Manifest

$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
File:                     5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json)
Hash identifier:          GX0fW9VgJwX8TkVDFYXmJ2Rna+96bzm+ccSUNkhnKmw=
Subject key identifier:   4D:5D:FC:1C:83:8B:54:8C:AC:94:6D:37:6A:A1:46:F1:EF:53:06:6F
Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97
Certificate issuer:       /CN=5B9C459FED5E28921D6D57A342A855A1BA969897
Certificate serial:       6958E0416CCABF9AD08C4192C7D56D57BD92F133
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
Subject info access:      rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
Manifest number:          13
Signing time:             Sat 13 Jun 2026 14:38:53 +0000
Manifest this update:     Sat 13 Jun 2026 14:33:53 +0000
Manifest next update:     Sun 14 Jun 2026 17:34:53 +0000
Files and hashes:         1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=)
                          2: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: EgXQBOREzlkGzMxY7GoqGvuoTKujsq1snwE9tCPu4Jk=)
Validation:               OK
Signature path:           rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl
                          rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:58:e0:41:6c:ca:bf:9a:d0:8c:41:92:c7:d5:6d:57:bd:92:f1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897
        Validity
            Not Before: Jun 13 14:33:53 2026 GMT
            Not After : Jun 14 17:34:53 2026 GMT
        Subject: CN=4D5DFC1C838B548CAC946D376AA146F1EF53066F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:42:9a:07:cd:b1:37:58:1f:47:48:c7:59:
                    15:ae:2b:29:74:9b:0c:7e:75:c3:44:ee:a2:48:6d:
                    ed:16:ac:f6:b7:d2:f3:f6:4b:37:ce:ec:15:bd:16:
                    c8:1d:96:b6:34:16:33:c4:b5:c2:c8:4f:2a:0d:77:
                    2c:81:62:c1:90:bb:77:f2:b3:cf:19:aa:e0:17:8e:
                    bf:a8:a7:84:e6:9b:ac:37:70:aa:00:9d:9d:2c:25:
                    f1:9e:8a:c3:1b:8e:ed:ff:9a:38:7e:63:d6:22:09:
                    c8:de:f4:b1:c4:bf:9d:69:0a:6f:eb:cf:15:f4:f7:
                    88:ae:d7:39:41:e8:b1:37:15:11:8b:23:51:4d:d0:
                    34:66:43:af:fe:6e:17:a0:10:02:53:4c:03:ab:9f:
                    cb:8e:d2:78:a9:19:1f:7d:1e:5d:46:33:ad:07:ab:
                    3a:e2:c6:49:da:89:c4:8b:da:5d:15:24:37:50:82:
                    c4:46:f0:6c:91:de:38:79:2c:f8:dd:f5:b7:27:86:
                    40:c9:da:6b:47:21:6d:9f:61:f3:e9:8c:4b:d2:0a:
                    94:7e:ee:ef:ef:a7:bd:1b:d5:e4:f9:a8:51:18:dd:
                    5f:7b:ce:9c:ff:96:ee:69:09:2a:91:66:df:21:a4:
                    bc:57:63:45:5d:86:77:57:ad:f5:ee:d4:71:cf:87:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:FC:1C:83:8B:54:8C:AC:94:6D:37:6A:A1:46:F1:EF:53:06:6F
            X509v3 Authority Key Identifier:
                keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:73:7e:ab:c4:29:1c:e4:55:2d:84:2c:5c:b1:2f:c4:c2:64:
         e2:0a:b7:73:4a:e5:6c:5e:b5:09:b3:18:34:90:b1:0f:77:aa:
         b0:33:76:a4:bd:e6:46:ee:0d:3a:1c:0b:bd:cb:e9:f0:62:c5:
         92:11:31:47:c9:38:cf:4e:8e:11:ce:bb:4b:80:c2:8e:82:09:
         18:c5:ad:ff:31:77:b3:43:28:25:7d:c8:6c:24:43:24:29:69:
         e2:95:26:0e:a0:34:0f:c8:17:9d:9d:bd:7e:9d:fb:7c:7f:0f:
         51:41:13:c5:a1:6c:fa:67:a6:e8:37:d3:ec:0f:0d:5b:66:a0:
         f3:93:3d:10:61:1a:ba:14:5c:43:d3:87:66:9c:fc:0c:10:a6:
         61:6c:d6:e5:9d:25:7e:40:b3:2b:1a:55:3f:da:8a:66:49:8d:
         17:5f:be:99:a2:75:fb:4a:25:76:54:cd:67:fb:67:e8:c9:da:
         24:5b:a8:8c:3b:97:90:86:aa:4d:c2:21:54:47:4d:3c:c5:0b:
         dc:15:af:5e:ac:49:ba:dc:98:53:27:cf:57:b2:22:9e:e8:1e:
         f5:bb:8a:63:4c:ce:29:ff:e4:40:ff:45:be:26:18:48:d6:49:
         7c:05:08:ee:c5:8e:7e:40:6c:d3:43:06:61:61:09:dd:b4:1a:
         f0:16:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:57 2026 by rpki-client