Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          l0LgpTMBPuNmo/dt8Z23Zqh062+OMERJqjsDxMwG/1k=
Subject key identifier:   8D:8A:CC:05:B0:00:63:09:B6:36:64:17:A7:51:4F:DC:F1:2E:0C:42
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       306EBA70B47EC165A28A9011AB1C80C959C3F041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          09B1
Signing time:             Tue 23 Jun 2026 10:52:27 +0000
Manifest this update:     Tue 23 Jun 2026 10:47:27 +0000
Manifest next update:     Wed 24 Jun 2026 13:18:27 +0000
Files and hashes:         1: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: bn/qMrJZn+P/wPIixqbtgGZZgPHROqYvhsj72vXDS1g=)
                          2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: BUTxHk0P7Sq5NL7BcLmY1tdtKOM/VMawb2QJSMtO1Q0=)
                          3: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: Izrj79wt+RBQV12QVEUOu15QuWkg9UzFqRUkmutLJto=)
                          4: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 2a17Lk2A8/wL7uW3pe0LYOncmlPOF8z6wyS66XDk5lw=)
                          5: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: wOZJS6uvTmBL91ukbSgl/8yVZucl2h3wbLfhGH07O98=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 13:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6e:ba:70:b4:7e:c1:65:a2:8a:90:11:ab:1c:80:c9:59:c3:f0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Jun 23 10:47:27 2026 GMT
            Not After : Jun 24 13:18:27 2026 GMT
        Subject: CN=8D8ACC05B0006309B6366417A7514FDCF12E0C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:02:96:ff:1f:49:99:1f:49:2e:1e:66:53:
                    fa:35:c9:04:82:e3:e7:c1:c0:52:2e:7b:35:da:ea:
                    da:fd:22:28:5f:3d:62:51:e3:bf:8b:7c:d2:df:db:
                    81:6c:57:16:7c:f5:3c:3f:49:b6:66:04:63:d5:8f:
                    6e:7f:a2:77:c5:40:e6:ac:81:ed:23:1e:06:c9:74:
                    1e:d3:b6:10:6b:41:6f:e4:c8:04:81:3a:c9:7d:e8:
                    c3:69:25:70:83:1a:fb:87:f0:07:cd:ff:04:7a:75:
                    bb:5e:c4:09:a1:97:23:1c:af:56:51:36:b5:22:10:
                    4a:12:85:32:e9:c5:85:f1:3f:d7:29:ca:b3:32:96:
                    7c:70:65:0e:3f:d8:ac:47:ba:f0:58:47:9d:73:10:
                    7c:f7:8e:10:56:23:90:56:5d:b9:f3:19:85:0d:b3:
                    37:dc:75:76:57:f8:de:f8:6c:35:e0:0d:37:68:8c:
                    39:4e:04:3e:06:41:e8:e9:f7:61:29:30:a6:d0:15:
                    a9:27:9d:2c:84:16:c4:e2:ad:b6:0b:52:a7:98:77:
                    82:46:4d:08:c4:07:c2:d4:ec:86:88:e5:29:da:50:
                    ac:fb:07:a3:ae:47:e5:b9:21:d2:84:9f:e3:66:5c:
                    8b:17:09:48:d7:84:97:14:e5:8f:cb:6c:65:d4:52:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:CC:05:B0:00:63:09:B6:36:64:17:A7:51:4F:DC:F1:2E:0C:42
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:43:7d:7a:97:74:38:0e:03:af:79:e1:ed:e4:56:d5:d0:4f:
         1e:f2:aa:b3:68:05:cb:34:54:be:79:24:c4:1c:d2:4d:4d:de:
         b6:4c:aa:8d:d8:ec:02:21:ce:0a:f0:ec:e1:a3:79:d6:de:ca:
         62:a9:87:f3:1e:dc:07:bb:1e:6e:f3:48:f7:11:8f:cc:55:fb:
         db:62:b0:f8:49:7c:19:a7:0b:44:d4:63:37:ae:be:9d:75:14:
         2e:91:35:fb:9c:37:54:39:3f:f9:fa:70:7f:ec:98:9c:13:95:
         45:cc:26:57:38:99:32:a7:ae:65:2c:a3:f4:08:a8:5c:17:52:
         30:b7:27:98:07:09:8c:ba:25:f2:a6:3e:2c:4b:09:b0:7e:c5:
         e2:e1:d3:42:f5:e1:6f:82:c3:cb:77:bd:cb:a3:0a:d7:80:4b:
         7d:45:87:4b:5d:bd:da:83:bf:ed:5d:92:f2:67:1e:f8:66:93:
         ff:c5:3e:f3:d2:5b:53:ac:d4:d0:01:c4:2e:29:12:c3:91:23:
         16:41:9c:4c:f2:3e:6f:19:31:31:d7:37:8e:f3:5a:ed:d8:97:
         67:5d:7b:e4:84:9a:c5:46:c4:53:5d:ed:f2:54:65:3f:33:04:
         ef:dc:7e:e2:c2:9e:04:41:08:7a:02:6f:b5:5f:62:0c:58:84:
         1a:0c:61:63
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUMG66cLR+wWWiipARqxyAyVnD8EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFkZDU0NjY3MjMwODQ0OTBlZjQ5MWM2MTliOGJjNjFh
MzI4YThiNjAeFw0yNjA2MjMxMDQ3MjdaFw0yNjA2MjQxMzE4MjdaMDMxMTAvBgNV
BAMTKDhEOEFDQzA1QjAwMDYzMDlCNjM2NjQxN0E3NTE0RkRDRjEyRTBDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QAKW/x9JmR9JLh5mU/o1yQSC
4+fBwFIuezXa6tr9IihfPWJR47+LfNLf24FsVxZ89Tw/SbZmBGPVj25/onfFQOas
ge0jHgbJdB7TthBrQW/kyASBOsl96MNpJXCDGvuH8AfN/wR6dbtexAmhlyMcr1ZR
NrUiEEoShTLpxYXxP9cpyrMylnxwZQ4/2KxHuvBYR51zEHz3jhBWI5BWXbnzGYUN
szfcdXZX+N74bDXgDTdojDlOBD4GQejp92EpMKbQFaknnSyEFsTirbYLUqeYd4JG
TQjEB8LU7IaI5SnaUKz7B6OuR+W5IdKEn+NmXIsXCUjXhJcU5Y/LbGXUUiMNAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUjYrMBbAAYwm2NmQXp1FP3PEuDEIwHwYDVR0j
BBgwFoAUSt1UZnIwhEkO9JHGGbi8YaMoqLYwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC8wLzRBREQ1NDY2NzIzMDg0NDkwRUY0OTFDNjE5QjhCQzYxQTMyOEE4QjYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9TdDFVWm5Jd2hFa085SkhHR2JpOFlhTW9x
TFkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzAvNEFERDU0NjY3MjMwODQ0OTBFRjQ5
MUM2MTlCOEJDNjFBMzI4QThCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACVDfXqXdDgOA6954e3kVtXQ
Tx7yqrNoBcs0VL55JMQc0k1N3rZMqo3Y7AIhzgrw7OGjedbeymKph/Me3Ae7Hm7z
SPcRj8xV+9tisPhJfBmnC0TUYzeuvp11FC6RNfucN1Q5P/n6cH/smJwTlUXMJlc4
mTKnrmUso/QIqFwXUjC3J5gHCYy6JfKmPixLCbB+xeLh00L14W+Cw8t3vcujCteA
S31Fh0tdvdqDv+1dkvJnHvhmk//FPvPSW1Os1NABxC4pEsORIxZBnEzyPm8ZMTHX
N47zWu3Yl2dde+SEmsVGxFNd7fJUZT8zBO/cfuLCngRBCHoCb7VfYgxYhBoMYWM=
-----END CERTIFICATE-----
Generated at Wed Jun 24 05:52:39 2026 by rpki-client