Manifest

$ rpki-client -vvf rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
File:                     29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft (raw, json)
Hash identifier:          KMwjxIxNS4ysaZEblJY7Zn8tORMQ6u7NjEoRDHXZUd8=
Subject key identifier:   60:49:1D:A6:75:0C:14:96:0F:BC:09:52:E6:49:32:B5:09:62:1A:DC
Authority key identifier: 29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED
Certificate issuer:       /CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
Certificate serial:       2AE1456DB076EA766D93EFD3B6410F92B4CD7A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
Subject info access:      rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
Manifest number:          09
Signing time:             Sun 26 Jul 2026 18:59:57 +0000
Manifest this update:     Sun 26 Jul 2026 18:54:57 +0000
Manifest next update:     Mon 27 Jul 2026 19:29:57 +0000
Files and hashes:         1: 29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl (hash: /IX45YNWfElI6dOaWYFg5FrYywFXWlPQhy8J4PX1630=)
                          2: AS211729.asa (hash: kGn5QaRv9Xkw/W3JFWql+Iy82+7B1skiepaUclJBt2c=)
Validation:               OK
Signature path:           rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl
                          rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e1:45:6d:b0:76:ea:76:6d:93:ef:d3:b6:41:0f:92:b4:cd:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c8e772e68b2bf50d8b6e2ae919ad59bcc29eed
        Validity
            Not Before: Jul 26 18:54:57 2026 GMT
            Not After : Jul 27 19:29:57 2026 GMT
        Subject: CN=60491DA6750C14960FBC0952E64932B509621ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:ed:db:77:ab:a9:0f:e8:16:b8:78:ff:ed:
                    15:2a:ba:07:76:d6:b3:20:97:20:e1:4f:22:7a:db:
                    4d:96:51:e3:aa:9f:cc:77:9d:82:4f:eb:0c:e7:f5:
                    9f:99:85:c7:26:a0:63:26:15:4d:a2:f8:de:09:1a:
                    06:d3:28:1d:a3:c9:b2:6f:cc:f5:03:30:65:c5:85:
                    96:01:0b:99:85:5f:19:50:4a:6f:96:f9:6c:13:12:
                    02:72:da:62:af:c7:65:4d:62:bd:9d:b9:dc:ca:3b:
                    4d:4c:01:f0:ab:33:79:09:d7:f6:39:b8:d4:33:c2:
                    e6:2c:3e:82:45:4a:4a:63:cc:55:94:13:c5:d2:38:
                    4c:ef:1f:30:7f:9c:9d:db:78:5d:4a:46:01:04:cb:
                    41:bb:7f:a5:0e:44:fe:36:40:e4:79:9a:52:24:a6:
                    a6:d1:ad:43:29:e6:b1:be:e3:75:91:c7:af:59:4a:
                    4d:90:46:b3:c1:aa:e2:a5:05:4f:eb:85:76:c4:5b:
                    52:5b:75:e6:b0:b9:4a:a5:28:fd:41:8f:8d:c9:5b:
                    5f:15:48:b2:8a:a6:64:f8:83:5b:a6:8a:41:fe:38:
                    db:cd:0a:fd:f1:14:10:fd:5e:2b:3f:fe:97:4f:aa:
                    8f:df:7d:de:a9:e7:44:ef:7e:80:23:51:ae:49:31:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:49:1D:A6:75:0C:14:96:0F:BC:09:52:E6:49:32:B5:09:62:1A:DC
            X509v3 Authority Key Identifier:
                keyid:29:C8:E7:72:E6:8B:2B:F5:0D:8B:6E:2A:E9:19:AD:59:BC:C2:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcjncuaLK_UNi24q6RmtWbzCnu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/0/29C8E772E68B2BF50D8B6E2AE919AD59BCC29EED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:eb:d7:a6:01:7d:d5:56:7b:af:cd:f0:33:f9:4d:93:43:
         fe:17:b2:47:68:65:f6:1d:d0:57:f0:99:3a:75:c1:1d:fc:0b:
         bb:36:31:dd:2b:3e:2f:57:a9:40:07:dc:76:d4:86:6f:77:44:
         20:66:9c:2f:c4:96:c9:3c:39:fc:5d:78:3b:14:55:73:ef:9e:
         68:72:1c:b4:19:97:a8:7d:19:18:05:87:c4:79:fb:14:cf:e1:
         98:90:f6:50:b4:97:df:f3:31:2c:4b:81:97:ce:84:32:8e:5c:
         1a:38:4e:62:a3:91:7c:04:d7:39:45:6a:7c:ae:58:e6:61:5c:
         c3:49:68:99:64:16:90:f9:5f:2c:f8:c0:79:a8:8a:4f:7e:74:
         3b:3e:a7:56:92:18:c9:39:55:10:b7:ac:4a:5d:70:f1:ad:4b:
         0c:bf:95:8e:a9:87:b4:b5:bb:c3:f9:aa:5a:e9:c8:88:3a:3e:
         d2:39:6f:e3:98:55:59:79:95:9e:7f:e4:43:99:a0:e2:fb:09:
         0d:7c:86:58:e3:7d:9a:b1:5b:ed:2a:c1:c7:c3:a3:44:20:88:
         6e:b3:39:e6:b1:4b:88:ab:3e:3a:bd:5c:05:c9:51:e0:de:55:
         7a:f8:2d:f5:14:4f:c2:c0:f2:23:26:9f:1d:8c:91:fd:ac:93:
         c2:59:3e:6f
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUKuFFbbB26nZtk+/TtkEPkrTNeiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjljOGU3NzJlNjhiMmJmNTBkOGI2ZTJhZTkxOWFkNTli
Y2MyOWVlZDAeFw0yNjA3MjYxODU0NTdaFw0yNjA3MjcxOTI5NTdaMDMxMTAvBgNV
BAMTKDYwNDkxREE2NzUwQzE0OTYwRkJDMDk1MkU2NDkzMkI1MDk2MjFBREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAO3bd6upD+gWuHj/7RUqugd2
1rMglyDhTyJ6202WUeOqn8x3nYJP6wzn9Z+ZhccmoGMmFU2i+N4JGgbTKB2jybJv
zPUDMGXFhZYBC5mFXxlQSm+W+WwTEgJy2mKvx2VNYr2dudzKO01MAfCrM3kJ1/Y5
uNQzwuYsPoJFSkpjzFWUE8XSOEzvHzB/nJ3beF1KRgEEy0G7f6UORP42QOR5mlIk
pqbRrUMp5rG+43WRx69ZSk2QRrPBquKlBU/rhXbEW1JbdeawuUqlKP1Bj43JW18V
SLKKpmT4g1umikH+ONvNCv3xFBD9Xis//pdPqo/ffd6p50TvfoAjUa5JMbjfAgMB
AAGjggIDMIIB/zAdBgNVHQ4EFgQUYEkdpnUMFJYPvAlS5kkytQliGtwwHwYDVR0j
BBgwFoAUKcjncuaLK/UNi24q6RmtWbzCnu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS5uZXQuYmFpeXVleGlhby5jbi9yZXBv
L0JBSVlVRVhJQU8tUlBLSS8wLzI5QzhFNzcyRTY4QjJCRjUwRDhCNkUyQUU5MTlB
RDU5QkNDMjlFRUQuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LY2puY3VhTEtf
VU5pMjRxNlJtdFdiekNudTAuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcw
C4ZicnN5bmM6Ly9ycGtpLm5ldC5iYWl5dWV4aWFvLmNuL3JlcG8vQkFJWVVFWElB
Ty1SUEtJLzAvMjlDOEU3NzJFNjhCMkJGNTBEOEI2RTJBRTkxOUFENTlCQ0MyOUVF
RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBACxk69emAX3VVnuvzfAz+U2TQ/4XskdoZfYd0FfwmTp1wR38
C7s2Md0rPi9XqUAH3HbUhm93RCBmnC/Elsk8OfxdeDsUVXPvnmhyHLQZl6h9GRgF
h8R5+xTP4ZiQ9lC0l9/zMSxLgZfOhDKOXBo4TmKjkXwE1zlFanyuWOZhXMNJaJlk
FpD5Xyz4wHmoik9+dDs+p1aSGMk5VRC3rEpdcPGtSwy/lY6ph7S1u8P5qlrpyIg6
PtI5b+OYVVl5lZ5/5EOZoOL7CQ18hljjfZqxW+0qwcfDo0QgiG6zOeaxS4irPjq9
XAXJUeDeVXr4LfUUT8LA8iMmnx2Mkf2sk8JZPm8=
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:43 2026 by rpki-client