Manifest

$ rpki-client -vvf rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
File:                     29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft (raw, json)
Hash identifier:          2G6DE9t4bh7ou4h/HTIfZseOmDg9KuYm28Fg1NrWGSg=
Subject key identifier:   5E:DE:6F:5A:8E:C6:5A:9A:6C:9E:A6:A8:7D:66:5A:63:58:6A:77:96
Authority key identifier: 29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED
Certificate issuer:       /CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
Certificate serial:       2A59A7D30623E1FCB371914B28097CDBD868E853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
Subject info access:      rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
Manifest number:          0B
Signing time:             Tue 28 Jul 2026 06:46:42 +0000
Manifest this update:     Tue 28 Jul 2026 06:41:42 +0000
Manifest next update:     Wed 29 Jul 2026 09:23:42 +0000
Files and hashes:         1: 29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl (hash: amM8DOv+Rw91h81QJfZZTZtByh5Ib9Lf6g4GrkMZRQg=)
                          2: AS211729.asa (hash: kGn5QaRv9Xkw/W3JFWql+Iy82+7B1skiepaUclJBt2c=)
Validation:               OK
Signature path:           rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl
                          rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:59:a7:d3:06:23:e1:fc:b3:71:91:4b:28:09:7c:db:d8:68:e8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
        Validity
            Not Before: Jul 28 06:41:42 2026 GMT
            Not After : Jul 29 09:23:42 2026 GMT
        Subject: CN=5EDE6F5A8EC65A9A6C9EA6A87D665A63586A7796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:b5:a3:74:c8:b3:99:7a:f3:cc:0e:29:6f:
                    0e:ff:86:cd:0e:e5:2f:e4:9f:77:81:86:31:df:e4:
                    ad:71:87:eb:24:aa:ef:42:c3:b8:a5:05:fd:9d:20:
                    97:c6:44:df:a3:44:65:e7:d8:51:3f:a5:c5:ff:01:
                    de:94:89:79:e7:6e:2d:9d:e8:48:a1:ce:c6:df:f7:
                    4f:53:9b:5d:fb:50:53:d3:eb:5d:56:53:c2:ed:11:
                    97:f9:de:2a:8f:d4:0b:02:8c:45:ac:70:61:41:b6:
                    96:80:3f:84:cf:60:6f:88:3c:71:c2:f0:dd:0a:31:
                    00:0e:b4:ad:86:a8:2d:c6:b0:58:78:06:e5:2a:98:
                    14:aa:d7:0b:71:b4:78:13:00:8a:4e:3d:49:b2:0c:
                    92:e6:83:2a:39:d7:9a:42:f6:fe:8f:c9:00:e6:d4:
                    f0:5e:5e:4e:01:86:52:b1:d5:73:3f:f7:e1:76:a8:
                    1d:63:0f:bd:0a:8d:eb:bd:19:5a:2f:ed:d6:33:d0:
                    cc:74:b1:f6:22:d0:fd:88:b2:ed:5a:88:d8:e0:88:
                    d0:df:75:1a:6c:a5:d0:2e:ca:4f:b8:77:fe:a8:fc:
                    02:3b:4c:81:22:39:f4:66:77:86:0a:41:32:d7:dd:
                    b8:ca:0f:33:c0:2f:7c:6a:ee:16:7f:6e:72:98:77:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DE:6F:5A:8E:C6:5A:9A:6C:9E:A6:A8:7D:66:5A:63:58:6A:77:96
            X509v3 Authority Key Identifier:
                keyid:29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:28:2d:22:1f:79:9d:c7:d3:42:95:01:55:81:9c:03:0f:61:
         1e:6b:3e:43:2f:83:b3:59:b4:69:2a:3e:b9:a3:34:eb:9f:63:
         ac:70:35:3a:2b:3a:16:2b:2f:71:32:17:5d:33:02:7d:3f:84:
         5b:e9:42:b0:9c:97:67:8e:22:e3:49:07:83:79:75:39:32:af:
         9b:98:5c:54:13:9f:74:bd:a3:91:90:a8:3a:97:18:03:14:ba:
         20:8b:d5:9c:fe:5b:ba:de:46:ec:75:47:6d:9a:bc:89:61:3c:
         3e:78:fc:05:3b:d4:5b:eb:db:f4:98:ba:f1:bf:5a:d3:1e:1c:
         21:10:ab:0f:84:93:9e:a9:bb:13:2f:98:6c:b6:02:26:fd:d8:
         e6:81:3a:fb:19:93:db:ff:0d:91:a7:e1:4e:bb:c6:cd:21:03:
         7e:50:aa:5e:ab:62:48:a7:91:25:ef:86:a8:03:e7:76:39:fc:
         65:1c:62:a0:97:3c:69:e1:c0:51:52:be:64:84:4f:f7:09:a2:
         55:f0:a2:57:76:6e:b3:19:e8:ab:0c:cf:f3:30:79:93:bc:cf:
         de:99:fc:43:3e:42:8d:03:ad:39:24:78:e1:86:46:89:7a:48:
         85:1e:76:2a:2e:61:b7:89:47:45:aa:27:70:ca:ee:d4:b3:9d:
         ba:95:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:56 2026 by rpki-client