Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
File:                     C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft (raw, json)
Hash identifier:          kDgT5LV63aPO8fqwD2SR/fLO11XhcHBZ7fkzb8/lhSM=
Subject key identifier:   78:44:E9:10:A2:46:B8:A8:45:BB:27:53:0B:7E:83:11:3C:97:F8:78
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       33F7A626CFE4FABF0B7A3BDF5A7DCD8B4ED9CFFA
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
Manifest number:          22
Signing time:             Fri 04 Jul 2025 19:31:20 +0000
Manifest this update:     Fri 04 Jul 2025 19:26:20 +0000
Manifest next update:     Sat 05 Jul 2025 21:20:20 +0000
Files and hashes:         1: AS31898.roa (hash: cq3BShdACWPwzRpiIS2pnu62H9rdmOA1ZymRNaPNQtw=)
                          2: AS214172.roa (hash: s3EPe9so9kXesvF7ZVhQGbkjvhDMQamOwc4XQpr9PxA=)
                          3: AS212085.roa (hash: 5oKnHoFIqCaTVivyc7CLO8ddneHcDpa2psgGQ0ftjp8=)
                          4: AS214040.roa (hash: 4FW2jW/V5o8J7JvnuB+WaUKIs5oPVECc3TlUCF3yJe8=)
                          5: AS215214.roa (hash: GmQ3OCI8tGZTUTMz4uYyEVv15J4oFPm+4V27wNftVBE=)
                          6: B46FBF1DD35487568FC708767F085FAD2881F56D.cer (hash: ASUxtSVu+lKI8+YjlCiOwd6TBGh1n6s7iOxpMYtjz9g=)
                          7: AS209737.roa (hash: auk6lVoX52gZvM3gTogZLgAKER5u29+iS+sJgEwplHo=)
                          8: 015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer (hash: c80CvwDZoubTS+o+8/y3yxxmbgVrfvNdqKcIkfRnfGM=)
                          9: AS215039.roa (hash: jqjgzduCc1c2IsXj5ZxKXMX71MsYD9S0UdIjDrrqrjU=)
                          10: C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl (hash: 5/HABGGghBXid8t4AljA1it0aWCTrTtPsR9RS6lmAGU=)
                          11: AS213707.roa (hash: EhJAYEC69MZ9Rsxm9BGGpLpJW7kT6WqvhUvZS89+Rck=)
                          12: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer (hash: ahqaV+4HiHOPpaj3qi3VIVptaYHuX0yC+1yMijM7WQI=)
                          13: AS214731.roa (hash: 20hee80jSECVNJlojrmn+mQwzq4Vd0w6Txjm7iQjZpk=)
                          14: E9EB50E364277CEB063DCA8C371364FE1CC98844.cer (hash: vCsRl+7QxrluePZMNXZ95wttqo99m8EVJ3nVkIG4VX0=)
                          15: AS213641.roa (hash: HPX1ZAZiGieXaCxo1HhR20IuEnslbTZ+fCZI363hW+Y=)
                          16: AS211066.roa (hash: 2VcT4odu05iTNtTcTH3Br3jLo3QVzK7jhtzBbRLevEA=)
                          17: 8CCE4EEBC2B6B0AEEB31E8910CC55607957B5400.cer (hash: jeHRKAFMmEmPu0goMGNR1T9k3OP2DYLjskD8a4cB00E=)
                          18: AS57483.roa (hash: INcOgquMQYMqrghr2xeujOdEPyHoJln7FOK1W4OwB1A=)
                          19: AS214561.roa (hash: c1LeluazpMZeeSm6qmH3t0DhEzDIW9hy+1ECnUuwv94=)
                          20: AS215216.roa (hash: Db6Qg05WJwgP2f3B4PTwi/nniJ6LLjEJeksp7pAJi1A=)
                          21: AS208913.roa (hash: 8mllHoNPsIx+d4DQkFcwAPl1vte0iImUoz6PEgExMLE=)
                          22: AS215605.roa (hash: JMs/Api4pBvEumrL1jybQrIzEzSkgtas+oWVTfIh25E=)
                          23: AS215108.roa (hash: eqfVBisiJiLDkjQX46/RN5jErMdae7quVhLLT5LOA5c=)
                          24: AS47272.roa (hash: /7hO8nc0IVGqe6XOxgjntxHdMLNeomqr039eTv6qt/8=)
                          25: AS202224.roa (hash: KI5ysKyzm18HsQG96ajd5Nur+T374uYyjO0jjPmRveg=)
                          26: AS214299.roa (hash: Ylr3B6ICsW/g7fdf7wnPQ4t3UjtQFAtMCop4QVkay34=)
                          27: AS20473.roa (hash: NmjMaZ+Awjz4i7+817IMiY9DGOjXoFy1bwWcMv6aBvQ=)
                          28: AS215820.roa (hash: 5kwfJ1ztb0eS5gQGGVKT2TVSoW/m6i3HYiz7Er/Ma18=)
                          29: AS48678.roa (hash: AJgmqRCuexqs1iScN3d3UdZ79pfhtvtdYfnOYv+s8Ec=)
                          30: AS214203.roa (hash: Ux5fBQn/ekFPOzJgvdw9ylaEVK8ZmfK98yi0cDLf0f4=)
                          31: AS209693.roa (hash: +DXx+wgzBkREWk1/V5mjVtBhi1cQC+inIQtwydAQR3A=)
                          32: AS207083.roa (hash: VFmB29KIHErQ7vQpIUfDlCYKZmpnFW9Pna787P14pj4=)
                          33: AS214206.roa (hash: spl5ErUx1dwYLFrg5i+Agpjl24Bj1OHHOlSZagZUenk=)
                          34: AS214016.roa (hash: AeSCIcM8E9FqcyrfBM8FL7El876sxe+xmxAA9ZcRVAQ=)
                          35: AS214223.roa (hash: 2hxJsjZCBH8amSbbf/crekVyR3uQ6ubq0P57QVOZhXg=)
                          36: AS216052.roa (hash: Z0Emj4KBqqcdOaDM2E+wTFiqZw14fUehMKzXX10dMi4=)
                          37: AS47509.roa (hash: lh6elRy2SFwrUWHxF417GEkWV6Eri/qDdJrr4G31ZhM=)
                          38: AS214660.roa (hash: YRBJKer0LDgv0UmurXWLPqpYoUJSnDcQBzli/Tj9WFQ=)
                          39: 432EED236E0D5996FA1AE9B1A7A9FEC3446BA2D5.cer (hash: HwET5saZ+PxfW2/Slm+VVHr7NRt3h2TV/aSH8nnQGXs=)
                          40: AS49867.roa (hash: ltvK9LemI3L/tiTP041frU8Vus3ybW8CLQ78riHyx1g=)
                          41: AS205398.roa (hash: utBfYlxnbrubWx9viY1gMCUsk/DjUgVOeSic8y1i5P0=)
                          42: AS16509.roa (hash: r8qlF4iC62pyTqtZYo0hAL2/2MBCQQvtcDWMN43G+DQ=)
                          43: AS213576.roa (hash: R17a8pF72MapV3buQ6tyEhTjjop81P/f9wSF0MgaXPw=)
                          44: AS214757.roa (hash: 2g7CjcXcMiukis6NdJRZz4Zn7ZsLm9VCejHXxISK1ZU=)
                          45: AS215150.roa (hash: Q2F+Yvv/DrFL/T0UBQZrtO3LnaQmFqQfEyRF/bhdz4o=)
                          46: AS214079.roa (hash: jIeiDJ0h27d4o4YUuVZ/K4YF7qNe4YJn78c2D1Y9jBE=)
                          47: AS216260.roa (hash: LusnRXpCOfPdRWfD1Bxnb6aocEAPvEsVnoEcwAOfhCc=)
                          48: AS214675.roa (hash: FHd+v+KuEwaL9iiwsmxX2cIihIpDbQITItt9FNfKeAc=)
                          49: AS213447.roa (hash: j9tWmCkulsIztPEAFEw1TraN51lvfmV1EqioI3+zeTE=)
                          50: AS213864.roa (hash: aGImoacl+UWQUCMy+krs+Zp1Go1KiFp+eNnVnJfQWF8=)
                          51: AS214323.roa (hash: m45C4Zq+qkz0E7OTkfR39//7uHcBk/O3LIf/+H5lByM=)
                          52: AS215478.roa (hash: g09d6isBpQtYc4taN9PcPfA5sbIKDhpXpKJuvrQ/CkQ=)
                          53: A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.cer (hash: Z0rmboFgJc+d/ANV5HSuQ2TC43B2wJ/5SwhnyV1KZxI=)
                          54: AS204676.roa (hash: A/HZXhLoMyGThsmEkgiY20AzKe0dujZQA9ftixpIObI=)
                          55: 6003354361AF66B2F37153B9A7365EE572F6822E.cer (hash: vBEimAsHWmN3evCzYOdYGs2f5nfHczlg+6MY0FCURNg=)
                          56: AS211780.roa (hash: Y65GyAZYjlfqjlSSRpwtvA9hd/hmWpWYGWrMmXzpkIg=)
                          57: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer (hash: L+IuoXIv9HLZAF9tvSCjT/oEdJyWmXTRsTqGq63lSrQ=)
                          58: AS14618.roa (hash: Z7MFDvCXHsltd7Mx1U1CvCNZKf89NejZkIBQMvfLsxs=)
                          59: AS208884.roa (hash: llCXzsG+b5uBv+CUOEy7BdHDLJOSkvCbeGLBHLB0f50=)
                          60: AS133504.roa (hash: 1tnUU6iTN3SqkyzA5OU4HzFmCQIQDJR6MRtUXiFrVHM=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f7:a6:26:cf:e4:fa:bf:0b:7a:3b:df:5a:7d:cd:8b:4e:d9:cf:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jul  4 19:26:20 2025 GMT
            Not After : Jul  5 21:20:20 2025 GMT
        Subject: CN=7844E910A246B8A845BB27530B7E83113C97F878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:f1:ad:5c:36:01:f3:eb:3a:53:f8:3e:73:
                    9a:1d:4e:91:b2:e8:80:86:f5:d0:0b:67:03:bb:67:
                    7b:2f:a3:ca:68:e3:e3:1b:f2:21:4c:4b:cd:28:ce:
                    3b:74:65:0b:f4:66:28:9a:68:1e:39:7b:bf:55:7e:
                    26:cc:75:72:5a:69:ac:d2:e5:4a:3e:c3:24:30:f0:
                    e9:56:56:6e:05:cd:16:ff:75:bb:e8:a2:7d:3e:2a:
                    81:0d:5e:64:8f:98:74:a1:22:f6:32:e2:74:18:33:
                    be:eb:d4:ea:9c:b4:9e:cb:f5:6e:45:ba:a8:4f:93:
                    b4:61:4d:d5:17:d2:03:a4:ff:92:e5:4b:51:27:b8:
                    96:2c:d9:5a:e4:61:9d:62:b0:9d:19:1f:b3:42:38:
                    70:82:5f:df:f5:46:44:67:d9:81:99:3d:25:0d:72:
                    c2:fd:1b:1c:03:00:eb:8e:94:41:eb:91:5f:07:fb:
                    79:f2:9a:57:6b:75:74:14:76:95:d4:d5:2d:24:6a:
                    81:26:bc:54:99:74:25:cb:56:ee:2c:08:a0:a9:95:
                    14:a6:17:1b:72:75:80:3b:85:1b:d4:37:8e:69:f7:
                    2c:e9:b6:6f:22:fe:6b:93:d9:8e:f1:70:67:10:3b:
                    24:c4:87:bb:15:b2:23:aa:b9:6b:7f:1e:01:54:0c:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:44:E9:10:A2:46:B8:A8:45:BB:27:53:0B:7E:83:11:3C:97:F8:78
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ae:61:44:b4:64:bb:8b:3d:a8:58:a7:e7:64:ca:eb:8e:1a:
         ef:8b:52:b9:02:03:8f:57:5d:cd:48:c2:db:46:b9:25:34:8b:
         32:ce:73:97:1f:7b:73:92:fa:01:7c:2f:d9:99:45:98:d6:b1:
         45:d5:fa:ce:64:fc:4e:3c:8f:b9:6d:93:e9:16:92:a4:87:e4:
         a2:51:4f:04:0c:84:c1:e6:8a:a0:8a:54:da:8f:8f:fd:38:b6:
         8a:45:01:66:9e:90:89:73:c6:d8:c6:7b:f7:37:d6:be:e7:1b:
         68:6a:bc:e8:e5:59:ba:7f:39:d1:6a:83:70:07:04:59:50:a3:
         11:ee:f6:9b:bc:30:36:e0:89:73:11:b6:35:63:24:fd:31:8c:
         8b:e3:92:34:87:f5:25:bd:8c:71:46:bd:de:ef:c8:c1:eb:26:
         f7:ff:f2:d6:51:c3:27:40:a3:31:4e:7e:7f:4d:d1:d3:11:3c:
         0d:4e:65:ae:da:4b:aa:5e:78:44:20:03:c2:78:29:aa:74:20:
         9c:9a:21:e3:65:48:a8:1b:13:c8:ca:c7:84:97:d9:74:e3:18:
         34:b1:65:64:df:e2:84:a8:1e:9d:9c:21:4d:0d:1e:84:78:b1:
         d4:39:72:8d:c5:d0:35:65:fc:90:f4:ad:44:01:2d:43:99:9e:
         6f:fd:55:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:40:38 2025 by rpki-client