Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          c0eCfNrze+6vEoSF74Ypm67+AmZ76jlmvizv1LFenL0=
Subject key identifier:   7C:DE:5C:37:C2:BC:22:E2:DE:D6:F6:D8:90:F7:33:45:1A:81:69:A0
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       2113B10E5D2A15EB8027B062655C3CE984BBC88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0C7C
Signing time:             Fri 14 Aug 2026 06:00:03 +0000
Manifest this update:     Fri 14 Aug 2026 05:55:03 +0000
Manifest next update:     Sat 15 Aug 2026 09:46:03 +0000
Files and hashes:         1: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: bn/qMrJZn+P/wPIixqbtgGZZgPHROqYvhsj72vXDS1g=)
                          2: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: Izrj79wt+RBQV12QVEUOu15QuWkg9UzFqRUkmutLJto=)
                          3: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: VysiBGtL8vc9UAE3LIHFpx4QfOZK89EqyaA1IPjX9xU=)
                          4: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 2a17Lk2A8/wL7uW3pe0LYOncmlPOF8z6wyS66XDk5lw=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:13:b1:0e:5d:2a:15:eb:80:27:b0:62:65:5c:3c:e9:84:bb:c8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Aug 14 05:55:03 2026 GMT
            Not After : Aug 15 09:46:03 2026 GMT
        Subject: CN=7CDE5C37C2BC22E2DED6F6D890F733451A8169A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:a9:9a:8e:9e:3d:aa:56:1f:8d:8d:18:86:
                    f8:11:db:75:dc:cd:56:0f:89:a3:18:03:7e:f8:ba:
                    a5:5a:e0:3e:ad:a9:04:79:ba:66:ae:a0:83:16:f6:
                    a2:de:55:10:85:82:75:b5:32:e6:bc:93:3f:64:70:
                    20:d5:91:fe:e2:44:d9:d1:98:9a:90:25:2c:17:3c:
                    b3:f3:61:51:ec:6a:cb:69:68:5a:77:f2:19:58:01:
                    2c:3f:fa:ac:8a:a2:17:b6:95:44:59:ff:4e:8a:06:
                    46:99:3d:05:6d:66:6e:b1:be:04:c7:dc:10:53:0a:
                    3c:41:e3:c8:9c:01:f6:2e:40:fe:f4:f6:55:83:1a:
                    ef:40:62:34:6c:5b:77:aa:2f:fb:c2:ec:35:b4:da:
                    ea:63:75:20:1e:59:22:f9:28:13:60:0c:38:3b:51:
                    c3:ba:09:7c:ee:45:cc:5b:b2:43:2f:2f:19:af:40:
                    5f:d8:ff:00:a2:71:e3:37:30:d0:e7:24:7b:48:31:
                    65:8c:ef:80:89:41:ef:75:03:ca:58:8b:f8:ac:fc:
                    5a:46:aa:b4:74:ec:45:42:04:85:58:96:71:aa:b8:
                    77:e2:56:5e:e5:34:b1:83:81:80:6c:64:d6:2e:7d:
                    27:90:93:3e:c9:91:be:ee:14:ae:f4:19:86:2d:8b:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:5C:37:C2:BC:22:E2:DE:D6:F6:D8:90:F7:33:45:1A:81:69:A0
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d8:d4:4d:51:40:53:4a:aa:82:ad:67:0b:e2:93:a3:23:45:
         40:ee:1b:a0:b6:6c:f4:ab:b9:86:63:88:75:6b:91:91:43:1e:
         fb:e5:17:1a:8e:52:9b:18:3c:03:30:b7:49:51:a8:11:98:07:
         94:f1:6b:19:b1:21:1b:e0:56:0f:d7:55:3d:6d:c0:8b:a6:93:
         a4:a9:18:e3:f3:39:2a:dc:2e:58:a8:53:7b:7e:0f:d1:27:3b:
         7d:16:bf:aa:85:e5:46:a7:60:ca:ad:ad:77:5e:89:0f:32:e2:
         44:76:27:da:9a:0e:06:30:ec:1a:4d:84:06:13:79:b2:62:df:
         10:ab:17:fb:e6:d4:4b:c5:9c:d1:8e:1a:75:b1:a8:53:7b:d7:
         81:99:cd:7a:64:b0:e1:1a:d6:ac:34:ba:e6:d5:50:13:41:bf:
         2f:05:23:ed:78:3e:3e:38:61:79:3c:a4:25:cc:7d:2b:12:ec:
         a0:ff:a1:3b:21:e9:7b:d8:b2:2e:1f:26:91:18:d1:5c:fb:ae:
         d0:4d:42:a5:71:e8:1a:6e:10:5c:eb:86:87:a5:94:3d:fd:04:
         be:3e:9f:f0:dc:5a:65:d1:11:c7:62:69:32:31:45:9a:0d:2b:
         f7:4f:36:9b:b6:3f:b0:67:64:2c:c4:a5:27:ce:5f:3f:b4:29:
         db:4e:a4:47
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUIROxDl0qFeuAJ7BiZVw86YS7yI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFkZDU0NjY3MjMwODQ0OTBlZjQ5MWM2MTliOGJjNjFh
MzI4YThiNjAeFw0yNjA4MTQwNTU1MDNaFw0yNjA4MTUwOTQ2MDNaMDMxMTAvBgNV
BAMTKDdDREU1QzM3QzJCQzIyRTJERUQ2RjZEODkwRjczMzQ1MUE4MTY5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRKmajp49qlYfjY0YhvgR23Xc
zVYPiaMYA374uqVa4D6tqQR5umauoIMW9qLeVRCFgnW1Mua8kz9kcCDVkf7iRNnR
mJqQJSwXPLPzYVHsastpaFp38hlYASw/+qyKohe2lURZ/06KBkaZPQVtZm6xvgTH
3BBTCjxB48icAfYuQP709lWDGu9AYjRsW3eqL/vC7DW02upjdSAeWSL5KBNgDDg7
UcO6CXzuRcxbskMvLxmvQF/Y/wCiceM3MNDnJHtIMWWM74CJQe91A8pYi/is/FpG
qrR07EVCBIVYlnGquHfiVl7lNLGDgYBsZNYufSeQkz7Jkb7uFK70GYYti4FdAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUfN5cN8K8IuLe1vbYkPczRRqBaaAwHwYDVR0j
BBgwFoAUSt1UZnIwhEkO9JHGGbi8YaMoqLYwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC8wLzRBREQ1NDY2NzIzMDg0NDkwRUY0OTFDNjE5QjhCQzYxQTMyOEE4QjYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9TdDFVWm5Jd2hFa085SkhHR2JpOFlhTW9x
TFkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzAvNEFERDU0NjY3MjMwODQ0OTBFRjQ5
MUM2MTlCOEJDNjFBMzI4QThCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIPY1E1RQFNKqoKtZwvik6Mj
RUDuG6C2bPSruYZjiHVrkZFDHvvlFxqOUpsYPAMwt0lRqBGYB5TxaxmxIRvgVg/X
VT1twIumk6SpGOPzOSrcLlioU3t+D9EnO30Wv6qF5UanYMqtrXdeiQ8y4kR2J9qa
DgYw7BpNhAYTebJi3xCrF/vm1EvFnNGOGnWxqFN714GZzXpksOEa1qw0uubVUBNB
vy8FI+14Pj44YXk8pCXMfSsS7KD/oTsh6XvYsi4fJpEY0Vz7rtBNQqVx6BpuEFzr
hoellD39BL4+n/DcWmXREcdiaTIxRZoNK/dPNpu2P7BnZCzEpSfOXz+0KdtOpEc=
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:49 2026 by rpki-client