Manifest

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          6lqfT3ijqk/2brvJ4mFi+pcfTnq/OHwq6MVDp9/VtjE=
Subject key identifier:   7B:5F:0C:20:61:48:4E:13:D5:62:A0:4D:2D:7B:22:C4:22:46:91:25
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       48A9788DFE7708203DCE828B5E48916A56B2B321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0D69
Signing time:             Tue 29 Sep 2026 20:52:46 +0000
Manifest this update:     Tue 29 Sep 2026 20:47:46 +0000
Manifest next update:     Thu 01 Oct 2026 00:26:46 +0000
Files and hashes:         1: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: Izrj79wt+RBQV12QVEUOu15QuWkg9UzFqRUkmutLJto=)
                          2: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: bn/qMrJZn+P/wPIixqbtgGZZgPHROqYvhsj72vXDS1g=)
                          3: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: 3gT7ApOf81xld32oR6WCkEtDblGAM8/nLvi4qywp7pk=)
                          4: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 2a17Lk2A8/wL7uW3pe0LYOncmlPOF8z6wyS66XDk5lw=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a9:78:8d:fe:77:08:20:3d:ce:82:8b:5e:48:91:6a:56:b2:b3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Sep 29 20:47:46 2026 GMT
            Not After : Oct  1 00:26:46 2026 GMT
        Subject: CN=7B5F0C2061484E13D562A04D2D7B22C422469125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:64:94:ab:61:6b:e0:fa:f0:ac:2d:84:ce:
                    83:72:0a:97:2e:6b:ea:fb:be:b9:58:e3:d7:78:02:
                    54:00:e2:1e:fe:f1:ed:f7:39:1a:41:27:7d:00:cf:
                    33:db:ee:2b:6a:97:06:45:cb:75:87:f5:f7:2b:45:
                    dc:55:0c:3a:d6:21:29:3a:2e:ee:fb:e8:f5:83:f3:
                    c8:3e:7d:b1:f7:a6:61:75:bf:63:4a:cf:68:71:d0:
                    d4:2b:8e:1e:da:34:32:6d:9f:70:33:04:7c:9f:cf:
                    8a:1b:d2:de:2d:d9:21:c9:ae:a4:38:ed:17:25:4a:
                    24:b7:b8:7a:1a:69:de:19:3b:bd:bb:49:36:4b:b2:
                    00:4a:fc:ab:53:32:f8:f4:53:8d:96:0e:e3:41:7e:
                    05:13:b3:e3:ae:c5:3f:2d:f2:ed:b3:3c:03:0c:61:
                    a6:b4:ac:72:4b:41:9d:df:72:e2:0b:90:0b:03:36:
                    88:e5:15:d9:9b:d9:ce:50:0f:01:3a:a8:96:9b:e5:
                    6d:fd:79:73:3d:a1:7f:bc:65:86:1a:c7:ba:3e:e2:
                    c5:3a:b6:1d:0b:0d:6d:d7:69:5f:6d:be:de:de:6b:
                    c6:23:7d:ca:5e:a2:38:07:14:92:b9:bc:04:fc:f8:
                    72:b2:3c:76:9c:21:02:07:8d:6c:9f:39:de:f2:2b:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5F:0C:20:61:48:4E:13:D5:62:A0:4D:2D:7B:22:C4:22:46:91:25
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:26:54:5d:9c:b1:49:a6:47:66:d8:9c:54:56:7d:a3:14:f5:
         5a:c3:ca:d2:cc:1b:e6:25:61:f3:1f:bc:50:0b:ef:bb:5e:a1:
         4c:b2:16:6f:db:a5:c6:7d:cf:99:bb:27:df:05:6f:c4:94:c8:
         6d:df:0a:a3:7b:24:e6:7e:51:61:7b:d5:17:87:96:77:78:17:
         4c:13:f0:40:e4:48:d1:c8:26:90:86:d7:44:84:1d:f2:6e:d6:
         5f:19:4c:45:9c:a1:5a:9e:25:89:e8:47:f8:88:6e:d5:d6:59:
         5b:b2:4e:be:d1:2c:1e:fe:c2:31:ab:10:d5:28:d2:c8:dc:6c:
         14:71:11:86:08:0e:a7:a6:e2:b4:b4:af:b2:b6:e3:6d:92:d7:
         65:de:82:06:91:aa:7c:4a:4d:24:b3:cc:c4:38:c7:50:10:f1:
         98:8f:e0:10:92:bc:50:e6:ec:cf:a8:92:87:92:e3:23:bb:52:
         c8:7f:40:30:01:98:c7:4e:bb:87:2a:54:c9:e7:fe:47:77:13:
         96:e8:72:4e:fc:bf:ef:37:32:e4:6d:fe:72:88:46:b3:a4:1e:
         61:08:2b:32:7e:d5:c3:50:16:f7:62:a2:00:f9:20:71:50:2e:
         71:79:70:ef:27:b3:1a:d8:d7:ee:02:4f:2d:91:f7:4e:78:3c:
         d7:87:15:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:01 2026 by rpki-client