2a:40:ce:2c:83:73:5e:df:ce:93:7c:ee:26:
         c9:35:23:4e:3a:a1:a9:a9:08:be:7b:28:13:7f:e4:68:e7:f7:
         46:3e:6d:93:a7:d9:1f:59:d8:b2:52:6e:2e:aa:c0:bc:e6:e3:
         cf:a4:df:4d:79:3b:e1:88:ab:0d:73:3a:9b:b1:1b:ee:21:30:
         e2:dd:93:22:64:8a:9a:82:3b:de:d9:9b:5c:84:2c:62:79:dc:
         f9:aa:cf:7b:3b:80:2c:ba:4c:73:00:20:ba:4e:dc:f1:3a:36:
         59:bc:e1:d0:42:7f:d7:01:0a:ab:f5:98:27:64:30:24:6c:aa:
         4c:b3:3c:2a:fa:e2:18:44:43:c1:e5:3d:d4:93:6d:69:0e:77:
         48:52:ad:18:8a:c1:fa:5d:c5:25:ff:f9:3f:3c:6e:f7:20:7c:
         5b:b1:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:37 2026 by rpki-client