Manifest

$ rpki-client -vvvf rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
File:                     29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft (raw, json)
Hash identifier:          6v3ziq2k4FAtT2vJ/vnGZd6CwA7ArtwLbDbtA4nSrBY=
Subject key identifier:   3A:7A:B8:4F:D3:D4:06:FA:67:8C:32:8D:55:27:DD:51:E9:4F:B8:98
Authority key identifier: 29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED
Certificate issuer:       /CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
Certificate serial:       0AF1B209C97A0FF5CD5A6D3E084AAF817FE5E592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
Subject info access:      rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
Manifest number:          64
Signing time:             Tue 29 Sep 2026 03:04:03 +0000
Manifest this update:     Tue 29 Sep 2026 02:59:03 +0000
Manifest next update:     Wed 30 Sep 2026 04:09:03 +0000
Files and hashes:         1: AS211729.asa (hash: 1Ft+zFWT+0bjK657kpHiQhrozvlvCVZY3qzHQ6KDPZU=)
                          2: 29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl (hash: 9l3QNkm2q6LmvK9PrmEOZuTJWBZ2K4jBR2tnOXV7PV8=)
Validation:               OK
Signature path:           rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl
                          rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 04:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f1:b2:09:c9:7a:0f:f5:cd:5a:6d:3e:08:4a:af:81:7f:e5:e5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
        Validity
            Not Before: Sep 29 02:59:03 2026 GMT
            Not After : Sep 30 04:09:03 2026 GMT
        Subject: CN=3A7AB84FD3D406FA678C328D5527DD51E94FB898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:32:b0:52:be:50:4b:72:55:62:3d:ef:31:
                    4b:b9:42:41:f6:bd:f8:4a:ad:0f:1f:e2:5f:f8:f7:
                    ba:eb:4a:bb:17:a7:09:11:19:68:24:42:8f:f9:12:
                    e0:d9:72:e0:d6:cb:33:b0:51:f4:8a:45:82:09:83:
                    84:64:db:db:ce:cc:c7:ea:54:da:88:bc:50:7d:12:
                    3a:71:d1:01:b7:87:58:4e:8c:de:01:3b:83:12:25:
                    07:1e:79:67:4a:f3:f3:c8:98:e5:58:fc:1b:60:83:
                    1d:16:63:3c:51:38:b8:78:a3:e4:6f:cf:c1:49:2e:
                    9d:59:df:be:ba:a6:6b:ac:6a:25:09:3f:1f:cb:64:
                    7f:8c:f6:fc:61:5a:76:42:fa:4c:fd:84:d0:11:42:
                    3c:d1:13:ce:66:09:81:c7:de:8b:d4:d5:35:c4:91:
                    9c:48:cf:da:8b:a4:f2:2a:5c:41:e9:7a:09:86:bb:
                    fc:5d:38:ba:0a:f3:87:f7:7e:5e:69:ad:f3:db:b6:
                    51:61:f7:2b:79:57:a7:eb:e0:f7:d8:dd:da:72:2c:
                    2a:93:99:69:2f:3f:e8:51:83:74:69:36:97:b9:2a:
                    fc:fb:ce:d7:f6:ca:ff:8d:35:ab:5b:4a:86:cd:36:
                    0d:3f:85:52:d6:34:ff:91:19:66:fc:71:21:dd:a5:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7A:B8:4F:D3:D4:06:FA:67:8C:32:8D:55:27:DD:51:E9:4F:B8:98
            X509v3 Authority Key Identifier:
                keyid:29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:37:2b:16:f9:87:ee:51:46:df:cd:ec:78:55:4b:79:3f:a3:
         91:64:a3:1e:96:4f:21:d8:b2:ec:7b:fc:67:87:65:ff:6e:a5:
         e5:8e:0c:ff:4c:d6:a7:a0:f6:57:35:71:6b:89:17:24:d2:26:
         d6:46:67:3f:f9:ba:ed:9a:4b:62:37:68:94:33:92:fd:38:bf:
         77:0e:f9:7d:38:4b:98:ba:82:29:a5:34:39:e8:b5:44:a1:d0:
         f0:1d:d6:77:78:af:d2:40:4c:93:00:4a:a3:b7:17:7e:1c:5c:
         ef:6d:4e:c2:49:90:71:3f:5d:e9:19:a4:b2:ca:43:44:45:ad:
         31:c7:1f:ca:08:c7:5b:4d:fc:0f:4f:48:ef:ec:e6:24:ec:c8:
         d9:8b:90:92:ad:ca:cc:a3:06:fb:ae:93:ad:44:a0:52:3c:d5:
         67:5c:55:6b:15:e0:1f:b4:d2:f3:76:c6:b8:5d:e3:54:19:77:
         23:ff:0b:e3:5c:5e:c4:21:63:b3:05:f6:c1:3e:12:81:11:f7:
         ff:e4:d5:c5:f1:8c:5d:b7:5d:3b:72:2b:e1:79:31:d4:fa:96:
         00:dd:c8:e4:7f:a5:68:5f:13:bc:c3:e8:c4:44:1a:d0:d0:b8:
         6c:37:bd:7c:ec:28:a0:b9:c8:c3:7b:c5:fe:25:ae:31:f1:1c:
         05:97:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:42:22 2026 by rpki-client