Manifest

$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
File:                     5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json)
Hash identifier:          NNaFb1nCfQV1mKXhCIAKhRwIcfPomKjULe7squYxIoU=
Subject key identifier:   61:A4:B0:BC:3B:63:19:3E:37:5B:23:1E:20:B5:0E:4D:83:04:1E:0B
Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97
Certificate issuer:       /CN=5B9C459FED5E28921D6D57A342A855A1BA969897
Certificate serial:       6BBED2B4C9D7C6620598BAA66165DD3AE269A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
Subject info access:      rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
Manifest number:          84
Signing time:             Fri 04 Sep 2026 06:43:17 +0000
Manifest this update:     Fri 04 Sep 2026 06:38:17 +0000
Manifest next update:     Sat 05 Sep 2026 07:20:17 +0000
Files and hashes:         1: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: y0xCEsuzMsSWirSbSZ71doxAbhLf0lL15oeF3HTxobs=)
                          2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=)
Validation:               OK
Signature path:           rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl
                          rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 07:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:be:d2:b4:c9:d7:c6:62:05:98:ba:a6:61:65:dd:3a:e2:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897
        Validity
            Not Before: Sep  4 06:38:17 2026 GMT
            Not After : Sep  5 07:20:17 2026 GMT
        Subject: CN=61A4B0BC3B63193E375B231E20B50E4D83041E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:fb:16:b4:48:0f:cc:62:c0:c4:62:df:74:
                    dc:9d:83:e9:7e:df:d1:39:7b:97:03:49:5c:ef:2f:
                    1f:ab:98:ea:cd:7f:f9:2e:48:a4:d2:a8:7c:07:63:
                    45:c8:38:e8:fb:ad:b5:02:89:9f:76:56:af:e1:76:
                    25:f8:70:11:7a:dd:58:01:1d:44:1b:82:9a:0e:0e:
                    a1:9f:f4:64:df:96:13:d5:e1:ee:91:e0:3b:54:31:
                    53:34:8b:51:54:ce:7c:19:83:2d:dc:58:e0:72:64:
                    da:d3:b3:b7:b2:31:9e:01:25:c3:60:d5:a4:45:ed:
                    5d:22:85:f3:d7:e2:02:aa:7e:14:c5:9c:52:1a:f8:
                    45:78:70:22:3e:2f:6e:14:c5:59:09:85:b7:0b:35:
                    10:73:37:92:b4:e0:d3:bd:dc:0f:3d:a2:b7:e6:bb:
                    a7:e1:ec:81:54:81:10:76:d1:91:b6:bd:ea:ea:1a:
                    d8:55:82:7b:d2:5f:22:25:00:1f:80:b5:fc:5e:67:
                    94:be:e6:89:9d:25:04:cc:be:36:70:a6:2a:55:8a:
                    65:4b:9a:e6:fe:aa:a0:0e:07:61:19:e2:22:ac:98:
                    db:36:88:49:ae:15:6c:00:f5:b7:de:2d:fa:b7:54:
                    5b:56:16:3e:46:44:88:ca:ff:c3:54:d0:98:c1:6c:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:B0:BC:3B:63:19:3E:37:5B:23:1E:20:B5:0E:4D:83:04:1E:0B
            X509v3 Authority Key Identifier:
                keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:25:16:1c:ac:f5:d5:c3:b6:1b:aa:5c:48:c7:33:22:04:09:
         b3:9b:ef:ce:6d:45:ea:eb:a3:ed:d0:4e:35:2c:61:9d:00:e4:
         b8:b2:6c:14:73:78:2e:81:08:28:15:8b:28:65:b5:46:ae:f5:
         db:fb:c5:d7:18:0b:04:0f:c8:bb:8d:bf:9a:d0:9c:ae:ca:ea:
         b5:81:40:55:d3:f4:73:67:0b:40:fb:11:8b:7a:bf:d2:81:99:
         ab:ee:e9:4f:9c:4b:25:9b:52:43:b9:94:24:24:38:58:cc:92:
         ac:90:e3:ee:9d:e9:32:dd:b2:94:9d:05:14:e8:66:a7:48:c0:
         71:31:ef:4a:89:51:e2:35:a8:00:d9:ce:63:54:e0:44:84:2f:
         bc:c4:f2:36:9e:bd:d2:98:45:6e:93:46:a1:85:15:c5:cf:95:
         e8:6a:7c:ab:9c:fc:21:43:da:a1:ad:43:6d:0c:e1:87:c6:6c:
         fb:60:ef:16:3d:fe:46:a8:6d:0f:62:e0:75:58:8d:3a:1d:94:
         cf:c3:30:ad:5a:36:82:c4:6f:65:94:f6:42:08:40:12:26:0b:
         03:25:52:97:63:25:f5:32:cc:6a:bb:0f:d4:37:9a:c0:c6:34:
         12:0f:38:b3:f1:1e:f4:ce:c2:f7:2f:6b:9b:d6:71:47:73:b5:
         96:03:71:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:08 2026 by rpki-client