Manifest

$ rpki-client -vvvf rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft
File:                     15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft (raw, json)
Hash identifier:          qVDd9t3QkSb/ZbtoegPvSfLbDg4Z0GFjYKuRjlYuLK0=
Subject key identifier:   29:0A:C2:AF:50:14:53:0A:42:4E:8F:1D:72:36:0A:F7:25:3D:94:D4
Authority key identifier: 15:BB:7E:17:BF:92:E2:C5:2C:A3:56:DF:48:BB:B5:A0:BF:EE:D4:AA
Certificate issuer:       /CN=15bb7e17bf92e2c52ca356df48bbb5a0bfeed4aa
Certificate serial:       34DFBF7E483631309E750D92E3F08F9503B8E7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbt-F7-S4sUso1bfSLu1oL_u1Ko.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft
Manifest number:          49
Signing time:             Tue 29 Sep 2026 07:39:53 +0000
Manifest this update:     Tue 29 Sep 2026 07:34:53 +0000
Manifest next update:     Wed 30 Sep 2026 11:14:53 +0000
Files and hashes:         1: 15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.crl (hash: MWgCi+yrWZpYqE8iiSiIJUw+/+BK9YHljT17iboBzPs=)
                          2: AS51087.asa (hash: iAaqlMtS+JhEidtH76aJ970Ycbnmi/cUPg7T73kMYYc=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.crl
                          rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fbt-F7-S4sUso1bfSLu1oL_u1Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 11:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:df:bf:7e:48:36:31:30:9e:75:0d:92:e3:f0:8f:95:03:b8:e7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15bb7e17bf92e2c52ca356df48bbb5a0bfeed4aa
        Validity
            Not Before: Sep 29 07:34:53 2026 GMT
            Not After : Sep 30 11:14:53 2026 GMT
        Subject: CN=290AC2AF5014530A424E8F1D72360AF7253D94D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:41:93:ed:ba:68:27:32:bc:58:af:49:9c:
                    ff:6b:60:5c:45:ff:08:0f:68:88:fd:4f:d6:c6:f1:
                    d0:36:72:b4:28:07:f8:24:7a:b5:4e:70:8c:be:f8:
                    bf:69:94:0b:53:e3:9c:1f:ae:57:d8:c5:65:e7:a6:
                    36:b3:e2:2c:17:4d:bd:4b:79:16:33:c3:e9:54:27:
                    94:2f:0c:fd:4b:f8:27:d1:a9:d4:5c:3a:69:72:22:
                    cf:89:f5:e1:d6:ef:67:80:01:87:52:b0:85:5a:fb:
                    6f:c6:81:ce:cb:6d:19:b1:67:70:f6:53:9d:ce:56:
                    b0:f9:aa:30:e2:6b:4b:1b:4e:2e:4a:94:bc:50:25:
                    fb:97:70:ae:80:11:52:93:bd:98:7c:74:66:da:a5:
                    ab:73:ad:67:06:7b:db:f9:3f:8c:76:4b:b8:fa:10:
                    eb:fe:24:1c:ab:99:e2:ed:1f:3c:3e:d3:8a:a7:3a:
                    80:9b:15:e6:78:06:5b:c2:81:df:29:02:df:0e:74:
                    f2:bb:1c:ea:df:c6:68:73:c5:52:bf:f7:11:68:47:
                    85:7e:ba:3a:0e:f7:ca:1c:44:db:4d:b4:4a:2f:b5:
                    86:56:c3:d6:ac:a3:78:b1:6a:ae:16:cf:de:9e:e9:
                    de:64:5a:6a:e4:23:76:72:63:24:e4:bd:01:31:df:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0A:C2:AF:50:14:53:0A:42:4E:8F:1D:72:36:0A:F7:25:3D:94:D4
            X509v3 Authority Key Identifier:
                keyid:15:BB:7E:17:BF:92:E2:C5:2C:A3:56:DF:48:BB:B5:A0:BF:EE:D4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbt-F7-S4sUso1bfSLu1oL_u1Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/0/15BB7E17BF92E2C52CA356DF48BBB5A0BFEED4AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:6f:a1:30:d8:13:9b:39:14:67:4c:51:4e:b5:b2:7b:74:
         a6:ea:27:0a:6d:e2:2f:e5:92:f8:db:16:6e:7c:d1:c3:62:32:
         b9:54:62:65:bd:0f:aa:fd:59:72:87:0d:09:55:c2:f1:46:7a:
         de:07:f9:93:a4:86:13:bc:22:ea:70:3d:82:03:57:ba:3c:f0:
         d3:14:d5:ae:c2:e4:5a:5a:6e:97:b5:96:65:41:38:95:e5:eb:
         83:3e:9e:24:e1:02:bd:06:90:9c:dc:b4:90:df:fb:86:51:e6:
         b3:a0:fd:28:e8:0d:94:cd:96:1d:c8:19:06:2a:c3:d7:11:a8:
         5d:dd:cd:e0:39:af:da:2b:57:29:d9:6c:32:41:85:ee:75:bd:
         a3:8a:13:4f:01:e9:f7:18:19:8d:8e:2d:d2:d2:ea:40:88:31:
         7e:0b:71:a9:d8:a9:d7:d0:fe:f8:24:9c:80:73:46:13:6f:8a:
         33:d2:b8:af:f2:98:31:de:11:4c:12:f9:35:0e:06:99:af:47:
         ba:3f:05:b3:7a:d7:6f:01:5a:24:3d:eb:f2:e4:61:0f:7b:f4:
         fe:d3:cf:1d:87:b7:36:50:b0:39:b5:df:e3:e9:35:ea:2f:cb:
         f4:11:08:91:7e:40:52:ca:ca:ea:e8:50:fa:a3:82:70:09:a9:
         b3:eb:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:05:48 2026 by rpki-client