Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
File:                     911E180145E68F7315DA3AB2200D186671FFE75B.mft (raw, json)
Hash identifier:          7Cq+BNPqG6bGIKF1+K4UyBkfgS+jeK21vI5xmctHey4=
Subject key identifier:   F3:0F:0B:E5:FD:1E:2A:CD:FB:48:C4:46:34:DC:22:48:E0:D6:35:02
Authority key identifier: 91:1E:18:01:45:E6:8F:73:15:DA:3A:B2:20:0D:18:66:71:FF:E7:5B
Certificate issuer:       /CN=911e180145e68f7315da3ab2200d186671ffe75b
Certificate serial:       63C8AC81D4E523816755E2626F137A7F57FB775D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
Manifest number:          0289
Signing time:             Wed 25 Mar 2026 13:44:10 +0000
Manifest this update:     Wed 25 Mar 2026 13:39:10 +0000
Manifest next update:     Thu 26 Mar 2026 17:41:10 +0000
Files and hashes:         1: 911E180145E68F7315DA3AB2200D186671FFE75B.crl (hash: SXXC5oLEfHLqf2VN3h/Et7tD0qE5NE+7u10P03lt2bM=)
                          2: AS209306.asa (hash: rzc9nro9/JlGNqFIZn9IN4vchx3h7MsrgBj2y3yXO2I=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c8:ac:81:d4:e5:23:81:67:55:e2:62:6f:13:7a:7f:57:fb:77:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911e180145e68f7315da3ab2200d186671ffe75b
        Validity
            Not Before: Mar 25 13:39:10 2026 GMT
            Not After : Mar 26 17:41:10 2026 GMT
        Subject: CN=F30F0BE5FD1E2ACDFB48C44634DC2248E0D63502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:84:57:ea:15:99:af:5f:c7:30:cd:c4:12:
                    61:18:bd:2f:e9:c3:03:bf:ca:aa:c7:85:0b:8c:75:
                    84:06:6f:63:df:c5:f7:3e:e2:f7:7d:60:c5:f9:ed:
                    7a:3b:e9:e7:4b:7c:b4:aa:9d:a8:96:90:95:d3:64:
                    3d:14:44:3f:10:ee:1a:34:54:8b:91:37:02:4b:16:
                    fb:8d:32:01:ed:ee:3f:3d:b6:23:42:4a:ae:3c:e5:
                    f5:72:f7:1d:bd:a2:07:7b:0c:2e:22:ff:48:da:86:
                    32:c5:24:95:8b:10:7e:fd:75:1a:bf:2a:e0:2d:49:
                    a0:6e:9d:fa:60:cf:89:aa:e1:52:aa:09:74:71:3b:
                    82:ae:04:62:4e:ae:b5:eb:fc:9f:0e:20:61:cd:91:
                    e2:e3:dc:e8:2f:54:ca:b4:84:6a:71:bd:c5:dc:34:
                    b9:bb:f5:74:fa:ad:f3:5a:2e:6e:ba:28:c8:57:ee:
                    2c:2e:b0:ca:af:e2:21:97:69:30:09:d5:9b:7c:94:
                    2f:5a:1a:02:0f:b4:5e:cf:60:9d:1b:79:f5:06:24:
                    1e:b4:f6:be:f8:5e:0c:05:7a:de:95:43:fc:a9:ab:
                    ce:7a:10:2d:3a:c9:42:31:40:48:f7:21:76:b1:3f:
                    6b:83:e0:90:4f:4b:4d:49:c8:19:c9:64:b8:b6:a3:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0F:0B:E5:FD:1E:2A:CD:FB:48:C4:46:34:DC:22:48:E0:D6:35:02
            X509v3 Authority Key Identifier:
                keyid:91:1E:18:01:45:E6:8F:73:15:DA:3A:B2:20:0D:18:66:71:FF:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR4YAUXmj3MV2jqyIA0YZnH_51s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/1/911E180145E68F7315DA3AB2200D186671FFE75B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:aa:30:a1:a7:be:65:84:64:e6:7c:3c:09:51:5c:b1:83:
         1c:b4:db:ae:d5:0c:3d:a1:20:61:cf:c7:61:ea:52:3d:55:56:
         d1:04:b6:b2:28:16:0a:a2:e4:0e:a8:5d:16:f5:ac:86:33:da:
         15:e4:f5:59:0c:b9:a6:fa:c5:10:d0:21:1e:76:57:97:d1:9a:
         1d:3c:5f:bb:33:aa:ce:93:d2:a0:ac:e3:05:13:61:fb:0f:bf:
         0e:26:bc:15:22:40:20:aa:ec:9c:7d:d5:80:76:71:3b:e9:79:
         83:88:3a:53:04:06:70:90:70:d3:81:a3:0a:35:e0:65:a6:36:
         72:38:01:fe:19:b4:51:1e:4e:4f:63:9d:df:f6:4d:71:00:27:
         71:fe:16:d0:a6:98:10:f8:ff:61:ba:cc:95:5a:d2:34:f8:ed:
         bc:70:c5:6d:8c:bf:d3:10:4b:0d:c2:b0:89:f7:b6:ae:75:cd:
         4a:9d:5f:0b:b0:85:09:4f:93:6d:d5:e6:e1:7f:bd:c6:00:cb:
         d1:35:cf:d6:ec:1c:6f:31:31:63:d1:06:6d:50:ad:2e:e3:23:
         31:cb:e6:2c:35:c7:42:ec:4f:50:f2:f0:2c:18:df:df:61:77:
         72:86:06:86:e3:35:ce:11:11:41:ab:7b:20:20:01:d7:22:6e:
         00:e3:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:52 2026 by rpki-client