Manifest

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
File:                     88332C8750CC71629E694FDDB3615AE083589921.mft (raw, json)
Hash identifier:          yTJzOEXxpeB8gZ6XFPa4Lm1PsajtcWRwt6iJF6ustOM=
Subject key identifier:   7A:24:51:2F:CE:AB:3B:4F:AB:82:20:43:0E:62:DF:72:3F:9A:37:51
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Certificate issuer:       /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial:       5966FA2DB6014362D13B2F3CB893B6936D4486ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
Manifest number:          77
Signing time:             Fri 17 Oct 2025 13:47:05 +0000
Manifest this update:     Fri 17 Oct 2025 13:42:05 +0000
Manifest next update:     Sat 18 Oct 2025 17:43:05 +0000
Files and hashes:         1: 326130623a346238313a313030303a3a2f34382d3438203d3e20323134343032.roa (hash: kH/MtqMD4GBrxNbGxiKtOK2S9dP8RTkPgNVL8rpxdLk=)
                          2: 326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa (hash: qi7WbXf/3QSpMq9ps0r6CahGGK7jqrbESmGomORXO8M=)
                          3: 326130623a346238313a313030333a3a2f34382d3438203d3e20323131353835.roa (hash: YqLoXYq8CvWBNnBUykUxXsu7E1d0r/8x3lOP64/m1I0=)
                          4: 88332C8750CC71629E694FDDB3615AE083589921.crl (hash: W8vOl2fSBpIG8hA18V1i6+D+TqIpXBjPucz8lFx+2Go=)
                          5: 326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa (hash: ZHIA9xafUnCffPvNkSKqb73VAW2qkAjwUVw9xxt1CI8=)
                          6: 326130623a346238313a313030363a3a2f34382d3438203d3e20323136303931.roa (hash: MSQ9WMRKe2lhoJdRc0FEbYv7CvxLFEDfMzOUsuv39FI=)
                          7: 326130623a346238303a313030303a3a2f34382d3438203d3e20323134343032.roa (hash: VligHsPMPCiaW6WNZLEkmH1HewhX4eGgWzeKACEKEok=)
                          8: AS214714.asa (hash: 1jmVDPCMxvPogTQCXNTPDULeHgXoapqzXTxBUV9inm4=)
                          9: 326130623a346238303a3a2f32392d3239203d3e20323134343032.roa (hash: KyJ4hTRB6MgjD4XdMFzPoO4qu9Nx0aBOZVfoabKnMws=)
                          10: 326130623a346238313a313030383a3a2f34382d3438203d3e20323131353835.roa (hash: Epp1sDourv8gYLgaPpGfcNI0cfHApzBU4WttOiVlCtg=)
                          11: AS214402.asa (hash: +2kmYZ6qiz/lf40JTDyUjBioEfCYLxRpcGiCShdK6Q4=)
                          12: 326130623a346238313a313030333a3a2f34382d3438203d3e203331383938.roa (hash: zOMFMc1IDoQLMA29y4I8ThG00Jbepu49yj8BhUFAhPo=)
                          13: 326130623a346238313a313030373a3a2f34382d3438203d3e20343031353735.roa (hash: tvmaxljC7c921jT8fijd4iySzH6w3rzTRr1QbSVM0HY=)
                          14: 326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa (hash: y9QEUTLOCvxE4mUeK87Kf1xEE7IN44R877ZM+6e7628=)
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Oct 2025 15:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:66:fa:2d:b6:01:43:62:d1:3b:2f:3c:b8:93:b6:93:6d:44:86:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
        Validity
            Not Before: Oct 17 13:42:05 2025 GMT
            Not After : Oct 18 17:43:05 2025 GMT
        Subject: CN=7A24512FCEAB3B4FAB8220430E62DF723F9A3751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:4a:20:7e:ef:5d:70:ba:dc:85:49:a6:7e:
                    cb:b0:58:2b:66:66:dc:50:e0:44:ea:f5:37:65:41:
                    c9:b0:4e:3b:ff:87:38:4b:af:04:d9:31:40:e8:04:
                    fc:d8:2a:23:a5:39:cf:db:1c:20:3c:3c:37:26:db:
                    5f:e7:e0:3a:15:26:a3:92:47:17:e0:c7:98:f2:0b:
                    d6:78:ee:9e:89:45:aa:94:69:ef:cf:44:04:62:5b:
                    8c:cc:1d:9a:cd:72:ef:21:50:2a:42:57:2d:23:92:
                    dd:bc:d6:cd:3c:25:e3:46:d1:3d:df:31:01:c2:61:
                    22:b0:f9:1c:f7:ca:1b:8f:57:aa:5f:b5:8d:42:60:
                    c2:4b:37:60:65:ed:0a:d9:32:78:21:fb:94:7c:52:
                    8c:e9:55:62:e6:f7:ee:da:eb:4f:b9:08:5d:9d:d8:
                    5a:03:0d:87:64:5f:cf:60:0b:93:8e:05:b3:a4:42:
                    1a:92:03:a7:51:63:06:26:93:ab:ad:b9:10:c6:23:
                    22:fd:65:31:4b:1e:e7:c0:25:ab:f9:52:ff:4d:32:
                    85:9e:a0:b4:e9:74:ee:54:c0:d3:9f:a0:bc:49:c1:
                    88:57:d3:e1:03:dc:99:1b:f4:9e:95:a1:21:70:60:
                    af:08:1b:5a:07:c4:e5:b2:ac:09:ae:f9:e9:a2:b4:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:51:2F:CE:AB:3B:4F:AB:82:20:43:0E:62:DF:72:3F:9A:37:51
            X509v3 Authority Key Identifier:
                keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:ee:69:9e:2a:06:03:30:38:72:91:ac:70:6b:76:b3:b1:
         f6:3e:19:40:4d:4d:24:98:0e:75:80:5b:2a:9b:98:3d:e1:b7:
         16:36:06:5e:0a:6b:d1:6e:76:95:20:0d:73:a8:ef:6e:cd:32:
         9c:6d:1b:f5:08:a3:e9:10:d9:f4:4d:e3:e5:11:03:75:84:41:
         7d:36:55:53:63:a3:69:35:72:65:a1:12:83:f4:18:0d:9a:4c:
         f4:44:6f:b6:20:ea:be:28:0a:17:74:e6:a5:66:9b:31:ad:fc:
         d4:94:78:be:c7:e3:d2:d1:a2:d6:bc:27:ff:c5:14:17:df:9f:
         22:40:20:eb:0b:71:aa:4a:7b:95:d5:ce:78:53:6b:52:3b:be:
         75:d6:1c:15:b3:44:36:c9:a0:d0:aa:dc:36:4c:25:ee:b9:c7:
         f4:2c:05:e5:36:69:97:a7:fb:8c:31:db:e8:59:59:d0:b3:9d:
         6c:8d:10:4d:98:b7:97:5f:4e:98:31:f0:16:75:f0:8f:05:1f:
         50:c2:3c:79:b6:94:95:e4:2f:40:40:70:dc:ed:8d:e2:a5:45:
         41:3c:54:24:77:1d:f2:e6:61:e1:87:eb:f9:48:31:34:fa:3a:
         d8:c7:49:ad:88:35:12:9e:62:2b:f5:0f:15:93:2f:d1:7d:f0:
         d7:03:63:05
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIUWWb6LbYBQ2LROy88uJO2k21Ehu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzMzJjODc1MGNjNzE2MjllNjk0ZmRkYjM2MTVhZTA4
MzU4OTkyMTAeFw0yNTEwMTcxMzQyMDVaFw0yNTEwMTgxNzQzMDVaMDMxMTAvBgNV
BAMTKDdBMjQ1MTJGQ0VBQjNCNEZBQjgyMjA0MzBFNjJERjcyM0Y5QTM3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSEogfu9dcLrchUmmfsuwWCtm
ZtxQ4ETq9TdlQcmwTjv/hzhLrwTZMUDoBPzYKiOlOc/bHCA8PDcm21/n4DoVJqOS
Rxfgx5jyC9Z47p6JRaqUae/PRARiW4zMHZrNcu8hUCpCVy0jkt281s08JeNG0T3f
MQHCYSKw+Rz3yhuPV6pftY1CYMJLN2Bl7QrZMngh+5R8UozpVWLm9+7a60+5CF2d
2FoDDYdkX89gC5OOBbOkQhqSA6dRYwYmk6utuRDGIyL9ZTFLHufAJav5Uv9NMoWe
oLTpdO5UwNOfoLxJwYhX0+ED3Jkb9J6VoSFwYK8IG1oHxOWyrAmu+emitDz3AgMB
AAGjggH3MIIB8zAdBgNVHQ4EFgQUeiRRL86rO0+rgiBDDmLfcj+aN1EwHwYDVR0j
BBgwFoAUiDMsh1DMcWKeaU/ds2Fa4INYmSEwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np
Z25hbHgtcnBraS82Lzg4MzMyQzg3NTBDQzcxNjI5RTY5NEZEREIzNjE1QUUwODM1
ODk5MjEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9pRE1zaDFETWNXS2VhVV9k
czJGYTRJTlltU0UuY2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5
bmM6Ly9rcmlsbC5zaWduYWx4LmNsb3VkL3JlcG8vc2lnbmFseC1ycGtpLzYvODgz
MzJDODc1MENDNzE2MjlFNjk0RkREQjM2MTVBRTA4MzU4OTkyMS5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AAn17mmeKgYDMDhykaxwa3azsfY+GUBNTSSYDnWAWyqbmD3htxY2Bl4Ka9FudpUg
DXOo727NMpxtG/UIo+kQ2fRN4+URA3WEQX02VVNjo2k1cmWhEoP0GA2aTPREb7Yg
6r4oChd05qVmmzGt/NSUeL7H49LRota8J//FFBffnyJAIOsLcapKe5XVznhTa1I7
vnXWHBWzRDbJoNCq3DZMJe65x/QsBeU2aZen+4wx2+hZWdCznWyNEE2Yt5dfTpgx
8BZ18I8FH1DCPHm2lJXkL0BAcNztjeKlRUE8VCR3HfLmYeGH6/lIMTT6OtjHSa2I
NRKeYiv1DxWTL9F98NcDYwU=
-----END CERTIFICATE-----
Generated at Fri Oct 17 20:31:19 2025 by rpki-client