Manifest

$ rpki-client -vvvf rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft
File:                     15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft (raw, json)
Hash identifier:          DZi393a+J3vdxd7hMVAFEpxox16/LNENTgpG9YxAXQ0=
Subject key identifier:   3D:9E:FB:16:61:94:91:49:64:8B:A4:0F:6F:5F:C3:8D:D9:9C:D1:D6
Authority key identifier: 15:BB:7E:17:BF:92:E2:C5:2C:A3:56:DF:48:BB:B5:A0:BF:EE:D4:AA
Certificate issuer:       /CN=15bb7e17bf92e2c52ca356df48bbb5a0bfeed4aa
Certificate serial:       5A22DE96EE72F76D61839938F44FC8D39A35F145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbt-F7-S4sUso1bfSLu1oL_u1Ko.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft
Manifest number:          7A
Signing time:             Thu 05 Nov 2026 11:24:42 +0000
Manifest this update:     Thu 05 Nov 2026 11:19:42 +0000
Manifest next update:     Fri 06 Nov 2026 12:55:42 +0000
Files and hashes:         1: AS51087.asa (hash: iAaqlMtS+JhEidtH76aJ970Ycbnmi/cUPg7T73kMYYc=)
                          2: 15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.crl (hash: 4w27Cd0cg5y4GhjpcoMn0SJ2D7Ike/UG+U91F3ZbqFs=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.crl
                          rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fbt-F7-S4sUso1bfSLu1oL_u1Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:22:de:96:ee:72:f7:6d:61:83:99:38:f4:4f:c8:d3:9a:35:f1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15bb7e17bf92e2c52ca356df48bbb5a0bfeed4aa
        Validity
            Not Before: Nov  5 11:19:42 2026 GMT
            Not After : Nov  6 12:55:42 2026 GMT
        Subject: CN=3D9EFB1661949149648BA40F6F5FC38DD99CD1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:c4:63:6d:d3:81:e0:47:54:d0:16:ab:00:
                    79:e1:62:24:f4:f4:7e:87:99:e0:ad:63:6d:60:89:
                    9f:0a:02:16:22:79:0a:02:e9:d3:01:3d:77:8f:f9:
                    7c:49:fc:74:f6:93:a5:44:eb:79:ee:b0:b8:e0:23:
                    dc:0e:56:bc:dd:3d:f2:34:00:5b:f0:67:5f:1f:15:
                    55:fe:64:6c:e8:1a:7f:cb:31:7f:c2:fb:41:9b:11:
                    6a:0b:3e:7f:a1:2b:32:fa:43:a2:c3:cc:b6:d1:e5:
                    7c:5f:5b:be:1c:06:e4:66:34:f1:4d:bb:cd:0b:18:
                    5b:dc:6e:08:26:12:24:df:42:40:3a:fc:95:8e:f9:
                    ac:5d:9e:01:75:67:bd:8c:2c:7a:9d:eb:58:8d:ca:
                    25:22:9c:33:bc:eb:29:e5:0c:89:1a:f9:f7:3a:95:
                    47:cc:f4:bd:1b:b6:9d:38:53:4a:3b:3b:e1:f0:9d:
                    b9:82:14:4d:8b:f0:5f:b0:e5:f1:a3:42:b0:e7:30:
                    72:35:bf:3d:2a:9a:97:75:3a:6b:c4:f8:30:3b:e6:
                    6b:59:a1:b8:67:4c:8b:35:80:06:47:9f:de:23:4f:
                    2e:51:34:e6:b0:f2:aa:24:90:cc:3e:82:e9:a8:26:
                    36:34:82:70:38:0c:2d:5d:29:1e:af:5d:01:b1:ae:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9E:FB:16:61:94:91:49:64:8B:A4:0F:6F:5F:C3:8D:D9:9C:D1:D6
            X509v3 Authority Key Identifier:
                keyid:15:BB:7E:17:BF:92:E2:C5:2C:A3:56:DF:48:BB:B5:A0:BF:EE:D4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbt-F7-S4sUso1bfSLu1oL_u1Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:45:f9:d7:bb:d6:bc:5b:c6:7c:0f:35:cb:1e:d0:3a:30:
         1b:77:89:3a:80:c5:7a:aa:5f:f0:b9:c3:21:5d:9b:c6:85:ae:
         8e:bd:72:68:d3:71:6a:33:74:13:13:1d:c4:c4:a7:a0:0f:83:
         a4:0c:7d:4a:c2:1b:bd:94:08:eb:ab:de:36:27:58:45:bb:3c:
         c2:b1:ba:67:1f:14:25:c6:cf:00:1b:e6:a8:f5:51:a6:40:f8:
         e2:63:2a:56:67:6d:0d:9b:ef:81:f9:1b:8a:0c:4e:e4:97:2a:
         c1:3e:22:77:f9:5b:fe:ed:56:60:a8:18:de:66:91:61:3a:6c:
         9a:65:56:0b:a6:be:66:3c:54:d8:b8:14:71:d7:d4:15:4c:9d:
         92:58:a7:48:9e:72:22:e5:d2:b7:52:1c:38:01:b8:d2:cf:82:
         30:60:90:bc:1c:af:40:cb:bd:0b:11:50:57:e6:75:93:d7:35:
         2d:8a:b1:84:ab:f8:c7:96:5b:91:7c:17:c8:76:58:a1:16:c2:
         61:7a:cc:dc:33:00:b6:9f:23:f9:4f:b6:bf:26:09:95:5c:22:
         84:c1:7b:ac:22:d7:b1:b1:f7:24:5d:49:71:4e:43:17:db:95:
         73:e9:61:ee:d5:28:bc:38:68:cb:c6:2d:c0:ed:3f:20:22:9f:
         2a:df:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:34:54 2026 by rpki-client