Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
File:                     911E180145E68F7315DA3AB2200D186671FFE75B.mft (raw, json)
Hash identifier:          dNTaZhpYdYy/fHAMx6NymROJYquqP6G6K7Sc4OLPv1Q=
Subject key identifier:   7A:67:6A:17:DF:C2:6D:09:5B:C9:25:9B:DF:27:D2:8B:5B:7C:04:06
Authority key identifier: 91:1E:18:01:45:E6:8F:73:15:DA:3A:B2:20:0D:18:66:71:FF:E7:5B
Certificate issuer:       /CN=911e180145e68f7315da3ab2200d186671ffe75b
Certificate serial:       5DF365128B9C7C33F787A81F0E63DF65C81149F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
Manifest number:          0309
Signing time:             Sun 28 Jun 2026 17:00:10 +0000
Manifest this update:     Sun 28 Jun 2026 16:55:10 +0000
Manifest next update:     Mon 29 Jun 2026 20:10:10 +0000
Files and hashes:         1: 911E180145E68F7315DA3AB2200D186671FFE75B.crl (hash: fuBPYnvjdkvBkMsaJTFqXYslthNOPr+Zlv3si/2aXr0=)
                          2: AS209306.asa (hash: rzc9nro9/JlGNqFIZn9IN4vchx3h7MsrgBj2y3yXO2I=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f3:65:12:8b:9c:7c:33:f7:87:a8:1f:0e:63:df:65:c8:11:49:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911e180145e68f7315da3ab2200d186671ffe75b
        Validity
            Not Before: Jun 28 16:55:10 2026 GMT
            Not After : Jun 29 20:10:10 2026 GMT
        Subject: CN=7A676A17DFC26D095BC9259BDF27D28B5B7C0406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:74:18:76:2e:f9:84:e3:50:07:cf:5c:fb:
                    6b:9e:8c:fb:9d:7d:26:ef:d1:96:cc:c7:76:e9:fa:
                    7d:72:2e:a0:24:7f:35:31:23:8b:3c:df:8d:11:6c:
                    5f:fb:b2:f7:de:cb:60:5b:a5:24:c9:a1:e9:a2:31:
                    33:8f:ac:b3:70:20:11:b0:36:e6:a8:c4:3f:5e:c7:
                    9d:c8:a7:8f:d3:54:ae:b6:f4:ba:78:f0:0c:d3:48:
                    d2:75:04:f0:6b:14:7a:c1:d8:82:79:84:52:82:ab:
                    d8:d4:df:1a:a5:64:c1:d7:2d:95:72:38:17:e9:19:
                    e5:22:00:5b:6d:0d:60:27:b4:85:41:33:fa:81:7c:
                    6f:ce:df:13:6b:8f:22:48:08:4b:5c:13:dd:2a:41:
                    43:45:af:51:c4:c0:c4:1b:d3:0e:5e:ec:2b:7b:4c:
                    e7:09:1f:5b:07:14:d4:c4:88:b1:54:ce:eb:77:bc:
                    a7:4e:c0:15:19:0d:6c:29:1b:60:71:49:33:5d:05:
                    dd:a6:c5:a9:e0:d5:c0:0e:ef:5f:ab:b0:6d:46:f5:
                    e9:21:da:38:bd:40:2b:1d:1d:2f:fa:41:9c:cf:10:
                    c4:70:cc:0d:72:78:ec:2e:39:69:e9:d8:86:f9:b8:
                    7a:25:15:29:0e:d4:71:10:1d:c4:d8:8e:a3:c1:fe:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:6A:17:DF:C2:6D:09:5B:C9:25:9B:DF:27:D2:8B:5B:7C:04:06
            X509v3 Authority Key Identifier:
                keyid:91:1E:18:01:45:E6:8F:73:15:DA:3A:B2:20:0D:18:66:71:FF:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:8c:3f:f3:fd:8a:0f:0f:9a:7f:10:9d:20:62:d8:2b:88:93:
         5e:1e:94:11:4d:a4:a7:55:f7:1c:43:52:39:74:a0:cc:bd:58:
         c5:03:c8:b4:4f:18:b5:4a:e9:8b:c9:56:ec:6a:9f:5b:1b:32:
         fa:d4:a8:11:04:d7:bb:de:e4:d5:00:0c:90:3c:66:1e:1c:98:
         84:31:15:b3:31:74:88:0f:cc:3b:8e:22:45:64:7b:0b:48:10:
         21:bd:47:43:f7:19:88:2d:f8:9b:d7:ec:66:0b:78:12:b0:13:
         bf:f6:e0:2a:a4:5a:05:9e:b8:69:e9:cc:36:58:7e:c7:e7:8e:
         a1:95:e7:bf:69:42:41:0f:c3:ca:f5:40:09:d7:42:a7:75:10:
         60:8b:23:d0:8b:37:32:6f:19:b0:f2:d3:ad:5c:aa:f5:d0:5c:
         c3:f7:4c:b3:26:f7:b0:26:7f:71:d9:8c:ad:41:65:90:fb:18:
         79:37:6d:f0:d7:e5:fa:39:2f:b7:58:6d:94:b3:95:97:58:eb:
         9e:1e:2a:82:ed:7a:ca:1d:e5:da:cf:4b:63:d7:92:72:95:35:
         3f:eb:23:23:89:24:ea:16:ab:47:98:39:cd:e5:7b:63:a4:32:
         07:7b:32:19:82:27:ac:c3:bb:a7:18:9a:e7:02:d2:03:87:06:
         9b:3b:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:32 2026 by rpki-client