Manifest

$ rpki-client -vvf krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
File:                     ED42F9C384F588482A56A937C446B70EB594BD3F.mft (raw, json)
Hash identifier:          p6ZCywT91rLB72r4WcqPn7sW7nBWRKS2SjEHDIZGXXw=
Subject key identifier:   A8:E5:C7:CD:D4:0B:11:AA:19:24:3D:4E:23:9D:8A:F0:68:A3:89:30
Authority key identifier: ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F
Certificate issuer:       /CN=ed42f9c384f588482a56a937c446b70eb594bd3f
Certificate serial:       75B16F860447C74E074135DCC0CBDD1E29C4A2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
Subject info access:      rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
Manifest number:          19
Signing time:             Sun 15 Mar 2026 13:53:23 +0000
Manifest this update:     Sun 15 Mar 2026 13:48:23 +0000
Manifest next update:     Mon 16 Mar 2026 14:30:23 +0000
Files and hashes:         1: AS200160.asa (hash: wegf8lsrFR11khR+xErF138NnD8sFeefJ2iqiJK1DFg=)
                          2: ED42F9C384F588482A56A937C446B70EB594BD3F.crl (hash: OmeSdmOpeQqzJ+EmXUbwlKjvC65eTlwJXtyR2RoTV6w=)
Validation:               OK
Signature path:           rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl
                          rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b1:6f:86:04:47:c7:4e:07:41:35:dc:c0:cb:dd:1e:29:c4:a2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed42f9c384f588482a56a937c446b70eb594bd3f
        Validity
            Not Before: Mar 15 13:48:23 2026 GMT
            Not After : Mar 16 14:30:23 2026 GMT
        Subject: CN=A8E5C7CDD40B11AA19243D4E239D8AF068A38930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:f8:de:70:e1:be:da:a8:97:e3:04:14:2f:
                    5d:a1:48:c5:21:c9:02:7d:c9:09:43:2d:a0:b6:b1:
                    1b:01:03:e8:d8:22:0e:53:4e:d3:a3:8d:23:82:94:
                    7c:b6:6e:6a:bc:d3:30:d2:7c:98:d9:05:f6:2b:9b:
                    f8:03:9e:e0:f8:b6:de:3d:3a:04:ec:7d:19:90:5a:
                    dd:ef:80:ca:12:5f:e8:dc:44:48:31:4a:a4:4d:c1:
                    23:b3:c8:bc:5a:04:fe:ac:94:6a:73:68:51:50:74:
                    0f:84:01:32:c5:31:d9:e8:27:d9:0e:48:41:03:4e:
                    9d:44:21:93:19:b0:53:10:ed:83:b4:d8:0e:b1:56:
                    1a:a2:b7:32:ba:c0:23:d4:ab:2e:99:be:70:03:21:
                    c7:33:0b:95:c0:77:f8:db:40:53:ee:0d:16:4c:b1:
                    be:dc:39:3a:b5:7f:58:e1:10:8a:60:fe:30:cb:54:
                    62:2c:1c:24:2d:d7:ae:ce:10:1f:76:5e:55:fb:9e:
                    0f:49:bf:49:74:ce:4d:99:40:8a:b2:60:9e:1f:35:
                    c6:e8:9a:48:b3:1f:cf:0d:90:0d:1f:8a:38:b8:e9:
                    dd:56:d9:f3:8e:f8:39:13:33:00:e7:d7:97:93:34:
                    e9:05:27:1c:56:ad:3d:f8:03:61:65:7a:9a:38:b5:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E5:C7:CD:D4:0B:11:AA:19:24:3D:4E:23:9D:8A:F0:68:A3:89:30
            X509v3 Authority Key Identifier:
                keyid:ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:53:12:58:75:97:6b:8b:ad:a8:31:14:34:41:94:14:3b:a9:
         69:b5:62:f0:aa:9c:19:1a:3f:b8:27:09:a1:08:e7:05:9a:72:
         25:4e:ca:16:e3:02:99:51:56:c3:c0:76:f2:b7:85:6c:0f:6f:
         6b:af:5c:c9:6b:18:c3:a0:fc:7f:33:b7:22:11:09:0f:a6:55:
         90:e5:e3:1c:dd:0f:cf:61:85:42:e1:e7:dd:98:69:8d:cb:ac:
         03:0d:19:08:0d:7c:92:55:d9:e6:32:ff:2d:cd:e7:f8:96:1a:
         e6:53:82:bb:95:c5:e2:f3:d9:6e:a0:d9:a4:88:98:02:cd:9d:
         34:ca:46:5c:7d:a2:b0:f0:bf:9c:78:26:04:94:1a:ac:53:d8:
         40:0e:fe:86:1d:3b:f4:ea:3e:cb:5c:f7:dc:aa:3d:44:b5:90:
         ab:ed:22:89:55:6e:c9:ba:6b:09:84:9d:b9:e2:30:7d:05:18:
         f5:5b:f8:02:25:e0:57:8a:ff:16:90:dd:95:16:26:33:61:a7:
         4f:b7:9e:28:1e:76:a8:14:3d:db:8c:62:9b:d7:64:32:72:91:
         98:f3:b5:45:2c:59:74:31:45:da:8f:4b:ba:2a:32:e0:dd:c8:
         76:90:6d:91:5a:20:98:d7:88:32:19:69:f2:91:39:7e:f5:59:
         cd:a8:ec:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:50 2026 by rpki-client