Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
File:                     911E180145E68F7315DA3AB2200D186671FFE75B.mft (raw, json)
Hash identifier:          mVC6Q+HObmX5viuG54KLkVqC7cPOV9LyW3wvJilDxOo=
Subject key identifier:   CC:42:D7:91:CD:8C:61:EC:44:D8:87:A5:01:81:50:42:0B:16:C1:CD
Authority key identifier: 91:1E:18:01:45:E6:8F:73:15:DA:3A:B2:20:0D:18:66:71:FF:E7:5B
Certificate issuer:       /CN=911e180145e68f7315da3ab2200d186671ffe75b
Certificate serial:       61500B895674AD63BC565A381D7C689BB80E485A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
Manifest number:          02F3
Signing time:             Fri 12 Jun 2026 14:00:10 +0000
Manifest this update:     Fri 12 Jun 2026 13:55:10 +0000
Manifest next update:     Sat 13 Jun 2026 17:31:10 +0000
Files and hashes:         1: AS209306.asa (hash: rzc9nro9/JlGNqFIZn9IN4vchx3h7MsrgBj2y3yXO2I=)
                          2: 911E180145E68F7315DA3AB2200D186671FFE75B.crl (hash: MHyPczF7pyGuyJwTR/yggrxq6fDQVnfgArlVpwLm+3s=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:50:0b:89:56:74:ad:63:bc:56:5a:38:1d:7c:68:9b:b8:0e:48:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911e180145e68f7315da3ab2200d186671ffe75b
        Validity
            Not Before: Jun 12 13:55:10 2026 GMT
            Not After : Jun 13 17:31:10 2026 GMT
        Subject: CN=CC42D791CD8C61EC44D887A5018150420B16C1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:dc:2f:8f:8d:8b:9e:d8:48:f7:78:04:06:
                    7e:93:5e:8e:06:68:cc:4e:d3:63:dc:c8:f6:32:86:
                    a4:f2:9b:f9:6f:f5:30:af:f8:f3:af:e7:2e:f9:3f:
                    0b:4f:80:7f:65:34:12:43:be:0a:4b:f6:8f:fe:ba:
                    5e:19:28:3f:e0:92:c1:17:ae:18:9e:72:84:fa:31:
                    6c:cf:74:89:0a:75:04:2e:9b:6e:4e:b3:0d:fe:04:
                    3a:ed:54:f6:ac:66:a0:c7:b8:3f:f2:8e:85:25:53:
                    eb:e2:95:42:5d:68:8b:17:56:72:4a:f1:1f:ba:f8:
                    69:c1:99:0a:62:62:cf:38:6d:f3:2c:b6:2a:48:bb:
                    4c:91:15:7a:f5:55:1a:84:05:f9:c6:45:fd:72:b2:
                    97:ac:89:50:f1:f6:df:d0:14:f7:6c:0f:31:dc:c6:
                    df:0f:c7:50:15:ea:87:ae:f6:8b:3e:7f:4c:fa:b2:
                    82:a7:49:3b:7c:84:ef:f8:47:2a:e9:bb:de:ab:05:
                    2e:15:6e:f4:3b:b5:7d:cc:84:46:ba:bc:75:f6:4e:
                    3b:58:c5:51:67:b3:5b:d5:b0:8e:c4:42:89:c5:32:
                    f6:41:33:f0:19:87:95:7f:13:b9:c2:c2:35:e3:e6:
                    a0:9a:55:8c:29:63:48:b5:12:e6:a1:46:24:ef:db:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:42:D7:91:CD:8C:61:EC:44:D8:87:A5:01:81:50:42:0B:16:C1:CD
            X509v3 Authority Key Identifier:
                keyid:91:1E:18:01:45:E6:8F:73:15:DA:3A:B2:20:0D:18:66:71:FF:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4b:8c:f4:4b:3a:04:32:51:1f:39:44:4c:93:23:1f:46:a0:
         e9:1e:16:c3:bf:4a:95:d8:77:43:46:ed:ec:ab:11:3a:6c:2d:
         f3:06:0e:2e:cb:3a:7d:ee:cb:9b:58:e8:46:d3:3f:e2:42:54:
         df:64:4a:fc:a8:07:15:10:c9:7e:59:fb:f6:eb:15:00:49:77:
         80:68:27:44:a3:2c:48:05:ed:de:63:90:c4:0d:e6:f5:75:03:
         db:f4:5c:86:2e:68:2c:58:72:69:ab:00:7c:8f:e9:c6:8e:79:
         d4:ae:4f:ef:52:a2:19:c8:f5:52:3e:a9:83:41:93:68:ad:ab:
         0c:01:4e:c7:2b:62:ef:9c:96:b3:12:66:44:ce:cd:95:a1:14:
         42:f4:00:5f:22:76:eb:cd:82:c0:bf:56:46:71:b0:07:c4:e8:
         83:83:ad:c0:f5:c3:23:b7:50:bb:d6:cb:ff:57:fc:d3:80:25:
         45:a1:fe:60:ba:3e:e2:cb:54:52:40:56:bc:85:23:a1:f8:6a:
         1d:f9:2f:fe:94:7c:b8:af:d2:10:bf:a0:f1:ba:4f:05:d1:c1:
         5d:73:ea:d5:0c:ed:32:50:f8:55:28:1c:e7:5b:61:20:99:b3:
         39:91:fc:0b:55:37:7f:79:9c:6b:fc:7f:b6:b6:c0:c5:3e:c2:
         6a:51:a0:c6
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUYVALiVZ0rWO8Vlo4HXxom7gOSFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTExZTE4MDE0NWU2OGY3MzE1ZGEzYWIyMjAwZDE4NjY3
MWZmZTc1YjAeFw0yNjA2MTIxMzU1MTBaFw0yNjA2MTMxNzMxMTBaMDMxMTAvBgNV
BAMTKENDNDJENzkxQ0Q4QzYxRUM0NEQ4ODdBNTAxODE1MDQyMEIxNkMxQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2twvj42LnthI93gEBn6TXo4G
aMxO02PcyPYyhqTym/lv9TCv+POv5y75PwtPgH9lNBJDvgpL9o/+ul4ZKD/gksEX
rhiecoT6MWzPdIkKdQQum25Osw3+BDrtVPasZqDHuD/yjoUlU+vilUJdaIsXVnJK
8R+6+GnBmQpiYs84bfMstipIu0yRFXr1VRqEBfnGRf1yspesiVDx9t/QFPdsDzHc
xt8Px1AV6oeu9os+f0z6soKnSTt8hO/4Ryrpu96rBS4VbvQ7tX3MhEa6vHX2TjtY
xVFns1vVsI7EQonFMvZBM/AZh5V/E7nCwjXj5qCaVYwpY0i1EuahRiTv22bNAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUzELXkc2MYexE2IelAYFQQgsWwc0wHwYDVR0j
BBgwFoAUkR4YAUXmj3MV2jqyIA0YZnH/51swDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw
by9UaWFuaGFpUnBraS8xLzkxMUUxODAxNDVFNjhGNzMxNURBM0FCMjIwMEQxODY2
NzFGRkU3NUIuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6
Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9rUjRZQVVYbWozTVYy
anF5SUEwWVpuSF81MXMuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf
cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp
LzEvOTExRTE4MDE0NUU2OEY3MzE1REEzQUIyMjAwRDE4NjY3MUZGRTc1Qi5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHpLjPRLOgQyUR85REyTIx9GoOkeFsO/SpXYd0NG7eyrETpsLfMGDi7L
On3uy5tY6EbTP+JCVN9kSvyoBxUQyX5Z+/brFQBJd4BoJ0SjLEgF7d5jkMQN5vV1
A9v0XIYuaCxYcmmrAHyP6caOedSuT+9SohnI9VI+qYNBk2itqwwBTscrYu+clrMS
ZkTOzZWhFEL0AF8iduvNgsC/VkZxsAfE6IODrcD1wyO3ULvWy/9X/NOAJUWh/mC6
PuLLVFJAVryFI6H4ah35L/6UfLiv0hC/oPG6TwXRwV1z6tUM7TJQ+FUoHOdbYSCZ
szmR/AtVN395nGv8f7a2wMU+wmpRoMY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:12 2026 by rpki-client