Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
File:                     E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft (raw, json)
Hash identifier:          jzg/yhpWUQWPCWSUGQWhJkuG4KbvkMB6Fkttb8w6W40=
Subject key identifier:   BB:E9:91:E6:2C:93:E7:0D:BB:DD:23:74:1C:9E:6B:65:08:26:99:4A
Authority key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5
Certificate issuer:       /CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
Certificate serial:       2E3AF4426ED7626063CC5D8A54AFCA36AB724063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
Manifest number:          0126
Signing time:             Tue 28 Jul 2026 09:32:20 +0000
Manifest this update:     Tue 28 Jul 2026 09:27:20 +0000
Manifest next update:     Wed 29 Jul 2026 10:48:20 +0000
Files and hashes:         1: E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl (hash: LP0Sz0VDs8p6+nSpaQ/AshtlgTZf3wzLBrnpPRtQYEQ=)
                          2: AS51087.asa (hash: X21QaHTZFlUThEZtGAbEPD7ITdq1PhcSgSjGdI55HPI=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3a:f4:42:6e:d7:62:60:63:cc:5d:8a:54:af:ca:36:ab:72:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
        Validity
            Not Before: Jul 28 09:27:20 2026 GMT
            Not After : Jul 29 10:48:20 2026 GMT
        Subject: CN=BBE991E62C93E70DBBDD23741C9E6B650826994A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:65:44:a0:23:73:bf:42:ab:47:d6:c3:02:
                    28:9d:3a:ca:d5:50:e2:15:fd:aa:42:17:11:fe:8f:
                    14:6e:37:47:fe:e3:e3:03:d0:4d:5b:bc:81:8b:8f:
                    f3:a9:0f:9b:16:3b:3d:ad:08:29:2c:83:62:50:56:
                    50:63:86:af:14:da:40:c9:76:e6:47:61:84:97:e2:
                    17:e3:8b:af:33:d4:d5:3d:93:7f:f6:12:50:d9:80:
                    c4:10:b8:0f:28:30:1f:ae:a7:02:c6:49:a3:50:68:
                    5c:2b:01:06:6e:23:06:27:d9:07:ee:e6:e8:1c:f0:
                    a3:50:e4:07:8f:d1:d6:92:82:c3:7c:27:5c:08:a5:
                    24:5f:ec:5b:38:66:68:43:77:7b:03:7d:ab:2c:4d:
                    93:9e:18:7a:db:86:57:b7:5c:05:98:bd:26:f0:4b:
                    8e:d1:f3:54:04:73:20:1d:78:ef:8b:8a:7b:cd:c0:
                    b5:03:30:52:53:9a:af:a4:26:cd:91:f2:7d:a1:31:
                    9e:d4:2a:11:f4:83:2a:72:4b:7d:6a:1a:1e:c6:36:
                    49:87:f0:01:b1:cf:8e:92:66:37:9d:c8:82:8d:7b:
                    36:91:02:67:55:d5:a4:fe:e4:f9:dc:c2:65:93:40:
                    a2:0c:ff:15:4d:f1:32:a7:79:e4:46:19:53:42:9c:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:91:E6:2C:93:E7:0D:BB:DD:23:74:1C:9E:6B:65:08:26:99:4A
            X509v3 Authority Key Identifier:
                keyid:E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:f6:77:62:62:b6:e5:65:1a:b1:03:65:91:49:4e:88:82:
         58:66:f8:3b:74:b7:ff:88:ac:21:27:31:72:24:95:8a:9c:a8:
         cc:f7:e9:dc:cb:2d:c7:08:ad:61:90:c7:a1:d6:31:66:5c:73:
         7e:63:82:cd:38:06:a4:08:16:d1:ae:c1:bf:82:a3:1f:42:7e:
         12:27:11:2e:2e:ad:39:6a:20:cd:e0:70:c7:d7:b0:4e:ad:c4:
         63:e5:44:db:95:dc:d0:0c:ee:9e:a3:c4:05:e6:39:de:99:ee:
         12:47:12:40:a0:9e:5e:57:9e:82:41:85:0a:f8:c3:43:87:5c:
         9f:0b:a7:31:1d:42:d2:4d:f2:f4:c4:29:89:be:97:9d:e9:3b:
         19:e7:b8:ee:c5:08:55:48:fb:54:33:55:04:a9:1d:a8:f1:e7:
         de:66:72:14:43:be:5f:36:cd:d8:56:a3:7f:6b:e0:94:15:17:
         35:fa:f1:01:2e:d1:6f:7b:61:f5:b2:09:54:92:6e:17:d9:16:
         eb:60:aa:ca:7e:e5:30:26:0f:51:fb:fa:0f:36:57:80:f8:fb:
         f1:15:4f:a4:60:ec:36:41:c3:21:26:85:7b:aa:9e:fc:0d:a6:
         ca:dc:b6:35:53:f2:10:70:d6:23:01:a3:74:36:4d:e2:bf:58:
         79:8c:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:23 2026 by rpki-client