Manifest

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.mft
File:                     C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.mft (raw, json)
Hash identifier:          0McUgGH+c0nVDrfCKargEHxM2Qw2D7rKZ03qVkKeLTw=
Subject key identifier:   62:68:8B:C6:0D:96:9A:44:9F:EB:EB:94:A2:CF:1F:D8:97:FE:6E:52
Authority key identifier: C5:D9:C6:8A:36:AE:4E:EA:FE:D3:C1:CB:55:1A:B4:B4:93:92:23:16
Certificate issuer:       /CN=c5d9c68a36ae4eeafed3c1cb551ab4b493922316
Certificate serial:       4523A90DE0F1024530C28F5BB75E3A7CECB84574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xdnGijauTur-08HLVRq0tJOSIxY.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.mft
Manifest number:          20
Signing time:             Mon 10 Nov 2025 19:48:28 +0000
Manifest this update:     Mon 10 Nov 2025 19:43:28 +0000
Manifest next update:     Tue 11 Nov 2025 21:56:28 +0000
Files and hashes:         1: 3139352e3234362e3139332e302f32342d3234203d3e20393435.roa (hash: jsTf8D8yFHBS3GAf0QfoyLYBJV3quCvvYc3zarbIMGY=)
                          2: C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.crl (hash: dsiKV0t8gBDcXgoMYLxoNDC1vQ0ZTWJQE5FBW2mwVqo=)
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.crl
                          rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xdnGijauTur-08HLVRq0tJOSIxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Nov 2025 21:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:23:a9:0d:e0:f1:02:45:30:c2:8f:5b:b7:5e:3a:7c:ec:b8:45:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5d9c68a36ae4eeafed3c1cb551ab4b493922316
        Validity
            Not Before: Nov 10 19:43:28 2025 GMT
            Not After : Nov 11 21:56:28 2025 GMT
        Subject: CN=62688BC60D969A449FEBEB94A2CF1FD897FE6E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:d2:f4:6a:d5:46:8b:a4:bd:ac:5c:51:c3:
                    0c:81:e1:a1:82:6a:f2:de:63:79:cb:b0:7e:d2:9e:
                    49:d1:e6:93:68:5d:aa:e7:75:c5:d3:95:83:90:a7:
                    ab:9d:b2:78:fc:18:72:f2:c3:d8:7a:ea:57:f3:b2:
                    1a:a0:b4:c6:13:4d:62:8d:b9:00:0b:54:eb:f4:8e:
                    4a:3a:52:24:fe:ed:89:eb:28:bd:b0:7b:ad:8e:52:
                    01:ba:4d:01:80:5a:83:fb:60:50:62:34:69:19:20:
                    c5:87:c6:5b:44:c4:e0:1b:5d:29:3f:f0:03:01:4d:
                    6f:ca:c9:37:82:9e:85:20:72:fd:c3:2b:72:53:a7:
                    24:3d:6f:07:29:82:8c:da:21:55:2c:35:8f:92:ac:
                    96:aa:12:7a:ce:8e:2e:12:06:f2:8b:c1:6c:11:2d:
                    c8:a0:d2:3a:a8:69:4b:59:20:14:85:d7:32:8e:cf:
                    88:a9:90:5b:3c:70:cb:c0:50:78:68:8f:28:b3:b1:
                    33:b0:05:82:25:ca:ba:98:54:ee:30:53:f1:f8:31:
                    a3:fc:ea:ec:06:cf:84:0b:0b:1d:bf:d5:ed:40:5b:
                    c8:18:67:77:64:52:7a:23:ac:cd:12:a9:d0:f5:f0:
                    bd:6a:02:37:8e:12:ab:18:04:13:75:6a:92:ad:e7:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:68:8B:C6:0D:96:9A:44:9F:EB:EB:94:A2:CF:1F:D8:97:FE:6E:52
            X509v3 Authority Key Identifier:
                keyid:C5:D9:C6:8A:36:AE:4E:EA:FE:D3:C1:CB:55:1A:B4:B4:93:92:23:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdnGijauTur-08HLVRq0tJOSIxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:af:6b:3c:ed:30:fb:66:a1:f9:0b:85:b4:f1:a0:d8:69:dd:
         94:a7:f0:3d:cb:6d:15:ad:09:aa:ad:da:48:7c:e9:85:ce:c9:
         08:54:5d:2c:a6:83:fd:b0:26:d5:c1:54:a3:c3:59:57:9f:8e:
         a3:07:40:f0:72:09:b5:82:4e:83:63:66:96:b7:ae:99:97:2a:
         e1:48:94:b6:be:67:81:ef:ab:89:a9:79:68:f3:8f:84:76:5d:
         fc:cd:e5:3c:a0:c6:23:4c:ce:23:94:9a:7d:87:56:f4:d0:04:
         0b:c9:40:34:f8:ae:95:6c:bd:9a:22:d6:10:13:ca:c2:a5:9e:
         47:77:bc:92:34:89:76:02:b1:40:9b:0f:7e:ec:d2:76:d8:b5:
         dc:ba:7a:05:1f:d6:a6:d2:6d:c4:22:cb:d1:bc:02:f4:6a:b8:
         83:6f:3d:de:5b:21:86:a5:70:5f:00:ae:03:24:38:d9:c6:94:
         5b:d1:08:87:e4:8b:07:88:25:68:90:04:41:07:d4:9f:39:4d:
         da:6a:51:07:d0:38:93:3b:8f:0a:f3:c2:57:19:2c:e7:2f:b0:
         1d:db:df:f6:d3:e3:b9:e8:50:01:37:dc:c1:b1:49:c7:ad:04:
         2e:9b:82:9c:b5:d6:10:8e:c5:5a:07:85:2c:25:1b:c8:21:84:
         a7:a4:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:14 2025 by rpki-client