Manifest

$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
File:                     321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json)
Hash identifier:          bLxgELsLD7dxElRnoKzPT5pHvU5pPTQh4T5ftrWnov4=
Subject key identifier:   21:30:81:E3:05:3C:30:ED:50:3C:84:83:17:DE:75:4E:E3:68:38:6D
Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
Certificate issuer:       /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
Certificate serial:       58E0E97977E31DDEBB13EEE0353B787932C0EB9E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
Subject info access:      rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
Manifest number:          13
Signing time:             Sat 13 Jun 2026 10:03:52 +0000
Manifest this update:     Sat 13 Jun 2026 09:58:52 +0000
Manifest next update:     Sun 14 Jun 2026 11:57:52 +0000
Files and hashes:         1: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=)
                          2: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: iKt7JhD9wwdGjrOcHxpMVyDnoNKF6za0+MKxgGuaO/o=)
Validation:               OK
Signature path:           rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl
                          rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e0:e9:79:77:e3:1d:de:bb:13:ee:e0:35:3b:78:79:32:c0:eb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
        Validity
            Not Before: Jun 13 09:58:52 2026 GMT
            Not After : Jun 14 11:57:52 2026 GMT
        Subject: CN=213081E3053C30ED503C848317DE754EE368386D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:24:2c:fe:d7:ce:a3:6a:68:1e:11:62:3d:
                    0c:91:85:56:64:6b:a0:1e:cc:70:06:97:93:2b:fc:
                    2e:7e:22:1e:4f:5e:b1:a4:69:ba:47:e5:cc:36:b6:
                    28:68:17:b0:6b:08:f9:87:81:e3:5d:4f:cf:35:25:
                    73:b7:a4:c3:38:d4:3a:b0:34:57:8d:ee:e7:57:66:
                    32:1e:83:07:0f:5d:f4:74:21:b0:ee:bb:22:d2:4d:
                    b0:23:9b:68:b0:a8:ed:1d:06:b6:84:2e:9b:1d:bb:
                    c4:34:07:a7:10:8d:8a:4c:77:e0:0a:fa:da:7c:59:
                    d3:9f:9f:57:5b:8c:93:5a:c8:5a:fe:3c:92:e3:25:
                    fa:cc:85:f8:b3:cf:78:e7:3d:28:cc:87:f3:c9:e8:
                    60:ff:83:8a:b9:fa:7f:1d:2c:f2:27:e2:75:f7:cc:
                    14:91:d7:f3:3b:61:cb:c8:80:c3:2f:cb:6a:f0:b1:
                    3e:57:65:4c:59:71:40:16:bc:91:33:61:71:c5:8a:
                    75:98:8b:3d:77:e5:23:34:00:51:45:0c:e4:99:8c:
                    2e:d4:4d:8d:75:c0:6a:a9:ec:d7:eb:3b:a9:d6:0d:
                    8a:22:e2:91:0f:08:97:98:51:6f:70:33:ac:31:37:
                    07:72:2f:6e:4d:d6:9e:cf:11:38:24:c9:73:61:4b:
                    e7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:81:E3:05:3C:30:ED:50:3C:84:83:17:DE:75:4E:E3:68:38:6D
            X509v3 Authority Key Identifier:
                keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:01:a0:66:ea:da:5a:06:1e:98:18:be:e9:34:b8:fc:cb:64:
         f2:74:a0:45:36:7e:41:17:67:e4:a4:75:91:8e:91:9e:77:4e:
         b6:a1:61:be:6d:7b:cd:3b:fe:63:bf:0c:01:ba:57:e6:90:fa:
         90:72:66:a2:22:9f:4d:e2:3c:63:8b:89:32:45:ab:c2:fe:79:
         9c:85:a6:03:8a:eb:dd:d9:de:11:21:da:4e:4f:0f:5f:d2:e4:
         ba:88:4e:1b:0a:a7:55:1a:09:0a:a9:f6:6e:5f:2e:15:db:0a:
         4f:1d:6d:59:a4:72:51:8b:4f:73:a5:94:94:7c:48:4c:2e:cd:
         a1:e7:20:4a:32:68:e6:8a:49:b4:32:0b:45:fb:51:a0:c2:cc:
         5f:94:4c:fe:56:cf:68:08:cb:fb:a3:90:74:24:69:16:e4:73:
         e6:6b:eb:4a:35:a6:1c:21:c9:9c:29:76:f7:54:42:fa:66:ca:
         57:99:0e:19:e0:e9:17:e8:f5:35:9a:6a:ff:5e:e4:f9:0a:54:
         65:bf:94:95:71:bd:69:2b:53:aa:fa:d1:a5:99:82:69:54:f9:
         3c:b6:6b:24:d8:c6:67:1e:2d:3e:4b:34:eb:e7:85:04:29:3b:
         6e:01:f2:58:83:0e:f0:a9:d7:f9:b3:c9:a8:d0:57:5f:9f:cd:
         63:e2:a4:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUWODpeXfjHd67E+7gNTt4eTLA654wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxRkJGRTVGQjIwNDJGRjJCQjJFRThGNUUzMjVEOTYz
QzE3Qzk5NzAeFw0yNjA2MTMwOTU4NTJaFw0yNjA2MTQxMTU3NTJaMDMxMTAvBgNV
BAMTKDIxMzA4MUUzMDUzQzMwRUQ1MDNDODQ4MzE3REU3NTRFRTM2ODM4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIViQs/tfOo2poHhFiPQyRhVZk
a6AezHAGl5Mr/C5+Ih5PXrGkabpH5cw2tihoF7BrCPmHgeNdT881JXO3pMM41Dqw
NFeN7udXZjIegwcPXfR0IbDuuyLSTbAjm2iwqO0dBraELpsdu8Q0B6cQjYpMd+AK
+tp8WdOfn1dbjJNayFr+PJLjJfrMhfizz3jnPSjMh/PJ6GD/g4q5+n8dLPIn4nX3
zBSR1/M7YcvIgMMvy2rwsT5XZUxZcUAWvJEzYXHFinWYiz135SM0AFFFDOSZjC7U
TY11wGqp7NfrO6nWDYoi4pEPCJeYUW9wM6wxNwdyL25N1p7PETgkyXNhS+cxAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUITCB4wU8MO1QPISDF951TuNoOG0wHwYDVR0j
BBgwFoAUMh+/5fsgQv8rsu6PXjJdljwXyZcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8z
MjFGQkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3LmNybDCBngYI
KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8wLzMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2
M0MxN0M5OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6
Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS80LzMyMUZCRkU1RkIyMDQyRkYyQkIy
RUU4RjVFMzI1RDk2M0MxN0M5OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB
CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2AaBm6tpaBh6YGL7pNLj8
y2TydKBFNn5BF2fkpHWRjpGed062oWG+bXvNO/5jvwwBulfmkPqQcmaiIp9N4jxj
i4kyRavC/nmchaYDiuvd2d4RIdpOTw9f0uS6iE4bCqdVGgkKqfZuXy4V2wpPHW1Z
pHJRi09zpZSUfEhMLs2h5yBKMmjmikm0MgtF+1GgwsxflEz+Vs9oCMv7o5B0JGkW
5HPma+tKNaYcIcmcKXb3VEL6ZspXmQ4Z4OkX6PU1mmr/XuT5ClRlv5SVcb1pK1Oq
+tGlmYJpVPk8tmsk2MZnHi0+SzTr54UEKTtuAfJYgw7wqdf5s8mo0Fdfn81j4qQd
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:52 2026 by rpki-client