Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          tbgfqoEoY//HZOcE8z52HhunTnFDijq21QcnXu+3HdU=
Subject key identifier:   5B:78:8B:95:9F:ED:5B:34:7A:EA:E2:F2:3A:3B:44:53:81:62:A9:55
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       39045D503A2495D4460078BC79DEFE2F757BC1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0CB2
Signing time:             Tue 18 Aug 2026 18:00:27 +0000
Manifest this update:     Tue 18 Aug 2026 17:55:27 +0000
Manifest next update:     Wed 19 Aug 2026 18:13:27 +0000
Files and hashes:         1: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: bn/qMrJZn+P/wPIixqbtgGZZgPHROqYvhsj72vXDS1g=)
                          2: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: Izrj79wt+RBQV12QVEUOu15QuWkg9UzFqRUkmutLJto=)
                          3: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 2a17Lk2A8/wL7uW3pe0LYOncmlPOF8z6wyS66XDk5lw=)
                          4: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: EV3W5/xkNfrxqXyw1B+legCVIWuPrxPvLlI1ikA0L5k=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Aug 2026 18:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:04:5d:50:3a:24:95:d4:46:00:78:bc:79:de:fe:2f:75:7b:c1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Aug 18 17:55:27 2026 GMT
            Not After : Aug 19 18:13:27 2026 GMT
        Subject: CN=5B788B959FED5B347AEAE2F23A3B44538162A955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:46:a0:8b:58:30:d9:d1:6f:12:2f:72:5f:
                    ee:36:ba:48:74:05:9f:e4:37:af:c1:24:ab:f4:ad:
                    d6:b8:8a:4a:1b:90:cc:ea:d2:6c:73:ce:12:89:c5:
                    44:20:26:d1:bf:0c:06:c0:2f:3a:c2:f8:86:70:05:
                    b8:8e:06:a8:85:82:6a:c9:e7:00:84:a2:69:03:ba:
                    ce:61:33:16:b0:cf:ac:f8:24:b8:f4:80:ad:37:53:
                    26:06:5b:bd:bb:ec:78:85:ca:59:be:08:29:98:18:
                    9e:3b:70:37:b2:f5:45:66:4d:6f:17:44:cf:55:d6:
                    0a:96:31:43:4e:b6:c5:a1:59:68:47:9e:43:9f:9d:
                    4f:fd:82:9f:ed:7c:29:8f:31:78:00:1f:fe:19:51:
                    87:96:3c:b6:4b:0d:1c:02:fe:0f:ba:a0:d7:08:ae:
                    13:be:04:86:8a:ce:3a:1d:65:b9:d0:c0:c1:c7:8d:
                    98:66:d7:ce:8b:14:df:fc:ec:99:08:0a:db:4a:3b:
                    e1:2f:f9:c9:38:63:70:8a:c6:07:b8:72:70:a6:fa:
                    84:21:a9:4c:91:66:4f:93:cb:1c:41:dd:9f:f8:e1:
                    f6:ea:e9:70:65:0b:2a:a5:0d:76:37:b6:e4:20:1b:
                    34:d5:04:d2:26:2f:7a:a8:e9:7c:5b:83:69:fe:97:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:8B:95:9F:ED:5B:34:7A:EA:E2:F2:3A:3B:44:53:81:62:A9:55
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:dd:68:37:44:44:69:a6:6d:41:f5:b0:08:fb:27:a8:89:
         3f:d7:6d:9a:f5:f9:71:6b:30:01:bc:1f:70:c3:16:d4:76:86:
         dc:98:e0:28:4f:91:f4:b9:69:af:17:bd:ab:a2:42:50:fd:3f:
         86:af:a1:3b:6d:ef:8d:12:3e:b6:93:e5:f2:11:0c:53:ca:88:
         f8:a3:3f:f8:67:67:06:fe:97:b7:0c:64:8a:ce:b0:c0:9b:cf:
         3a:58:26:55:3d:c7:2d:63:d1:55:50:05:f5:41:c8:91:1c:d5:
         ce:fa:75:2c:ce:ea:ac:a2:0d:e3:f2:3d:7a:b2:2b:6c:ab:17:
         0b:f6:aa:f0:0d:3e:e0:0c:81:2f:c1:bf:7c:2a:ed:b3:7a:2b:
         86:88:6e:8d:71:14:ce:52:d9:6f:9a:bf:11:8e:56:93:11:43:
         da:b6:55:08:99:1d:35:f7:06:b0:88:af:32:8a:c8:cd:68:4b:
         76:7b:18:3d:6b:55:d7:82:df:77:09:76:76:a1:da:cb:32:49:
         c3:fb:59:94:1e:72:50:3d:09:65:49:32:6f:6f:ba:08:e5:ce:
         39:74:7e:66:d9:39:9d:eb:d7:ce:43:35:82:13:a9:a3:5f:f4:
         1a:7c:78:33:e1:fb:d7:b9:27:d0:7b:a3:9a:9b:e1:0e:d6:76:
         2d:5c:60:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 06:16:56 2026 by rpki-client