Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
File:                     E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft (raw, json)
Hash identifier:          1A18Uze0iusLfTUs3T0OqJUSTT/+UTuBWftvqRU2ajU=
Subject key identifier:   81:85:DF:EE:90:AE:AB:80:86:44:85:78:4A:8F:DC:56:F5:DD:14:4E
Authority key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5
Certificate issuer:       /CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
Certificate serial:       7DD5EDEE903888BCF32629BCC29C0C0C7DDB8905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
Manifest number:          AD
Signing time:             Sun 26 Apr 2026 23:03:45 +0000
Manifest this update:     Sun 26 Apr 2026 22:58:45 +0000
Manifest next update:     Mon 27 Apr 2026 23:45:45 +0000
Files and hashes:         1: AS51087.asa (hash: X21QaHTZFlUThEZtGAbEPD7ITdq1PhcSgSjGdI55HPI=)
                          2: E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl (hash: za+xVbgsnsd30um5fgduhLbG+wzjcucC9IHyIz5t0D4=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:ed:ee:90:38:88:bc:f3:26:29:bc:c2:9c:0c:0c:7d:db:89:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
        Validity
            Not Before: Apr 26 22:58:45 2026 GMT
            Not After : Apr 27 23:45:45 2026 GMT
        Subject: CN=8185DFEE90AEAB80864485784A8FDC56F5DD144E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:3a:14:e2:10:48:6d:a3:ed:64:1d:93:3e:
                    7d:db:ce:74:5b:22:77:49:04:c0:9e:96:b6:74:2c:
                    a0:0d:1b:68:ca:bd:e3:12:23:f8:4d:24:5a:1a:39:
                    ed:64:28:41:83:09:5e:a1:30:a2:b8:70:10:80:e1:
                    9c:ef:20:26:e9:f8:e5:5c:dd:e0:ab:56:15:32:ed:
                    2f:3e:bf:ad:6f:63:60:0e:8e:9f:da:aa:fa:79:d2:
                    ad:30:87:73:a1:89:e7:5e:b1:fd:41:6d:e8:27:68:
                    b7:c2:17:bd:83:f2:df:03:32:28:e6:99:a0:a0:89:
                    80:0b:b8:37:2d:8a:03:b6:4d:74:68:c8:48:7d:60:
                    a6:90:bf:6a:ae:5c:76:c9:05:4b:e3:15:12:03:11:
                    cd:c1:b7:fc:c5:50:28:72:ae:36:b8:22:6a:a8:12:
                    a8:bf:74:72:75:2b:c6:92:27:db:0c:d6:cb:97:88:
                    1f:c4:9f:5e:ed:a8:b5:bc:7b:39:35:d6:8f:e2:ff:
                    0d:b2:39:4f:4c:5d:bb:88:34:89:c7:e2:31:48:82:
                    e3:f6:11:82:34:99:bb:15:2e:61:77:85:e3:06:0b:
                    f6:90:14:8b:69:84:ff:29:6e:43:63:3e:ed:9b:ae:
                    81:1b:c6:8f:f3:a1:5a:30:d3:9c:0d:00:59:44:00:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:85:DF:EE:90:AE:AB:80:86:44:85:78:4A:8F:DC:56:F5:DD:14:4E
            X509v3 Authority Key Identifier:
                keyid:E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:be:07:f4:9e:b5:99:6b:13:3f:dd:b2:2e:48:41:b8:18:47:
         cc:1f:33:ae:ec:c3:5f:53:df:27:be:98:6f:82:64:3c:51:f6:
         59:4f:cd:73:27:80:41:a9:c7:b2:d8:79:33:8c:22:09:cc:7b:
         ad:28:b5:c0:6f:89:a3:e9:2a:b9:b1:29:ef:4b:c8:38:ad:2f:
         0e:1b:17:d2:65:65:54:76:2d:de:27:8e:43:10:39:76:c9:72:
         af:3f:21:3b:1a:2b:97:45:ab:7e:c4:15:42:54:ff:11:c6:9e:
         40:da:8c:39:51:45:87:84:f4:69:66:63:7a:35:e4:16:3e:86:
         3c:8a:64:5a:5d:71:05:c9:9a:88:a3:fc:22:b0:a7:70:c5:2b:
         05:a7:7b:cf:02:af:55:33:d0:7f:73:42:25:24:db:34:65:de:
         a5:de:c2:73:ea:96:a1:17:3b:01:f2:a9:59:b3:38:2b:7e:a0:
         0b:32:80:96:a0:11:8e:fc:17:b8:33:f9:14:32:75:3b:c4:97:
         92:53:c8:3f:22:d5:0d:c8:2d:3b:7b:25:d6:48:4b:a6:15:5c:
         3a:14:68:5e:f7:dd:55:0b:c3:1a:b1:0c:fd:9b:2e:87:fc:58:
         bd:12:79:05:02:2d:a9:bd:21:b4:93:f8:43:53:a2:55:15:ef:
         c8:af:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:03 2026 by rpki-client