Manifest

$ rpki-client -vvf rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
File:                     29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft (raw, json)
Hash identifier:          kuDxEd9cpe/agmwovauCdElr2+IgmUMzgGs8+GZGPBg=
Subject key identifier:   81:67:2B:15:B3:27:F5:40:D5:82:CD:25:6F:A2:D3:69:57:6A:BC:ED
Authority key identifier: 29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED
Certificate issuer:       /CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
Certificate serial:       2163FFBAA90425F6B8067351B2F06C485D0CECC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
Subject info access:      rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
Manifest number:          03
Signing time:             Thu 23 Jul 2026 15:47:50 +0000
Manifest this update:     Thu 23 Jul 2026 15:42:50 +0000
Manifest next update:     Fri 24 Jul 2026 19:24:50 +0000
Files and hashes:         1: AS211729.asa (hash: mTGN85Z+jfCpo9DXHVHzuZrpZHRsSvPzP6aXO1ZNtC0=)
                          2: 29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl (hash: Cz2bK/LT3U/9ootBKYek4CahqkS4qG8B9ekfIxzKvds=)
Validation:               OK
Signature path:           rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl
                          rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:63:ff:ba:a9:04:25:f6:b8:06:73:51:b2:f0:6c:48:5d:0c:ec:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
        Validity
            Not Before: Jul 23 15:42:50 2026 GMT
            Not After : Jul 24 19:24:50 2026 GMT
        Subject: CN=81672B15B327F540D582CD256FA2D369576ABCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:64:41:d9:13:1f:6d:f2:bd:cc:82:b3:a4:
                    4c:a5:e4:b2:a8:9b:a0:dd:a3:9c:b5:f6:0b:fb:77:
                    e6:2a:a6:db:be:2d:45:4f:ea:f0:e3:df:8b:2b:5e:
                    52:17:d4:ab:1d:67:6d:b1:c3:de:d0:fd:04:67:b5:
                    51:b2:56:3e:04:f4:75:0c:25:83:9b:51:22:d6:3f:
                    c2:f2:6f:e6:7d:07:f8:2e:da:4c:1b:8b:de:b7:54:
                    23:24:3e:47:43:7f:b4:be:4b:b4:71:1f:a4:97:6f:
                    89:6d:20:5a:39:25:94:d0:0e:af:b8:03:43:ac:71:
                    3b:e8:49:cb:d4:01:e7:59:2d:95:60:b0:21:7a:f3:
                    c6:8c:04:fb:4e:4c:1c:a8:48:09:d4:e3:57:00:f7:
                    8b:02:20:0b:42:86:80:10:53:55:a1:98:31:81:04:
                    50:9a:2c:78:06:07:23:86:dc:5e:72:d3:4c:99:df:
                    e0:6f:ba:e8:7d:ec:32:b2:8b:8f:f0:d5:c0:b4:dd:
                    f6:23:48:c7:1a:f3:7a:a3:36:3f:03:14:ef:62:b7:
                    f6:f3:f7:b3:af:58:57:d0:e6:fd:ff:e2:ff:fd:c5:
                    57:ad:96:86:7a:c0:27:3a:58:f4:85:91:f0:7d:d2:
                    f1:75:52:9d:47:ae:88:26:df:62:36:8f:cd:ec:9d:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:2B:15:B3:27:F5:40:D5:82:CD:25:6F:A2:D3:69:57:6A:BC:ED
            X509v3 Authority Key Identifier:
                keyid:29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:36:ff:9f:aa:2b:ac:31:9b:94:37:54:9a:f9:7a:ff:a3:b0:
         ee:47:4a:8b:1d:23:29:bc:49:dd:fe:60:32:7b:52:05:0b:b4:
         9b:70:f1:af:e2:34:46:58:7a:4c:92:94:b3:a6:c4:34:30:72:
         08:6a:91:a0:c9:da:d8:cb:c7:fe:48:3b:38:ab:d8:d8:c7:20:
         0b:05:a0:63:11:94:46:ab:04:6a:85:b5:02:af:f2:b0:95:e6:
         a1:fe:fd:4a:36:63:f5:15:a1:42:ee:2c:db:f2:45:5d:c7:2b:
         b6:da:58:3d:84:5f:72:4b:4e:bd:44:fa:e1:ae:79:25:b7:fb:
         a6:19:41:78:de:a1:ca:bb:67:74:26:5c:02:8f:22:2b:68:da:
         96:f1:4d:bb:12:c9:71:d5:d6:d8:23:cd:eb:b0:28:b5:e0:03:
         4a:fb:e2:94:36:df:39:28:fe:94:08:86:6e:85:c7:09:fb:b9:
         e3:7e:27:87:78:f2:26:b0:ef:60:75:46:91:aa:ec:20:de:38:
         59:c8:e5:4d:83:96:37:dc:7d:e9:9f:53:3b:ae:fa:85:db:c3:
         60:9a:fa:fb:8a:d4:82:26:10:83:ce:b5:b0:70:02:71:6c:71:
         f9:38:ab:68:2f:b9:8d:49:84:94:cb:c0:a8:3f:52:64:5d:5b:
         bf:03:88:89
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUIWP/uqkEJfa4BnNRsvBsSF0M7McwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjljOGU3NzJlNjhiMmJmNTBkOGI2ZTJhZTkxOWFkNTli
Y2MyOWVlZDAeFw0yNjA3MjMxNTQyNTBaFw0yNjA3MjQxOTI0NTBaMDMxMTAvBgNV
BAMTKDgxNjcyQjE1QjMyN0Y1NDBENTgyQ0QyNTZGQTJEMzY5NTc2QUJDRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdmRB2RMfbfK9zIKzpEyl5LKo
m6Ddo5y19gv7d+Yqptu+LUVP6vDj34srXlIX1KsdZ22xw97Q/QRntVGyVj4E9HUM
JYObUSLWP8Lyb+Z9B/gu2kwbi963VCMkPkdDf7S+S7RxH6SXb4ltIFo5JZTQDq+4
A0OscTvoScvUAedZLZVgsCF688aMBPtOTByoSAnU41cA94sCIAtChoAQU1WhmDGB
BFCaLHgGByOG3F5y00yZ3+Bvuuh97DKyi4/w1cC03fYjSMca83qjNj8DFO9it/bz
97OvWFfQ5v3/4v/9xVetloZ6wCc6WPSFkfB90vF1Up1Hrogm32I2j83sndVXAgMB
AAGjggIDMIIB/zAdBgNVHQ4EFgQUgWcrFbMn9UDVgs0lb6LTaVdqvO0wHwYDVR0j
BBgwFoAUKcjncuaLK/UNi24q6RmtWbzCnu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS5uZXQuYmFpeXVleGlhby5jbi9yZXBv
L0JBSVlVRVhJQU8tUlBLSS8wLzI5QzhFNzcyRTY4QjJCRjUwRDhCNkUyQUU5MTlB
RDU5QkNDMjlFRUQuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LY2puY3VhTEtf
VU5pMjRxNlJtdFdiekNudTAuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcw
C4ZicnN5bmM6Ly9ycGtpLm5ldC5iYWl5dWV4aWFvLmNuL3JlcG8vQkFJWVVFWElB
Ty1SUEtJLzAvMjlDOEU3NzJFNjhCMkJGNTBEOEI2RTJBRTkxOUFENTlCQ0MyOUVF
RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAY2/5+qK6wxm5Q3VJr5ev+jsO5HSosdIym8Sd3+YDJ7UgUL
tJtw8a/iNEZYekySlLOmxDQwcghqkaDJ2tjLx/5IOzir2NjHIAsFoGMRlEarBGqF
tQKv8rCV5qH+/Uo2Y/UVoULuLNvyRV3HK7baWD2EX3JLTr1E+uGueSW3+6YZQXje
ocq7Z3QmXAKPIito2pbxTbsSyXHV1tgjzeuwKLXgA0r74pQ23zko/pQIhm6Fxwn7
ueN+J4d48iaw72B1RpGq7CDeOFnI5U2DljfcfemfUzuu+oXbw2Ca+vuK1IImEIPO
tbBwAnFscfk4q2gvuY1JhJTLwKg/UmRdW78DiIk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:34 2026 by rpki-client