Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
File:                     3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json)
Hash identifier:          5Hln5wEgmYTOn2S/RtzxIfq4CY2OP5vgDyNkjtzx/6M=
Subject key identifier:   8A:52:5C:9A:AA:02:82:49:F2:49:B4:77:AF:41:0B:D6:A0:98:1E:DD
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       C03AE290EDF613A9FAEB2F3E693CD891A9A5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
Manifest number:          02C9
Signing time:             Wed 13 May 2026 00:30:08 +0000
Manifest this update:     Wed 13 May 2026 00:25:08 +0000
Manifest next update:     Thu 14 May 2026 01:02:08 +0000
Files and hashes:         1: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: /bH9mP2APr9thCaHKHdB26VfovqC/eWoy6KUUQ/3eHg=)
                          2: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=)
                          3: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=)
                          4: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=)
                          5: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=)
                          6: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=)
                          7: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=)
                          8: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=)
                          9: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c0:3a:e2:90:ed:f6:13:a9:fa:eb:2f:3e:69:3c:d8:91:a9:a5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: May 13 00:25:08 2026 GMT
            Not After : May 14 01:02:08 2026 GMT
        Subject: CN=8A525C9AAA028249F249B477AF410BD6A0981EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:63:09:ff:6f:ea:97:d5:69:79:91:28:b8:
                    80:42:7e:a2:58:db:bf:c1:e3:c4:64:e6:fe:79:c4:
                    72:89:be:70:c0:0a:c0:64:0e:5f:a9:2b:1c:bb:75:
                    30:a7:77:fb:fc:74:86:38:3c:cf:9c:e8:99:b6:68:
                    60:36:bc:d3:8f:a1:ed:0e:ef:c1:9f:6a:b0:92:ba:
                    6d:ae:a1:f0:91:cb:2c:7d:47:c4:55:47:9f:3f:c6:
                    83:68:3b:c1:a9:1e:63:d1:53:b9:56:e6:9e:d8:75:
                    f4:45:08:90:42:91:b5:fb:f2:8f:aa:91:44:50:37:
                    28:c0:de:1c:24:0c:75:4f:da:31:69:13:8b:7d:73:
                    59:e9:69:ac:54:6a:3c:5e:df:c8:82:8e:af:df:6e:
                    28:4d:31:29:34:72:14:e6:0b:8f:14:77:10:f0:fe:
                    c0:6b:9f:08:36:5b:64:ce:90:3c:65:39:f6:97:af:
                    b7:16:0f:33:07:1b:b9:b6:83:06:09:dd:9e:a2:e0:
                    73:cf:80:fb:1a:03:dc:69:a7:0b:30:ab:ff:ea:d9:
                    6d:6b:69:68:ff:33:99:b2:bb:64:67:02:26:f8:a6:
                    78:8d:c8:85:aa:82:06:83:9b:2f:93:78:28:a5:1a:
                    1d:21:db:17:ea:de:a2:f3:c6:38:d9:53:04:5b:11:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:52:5C:9A:AA:02:82:49:F2:49:B4:77:AF:41:0B:D6:A0:98:1E:DD
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:19:f3:21:34:21:c5:2b:21:c2:e8:51:c4:e8:cc:79:fb:
         3b:f1:1d:ed:9e:c7:7b:e8:a5:f9:e9:5d:41:9d:95:c0:33:0b:
         f0:7a:8b:c5:ee:42:bd:0a:9b:fe:3f:25:fa:26:d6:f9:8e:8a:
         6f:1e:ef:9c:2f:d1:f5:6f:53:73:b2:d4:12:b1:6e:be:1a:05:
         73:2f:88:6d:48:ce:a3:fd:c0:35:59:5f:54:d4:41:93:d5:a6:
         15:6b:ef:af:3b:9d:24:05:b4:49:88:cc:21:45:ac:fd:1c:f3:
         f1:46:bf:4c:47:d2:02:e7:2b:99:61:b3:3c:04:25:fa:d4:78:
         fc:bd:bd:0a:d9:f8:20:10:b9:c5:0e:9b:84:3a:80:87:ca:b6:
         b9:05:e9:92:82:ba:ec:30:ea:40:77:c3:5b:30:4f:52:82:b7:
         d5:1a:28:40:42:93:04:e6:63:75:b1:74:03:e6:ba:f3:f3:40:
         de:01:9a:50:e4:9e:af:79:e2:40:f6:37:2a:b5:62:4a:20:fe:
         a7:5c:9c:28:dd:f0:8c:e8:78:71:83:89:19:ca:cf:60:88:bf:
         ac:28:c7:67:ff:8a:eb:d1:dc:ea:25:eb:8b:b9:dc:c9:eb:46:
         09:a7:cc:22:51:93:1d:b5:6d:76:c0:f4:4d:3d:12:85:ab:87:
         22:46:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:50:28 2026 by rpki-client