Manifest

$ rpki-client -vvf rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft
File:                     B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft (raw, json)
Hash identifier:          M7tLgn6Y6K/NHekDAX8hNlDfu7u2Bfs7U86NydD/ktk=
Subject key identifier:   41:B2:5F:30:EA:55:FC:C3:B9:C7:78:47:86:2C:01:09:A8:84:CC:9A
Authority key identifier: B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73
Certificate issuer:       /CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
Certificate serial:       712469A8B9CF7D50B64F9EF195EA55B5363F6370
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
Subject info access:      rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft
Manifest number:          16
Signing time:             Tue 09 Sep 2025 08:43:16 +0000
Manifest this update:     Tue 09 Sep 2025 08:38:16 +0000
Manifest next update:     Wed 10 Sep 2025 10:13:16 +0000
Files and hashes:         1: 326131343a373538333a663466303a3a2f34382d3438203d3e203331383938.roa (hash: Ah9YtYYg0a3Zc5TEKsZvibWd7Hk3A968o1lUCWYwGFQ=)
                          2: 326131343a373538333a663466653a3a2f34382d3438203d3e20323131353735.roa (hash: wOvkJ5ITNrQXmz/tnC8ki1ZKSosUIyy1gtDKAAiRJDA=)
                          3: B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl (hash: vwYLhVILgJLzZ6sUQ4cS6vvq4hjhq31S2C8G3udjjlA=)
                          4: 326131343a373538333a663466303a3a2f34382d3438203d3e20323134353334.roa (hash: RQXfFOLs/P0nOOs3C1ZIm/JIq/mf76DtSAwwMkv8RJQ=)
                          5: 326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa (hash: V/l4i9zm+7RNztN3kaRsdWvtz06RMECmu/rIg/q7cZE=)
                          6: 326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa (hash: CSzqmzXSSWw0WTzEnhI0KbqsBi/hsvFJ8ka6MZBucp0=)
                          7: 326131343a373538333a663466303a3a2f34342d3438203d3e2034323432343233393939.roa (hash: viKKMbEBZsYF4MccD+cFIDoyNO08ZKq+3/NcE8n0c5Y=)
Validation:               OK
Signature path:           rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl
                          rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:24:69:a8:b9:cf:7d:50:b6:4f:9e:f1:95:ea:55:b5:36:3f:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
        Validity
            Not Before: Sep  9 08:38:16 2025 GMT
            Not After : Sep 10 10:13:16 2025 GMT
        Subject: CN=41B25F30EA55FCC3B9C77847862C0109A884CC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:4d:a8:5a:85:42:cf:8d:46:a6:8d:3b:22:
                    73:38:9b:cb:be:fd:16:d5:9b:83:81:2b:21:59:7b:
                    0d:63:95:07:d8:b7:69:0e:55:96:ef:c4:1c:96:0e:
                    7b:df:94:e3:b0:d1:9c:ec:a9:ae:2e:1e:82:0d:a0:
                    99:ea:46:ac:7d:37:86:f7:b2:74:e7:c2:68:88:96:
                    bb:66:f1:63:87:0e:30:07:9b:17:b7:f9:1f:64:ab:
                    68:49:4f:82:d8:95:71:d7:58:d0:3d:32:ac:39:cb:
                    56:fd:0f:f1:b2:32:51:5d:0d:d0:dd:08:d1:bd:0d:
                    ca:a7:ec:80:f0:7c:ec:37:f2:da:ce:1f:0d:69:19:
                    c0:73:01:46:4f:5d:f5:be:c0:67:42:03:a4:5d:94:
                    a3:ca:c1:ae:e2:48:3a:4a:c4:d1:b3:05:f8:fc:f7:
                    48:da:e4:96:eb:8a:09:56:d4:7d:e6:59:d5:5d:8c:
                    e7:c0:de:8f:42:2b:fc:fb:de:3b:65:d6:a0:f2:30:
                    45:c5:b4:73:26:d0:3a:95:d4:85:a8:60:35:4c:d3:
                    ed:03:40:c5:20:ec:67:28:0b:0d:8b:75:ed:cd:65:
                    0d:4f:75:84:64:64:f1:68:17:f0:20:38:29:10:d7:
                    83:cd:b1:7e:7b:39:81:d3:d0:a1:9e:2e:a7:05:6b:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B2:5F:30:EA:55:FC:C3:B9:C7:78:47:86:2C:01:09:A8:84:CC:9A
            X509v3 Authority Key Identifier:
                keyid:B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:05:27:9c:d5:67:32:60:c4:cc:27:ff:da:ff:3c:f1:dd:38:
         76:e8:4c:14:90:19:5b:8d:88:40:20:f3:49:10:d4:dc:e6:4e:
         27:5d:7c:14:da:d7:1f:35:26:96:94:7f:bf:34:80:1a:29:50:
         3c:c2:29:c2:9f:19:a6:44:f2:f9:c4:df:98:0a:30:38:0c:e2:
         0f:6c:44:f1:22:63:36:67:33:e4:8c:0a:07:c0:f0:34:4f:c7:
         38:ac:6b:23:33:32:16:71:7c:45:da:9e:ac:2c:8f:ef:df:57:
         97:75:b7:9e:c1:03:93:47:45:a7:c6:e5:32:1c:8e:57:07:df:
         48:53:b4:0d:97:ef:f7:87:4e:44:f5:90:53:8b:3a:d5:13:ae:
         73:d0:52:c3:c5:bc:ac:b7:1b:29:2f:00:e1:07:07:92:d3:bb:
         74:93:ab:f5:d5:23:61:cf:13:81:5c:17:94:01:c1:d6:42:75:
         9a:13:ff:87:b5:93:8e:46:57:36:37:53:4f:f4:a5:f2:9c:d5:
         8e:e1:b2:21:fe:71:a5:84:7b:09:57:d2:1a:3b:47:93:1d:4f:
         3e:b7:a0:fc:b3:c5:b7:ae:90:c1:81:f6:6b:75:fc:4b:82:dc:
         46:48:a2:9e:1f:ce:e9:e5:25:71:de:87:75:fe:45:70:49:5e:
         94:1a:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:05:28 2025 by rpki-client