Manifest

$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
File:                     321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json)
Hash identifier:          4DuNuJHWsUOh6h76yUIeEXKpK1oIeAN5+iOZ+p9cxrI=
Subject key identifier:   7F:BF:6B:53:72:67:0E:7D:72:B8:35:11:D0:60:56:71:1C:8F:BC:2A
Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
Certificate issuer:       /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
Certificate serial:       14DF359ED730A33EEB95741E49697B8279FC16E6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
Subject info access:      rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
Manifest number:          40
Signing time:             Fri 17 Jul 2026 18:18:04 +0000
Manifest this update:     Fri 17 Jul 2026 18:13:04 +0000
Manifest next update:     Sat 18 Jul 2026 21:40:04 +0000
Files and hashes:         1: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: B8wluqnb1F4q0cn3XkP64T9IGwB+GsojTMINba5ZHuo=)
                          2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=)
Validation:               OK
Signature path:           rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl
                          rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 21:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:df:35:9e:d7:30:a3:3e:eb:95:74:1e:49:69:7b:82:79:fc:16:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
        Validity
            Not Before: Jul 17 18:13:04 2026 GMT
            Not After : Jul 18 21:40:04 2026 GMT
        Subject: CN=7FBF6B5372670E7D72B83511D06056711C8FBC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:25:bd:11:3d:2b:8f:53:79:b8:85:58:55:
                    7b:dc:49:da:74:3b:f8:fe:50:93:e0:c5:ee:84:10:
                    95:e2:83:70:17:11:cc:ad:48:ab:7a:44:b9:c8:5b:
                    c7:e8:50:fe:d4:7a:4f:3b:b7:fe:ec:83:bc:3e:0f:
                    a8:19:17:fe:d7:c5:32:ec:2a:09:95:d7:8e:c4:db:
                    57:99:39:55:39:a5:79:c7:55:14:00:f1:f9:fd:82:
                    7d:bf:bb:8c:b9:98:0d:76:e3:00:01:cc:2a:e4:f5:
                    65:a8:5c:84:7d:ea:46:3d:53:02:fd:e8:3b:db:b0:
                    7b:ad:4e:55:fb:af:68:8e:9e:e0:1f:ac:14:14:59:
                    9e:ea:31:3f:14:20:93:8e:f1:49:63:04:76:13:cd:
                    56:e8:a3:aa:6e:03:a0:e8:d3:8e:a1:bf:05:c7:e6:
                    5e:30:25:f6:47:dd:0d:2f:81:33:c1:1e:98:4d:02:
                    ab:ac:bb:15:fe:2e:c9:16:5c:26:c0:4d:6c:23:27:
                    5e:3d:60:1f:e5:c3:41:a4:a2:14:c0:1d:06:d4:d9:
                    ce:a2:cb:48:0d:20:c6:2c:8e:fa:f7:28:ff:1f:5c:
                    f7:8d:82:4b:29:6b:1b:84:80:6f:ad:09:13:64:2a:
                    e8:b1:b0:20:8f:9b:c5:99:c4:c9:17:ce:29:ee:0a:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BF:6B:53:72:67:0E:7D:72:B8:35:11:D0:60:56:71:1C:8F:BC:2A
            X509v3 Authority Key Identifier:
                keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:d9:34:8c:83:f9:74:b6:db:80:d3:2e:db:87:ab:b9:9f:
         be:74:7a:fb:e8:0b:97:65:9f:97:27:0b:eb:66:71:3d:22:fc:
         d2:1b:37:17:e8:6b:b3:26:ee:00:e0:cb:95:f1:cc:0b:9a:3f:
         15:bb:79:7c:f5:f8:3b:a6:58:43:58:11:9d:e2:07:2e:fd:9b:
         93:9b:83:fd:27:33:39:ba:83:91:53:5a:ba:9e:d2:c8:b8:00:
         e8:89:c2:2f:e5:8f:e1:4f:aa:14:41:e0:c6:08:7b:33:75:b5:
         64:93:22:50:b5:83:ad:0f:14:09:e7:ed:64:08:15:93:2e:af:
         47:3a:b9:c5:b8:a2:c9:38:92:4e:2b:e0:32:f3:29:6d:8a:88:
         c9:04:c1:18:d1:c7:ea:ae:75:b4:50:91:a6:93:08:d8:e7:35:
         dc:2f:5f:9c:2e:1c:0b:07:99:b5:10:f2:f6:16:8b:d9:fc:3c:
         f9:5b:5f:6a:b1:27:97:2e:44:ca:6d:da:3d:df:86:e3:b7:26:
         5d:fd:8f:c2:78:84:b6:ce:1c:f7:8d:3b:28:15:ed:3d:12:0f:
         ec:f2:2f:7c:78:25:08:02:19:5f:d0:98:26:11:79:d4:1d:ba:
         df:98:fe:b5:5f:d3:2c:04:22:8c:18:32:45:e9:f5:10:30:91:
         98:c0:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:21:18 2026 by rpki-client