Manifest

$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
File:                     3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft (raw, json)
Hash identifier:          xlzyK1e/HXK/aOtyAqyhDMYAWfPwNi5tvOV4QTwOC+A=
Subject key identifier:   0F:16:13:7B:50:D8:F6:14:6F:F4:21:23:55:EE:E5:C3:4C:A4:2E:92
Authority key identifier: 3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98
Certificate issuer:       /CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
Certificate serial:       42903307D18FDE518300465E3966D9560C3F699C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
Manifest number:          0369
Signing time:             Wed 16 Sep 2026 05:45:27 +0000
Manifest this update:     Wed 16 Sep 2026 05:40:27 +0000
Manifest next update:     Thu 17 Sep 2026 06:05:27 +0000
Files and hashes:         1: 3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl (hash: ssTlt13EvCSorYAJLa5+S4MOnUADkIvAK+vsVAKCQvU=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 06:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:90:33:07:d1:8f:de:51:83:00:46:5e:39:66:d9:56:0c:3f:69:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e32da3b9dc955f96cf1bf58c5748b7b80fcb798
        Validity
            Not Before: Sep 16 05:40:27 2026 GMT
            Not After : Sep 17 06:05:27 2026 GMT
        Subject: CN=0F16137B50D8F6146FF4212355EEE5C34CA42E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:70:3a:22:53:3d:ee:85:f0:93:0c:1c:70:
                    9b:16:6e:a8:68:44:45:66:71:7b:6e:80:d5:0c:24:
                    46:d2:9e:7c:90:0c:ea:d9:c6:d0:de:1e:35:1d:59:
                    a3:a1:71:da:ca:a6:10:12:13:37:70:c4:a0:7f:cf:
                    f5:0a:14:67:d1:86:b4:3e:f9:10:ce:50:2a:4b:95:
                    20:fc:60:f6:e1:bd:3d:a6:2f:5f:cb:10:16:ce:50:
                    02:4f:74:c7:d4:64:9f:30:10:6c:44:11:b9:1f:75:
                    ed:dd:bb:a2:fb:05:70:47:34:62:a4:56:e2:e0:5e:
                    8d:e3:11:b1:87:d4:79:75:e9:92:9c:bd:3b:6f:d3:
                    b4:0d:c8:a0:23:88:63:1d:99:7d:dd:ba:1e:2f:b3:
                    5a:f5:3c:38:e5:32:a1:09:21:e4:77:a4:12:9e:ef:
                    cb:53:b2:29:20:19:70:90:78:6b:0a:34:ad:06:5a:
                    a9:95:38:4e:80:6e:28:f9:f0:6e:e6:ba:7b:e8:70:
                    22:89:5d:a6:34:81:3d:cd:66:da:e3:29:19:eb:88:
                    dd:ab:70:9f:27:bc:18:0f:36:8d:37:97:2c:71:7c:
                    52:a2:f4:8d:07:99:fc:f0:c2:d5:fb:78:43:9a:5f:
                    1c:e7:8a:b8:06:9e:9c:73:be:58:f5:c9:f9:91:2b:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:13:7B:50:D8:F6:14:6F:F4:21:23:55:EE:E5:C3:4C:A4:2E:92
            X509v3 Authority Key Identifier:
                keyid:3E:32:DA:3B:9D:C9:55:F9:6C:F1:BF:58:C5:74:8B:7B:80:FC:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjLaO53JVfls8b9YxXSLe4D8t5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/2/3E32DA3B9DC955F96CF1BF58C5748B7B80FCB798.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:49:b7:a6:9e:d9:47:cc:e0:10:c2:ed:3b:38:e3:06:a8:a6:
         3c:b4:6d:7c:e4:e8:50:52:f7:4b:51:4a:07:38:06:10:3f:70:
         65:c0:ef:bf:63:59:c8:73:c6:2f:8a:6b:1f:d5:20:37:16:e2:
         3c:c4:e1:18:0f:38:bf:d8:77:57:50:29:08:03:5a:c0:d9:d3:
         d1:69:ff:ac:fb:b9:80:da:f6:ba:ac:d5:32:f2:5e:2e:da:fe:
         98:ae:20:ff:ab:52:fb:71:5f:a6:c2:e1:58:bf:b6:bf:fc:ea:
         53:9a:05:43:11:83:a6:8a:9f:b8:ed:52:43:5b:b6:af:de:35:
         76:9f:14:5e:b3:92:fb:d1:9e:fc:de:a3:ef:ba:62:0e:21:fb:
         84:b4:65:3c:02:fc:3e:76:70:4c:a2:05:4c:35:c7:66:85:5d:
         1c:50:cc:73:12:3f:d3:e1:2a:14:db:b8:4b:38:59:65:13:f6:
         a6:c1:bf:77:f7:cd:d6:98:7e:c1:2d:9c:f0:1b:fb:ab:ed:9a:
         0b:79:d4:24:4b:44:6d:93:83:3d:bf:9a:2f:a9:44:d3:61:a1:
         bf:f5:9d:d3:20:6a:0b:fc:02:15:4f:36:92:c0:c5:c1:e0:59:
         13:be:94:88:cc:52:fd:dd:55:e7:48:3c:cc:78:33:84:c5:d2:
         91:3b:82:1e
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUQpAzB9GP3lGDAEZeOWbZVgw/aZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2UzMmRhM2I5ZGM5NTVmOTZjZjFiZjU4YzU3NDhiN2I4
MGZjYjc5ODAeFw0yNjA5MTYwNTQwMjdaFw0yNjA5MTcwNjA1MjdaMDMxMTAvBgNV
BAMTKDBGMTYxMzdCNTBEOEY2MTQ2RkY0MjEyMzU1RUVFNUMzNENBNDJFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5B3A6IlM97oXwkwwccJsWbqho
REVmcXtugNUMJEbSnnyQDOrZxtDeHjUdWaOhcdrKphASEzdwxKB/z/UKFGfRhrQ+
+RDOUCpLlSD8YPbhvT2mL1/LEBbOUAJPdMfUZJ8wEGxEEbkfde3du6L7BXBHNGKk
VuLgXo3jEbGH1Hl16ZKcvTtv07QNyKAjiGMdmX3duh4vs1r1PDjlMqEJIeR3pBKe
78tTsikgGXCQeGsKNK0GWqmVOE6Abij58G7munvocCKJXaY0gT3NZtrjKRnriN2r
cJ8nvBgPNo03lyxxfFKi9I0HmfzwwtX7eEOaXxznirgGnpxzvlj1yfmRK8iBAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUDxYTe1DY9hRv9CEjVe7lw0ykLpIwHwYDVR0j
BBgwFoAUPjLaO53JVfls8b9YxXSLe4D8t5gwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw
by9UaWFuaGFpUnBraS8yLzNFMzJEQTNCOURDOTU1Rjk2Q0YxQkY1OEM1NzQ4QjdC
ODBGQ0I3OTguY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6
Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QakxhTzUzSlZmbHM4
YjlZeFhTTGU0RDh0NWcuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf
cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp
LzIvM0UzMkRBM0I5REM5NTVGOTZDRjFCRjU4QzU3NDhCN0I4MEZDQjc5OC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJVJt6ae2UfM4BDC7Ts44waopjy0bXzk6FBS90tRSgc4BhA/cGXA779j
Wchzxi+Kax/VIDcW4jzE4RgPOL/Yd1dQKQgDWsDZ09Fp/6z7uYDa9rqs1TLyXi7a
/piuIP+rUvtxX6bC4Vi/tr/86lOaBUMRg6aKn7jtUkNbtq/eNXafFF6zkvvRnvze
o++6Yg4h+4S0ZTwC/D52cEyiBUw1x2aFXRxQzHMSP9PhKhTbuEs4WWUT9qbBv3f3
zdaYfsEtnPAb+6vtmgt51CRLRG2Tgz2/mi+pRNNhob/1ndMgagv8AhVPNpLAxcHg
WRO+lIjMUv3dVedIPMx4M4TF0pE7gh4=
-----END CERTIFICATE-----
Generated at Wed Sep 16 08:47:48 2026 by rpki-client