Manifest

$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
File:                     321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json)
Hash identifier:          y6dATRz7FEanbr4nOMGTUwXF+akNioT6aikfypdzuUs=
Subject key identifier:   00:0A:DA:14:48:B0:73:CB:91:0B:93:AF:60:4C:2E:7C:F7:E8:90:C0
Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
Certificate issuer:       /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
Certificate serial:       1225162BD9B459413DDD93D56C84649508432946
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
Subject info access:      rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
Manifest number:          4A
Signing time:             Thu 23 Jul 2026 11:53:16 +0000
Manifest this update:     Thu 23 Jul 2026 11:48:16 +0000
Manifest next update:     Fri 24 Jul 2026 13:08:16 +0000
Files and hashes:         1: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: 2FzePBQszNAVF2bC/88/GB96+Pyto0MFey/NXmkurck=)
                          2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=)
Validation:               OK
Signature path:           rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl
                          rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:25:16:2b:d9:b4:59:41:3d:dd:93:d5:6c:84:64:95:08:43:29:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
        Validity
            Not Before: Jul 23 11:48:16 2026 GMT
            Not After : Jul 24 13:08:16 2026 GMT
        Subject: CN=000ADA1448B073CB910B93AF604C2E7CF7E890C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:91:3e:ab:18:46:dc:25:20:46:ae:58:69:
                    8f:b3:70:c7:4b:6a:6b:85:ed:aa:15:54:0d:77:69:
                    05:b3:92:dd:33:92:2f:af:80:c9:f4:17:9c:f9:a3:
                    6d:fe:df:a7:32:c6:1b:e0:0d:eb:e4:09:81:81:d6:
                    97:01:70:70:34:48:1d:f5:ef:c0:ef:5f:63:19:aa:
                    ed:f5:5a:40:b8:6b:f2:d2:5d:77:05:61:8a:c5:50:
                    62:bb:da:bf:67:0c:ad:34:25:6c:43:6b:72:0a:29:
                    f9:ab:aa:d9:39:ee:3b:fe:81:e0:95:5d:a5:c2:34:
                    5d:5c:1b:18:ab:6c:d4:c3:07:ba:a2:2b:e9:90:1d:
                    3b:e2:b4:d7:33:a9:1a:42:bc:e0:fc:94:ed:dd:ee:
                    6d:af:8b:5c:47:c3:0a:83:d5:36:22:67:81:61:05:
                    ae:80:1d:81:86:d3:36:a5:64:2d:48:36:12:25:26:
                    8c:bd:b3:39:dc:23:c4:fe:c4:e3:d2:ed:71:0c:88:
                    a5:f7:82:87:ff:16:2c:ad:12:38:db:a4:7b:5b:22:
                    f0:d0:09:e2:43:63:e1:3d:d2:a0:c9:09:d2:bd:eb:
                    49:be:bd:a9:26:5b:83:74:ff:0e:78:02:e3:3b:a0:
                    6f:68:60:5b:74:ca:12:b3:fa:2b:3c:4e:32:c5:f2:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0A:DA:14:48:B0:73:CB:91:0B:93:AF:60:4C:2E:7C:F7:E8:90:C0
            X509v3 Authority Key Identifier:
                keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:87:fa:69:ea:e0:fe:fd:89:01:fa:ef:e7:4a:fb:da:26:be:
         fc:fe:ec:e3:f4:9d:ef:ea:13:21:4c:fd:06:ca:2f:da:f5:c3:
         fa:92:03:2c:ab:2f:79:d1:c8:96:4e:d8:47:88:9d:16:2b:e4:
         3d:b1:27:79:68:b2:b8:cb:dc:d8:c5:e2:9b:c5:6a:ad:19:77:
         5d:4a:c8:ee:d2:e7:6d:bd:d9:dc:ba:cf:1b:17:2f:13:92:82:
         60:47:89:e8:c3:fa:3b:6f:6e:8a:87:38:7c:d7:8f:91:27:30:
         02:5d:e3:2f:54:dd:b9:a5:00:fe:d7:21:a2:31:32:66:85:3c:
         c9:2b:77:de:9d:40:b6:3c:ad:8b:6d:26:c9:a7:0d:df:1c:58:
         29:b4:11:da:20:52:5f:7a:f6:a9:d5:64:51:f7:b3:0b:d1:5f:
         93:ed:52:b8:fc:a2:36:26:d0:3a:ae:a3:c7:e5:26:54:a9:f6:
         55:1b:8d:46:8b:48:d2:7e:e1:41:81:ff:a2:44:6a:96:d8:18:
         20:cc:1a:f9:28:49:d6:04:f9:1c:da:56:f8:98:22:48:d1:dd:
         5e:4e:aa:00:51:cf:43:15:4b:d5:2c:61:6e:7a:52:22:cd:8b:
         64:e9:1b:93:91:b7:b0:3e:46:96:f2:19:30:11:ff:f0:f3:00:
         ee:ab:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:24 2026 by rpki-client