Manifest

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          nw/nC3wJZptNUVv4gK6YpEJdQzYMe5Ns7Ef/cn7EEEo=
Subject key identifier:   6D:19:E2:33:7F:18:A0:ED:4E:B6:E4:E9:7C:1E:7B:0C:1D:81:0A:DB
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       2F70E1FE085B267AC0C03B9F4715F263B0A4EE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0D51
Signing time:             Wed 23 Sep 2026 14:25:13 +0000
Manifest this update:     Wed 23 Sep 2026 14:20:13 +0000
Manifest next update:     Thu 24 Sep 2026 17:15:13 +0000
Files and hashes:         1: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: Izrj79wt+RBQV12QVEUOu15QuWkg9UzFqRUkmutLJto=)
                          2: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: bn/qMrJZn+P/wPIixqbtgGZZgPHROqYvhsj72vXDS1g=)
                          3: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 2a17Lk2A8/wL7uW3pe0LYOncmlPOF8z6wyS66XDk5lw=)
                          4: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: ZVPYNjeXofYH3zhqnXuZqTnbIrZj99iHONwYaDYGC7o=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:70:e1:fe:08:5b:26:7a:c0:c0:3b:9f:47:15:f2:63:b0:a4:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Sep 23 14:20:13 2026 GMT
            Not After : Sep 24 17:15:13 2026 GMT
        Subject: CN=6D19E2337F18A0ED4EB6E4E97C1E7B0C1D810ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:79:ae:0a:21:7c:f4:0e:d7:71:e9:24:7f:
                    28:19:e9:96:77:1a:1b:6e:6e:3e:dc:e6:f5:66:67:
                    02:a4:fd:cc:ce:0a:ea:0c:e4:b9:36:f7:cf:73:a2:
                    8f:7e:f2:09:5a:1a:8c:b2:b5:04:eb:1d:da:1f:5f:
                    88:a5:fe:ad:e4:3c:bf:08:0b:34:0c:ad:58:3c:bf:
                    db:99:34:8d:de:70:4a:51:ec:27:72:be:6c:75:29:
                    d9:91:7c:b4:54:ff:8c:8d:ec:d2:a7:fd:40:fa:6a:
                    f3:66:d3:46:7e:97:01:36:b9:e3:9c:8a:78:b4:cb:
                    7a:93:17:05:1b:88:45:1b:75:6d:5b:f8:fd:2e:2d:
                    f9:3d:e1:19:6e:f4:f2:5c:ae:e7:ee:db:9c:43:70:
                    92:9c:e4:5f:bf:00:8a:d3:66:f6:4e:bf:6d:5e:ed:
                    b5:a9:69:35:26:c8:79:e7:b9:30:e4:71:d5:7f:bf:
                    40:d1:a9:7a:62:53:64:72:d5:0d:59:ab:0f:7e:a9:
                    ae:87:c0:39:20:98:a7:75:ae:b6:77:d6:22:92:0e:
                    5c:16:45:73:17:74:5d:1d:5b:7f:b3:06:c4:2c:72:
                    65:b1:b5:23:cc:49:44:2a:9a:02:9a:74:66:53:11:
                    ef:29:42:3b:83:f3:16:b7:22:7e:ea:fa:c1:b5:14:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:E2:33:7F:18:A0:ED:4E:B6:E4:E9:7C:1E:7B:0C:1D:81:0A:DB
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:00:6f:e3:2b:ac:79:d6:52:0c:4b:65:60:1f:65:e9:07:
         ed:32:f1:e3:56:9d:7e:35:dd:e9:ca:0f:a3:48:54:be:2c:68:
         fe:0e:08:f2:4c:ba:d3:16:b7:d9:eb:3e:29:ec:cb:b3:08:7e:
         b9:ff:1f:56:4e:66:4c:84:c8:52:bc:01:6b:59:d8:31:76:7b:
         22:83:c3:28:56:8d:9d:a6:73:db:55:11:c0:a9:44:6f:7f:f7:
         86:60:0e:fb:53:be:29:b7:84:c1:cf:be:cd:8d:0d:c9:43:39:
         85:73:cb:a9:26:9d:ca:ba:3d:10:c8:73:d5:2c:36:c1:40:0d:
         8a:1c:7a:e4:99:da:87:07:79:73:f3:a3:95:1f:fe:f2:f8:19:
         7d:eb:00:15:79:bc:1a:eb:3d:e8:62:5d:b1:ee:cf:2f:31:98:
         23:0d:09:48:de:27:3e:b9:54:55:b7:b6:02:d2:81:7e:c0:39:
         f8:f3:7a:08:3a:f7:93:54:73:07:38:80:15:cb:22:fc:74:24:
         33:9c:cd:04:fc:a4:65:6d:54:f6:03:57:69:c8:ff:32:24:38:
         6e:89:b7:dc:32:72:c1:20:b6:ee:30:62:27:30:c7:a2:a2:42:
         ec:f9:a5:e8:dc:94:35:8c:42:4c:81:b6:1f:bc:8c:ae:c5:6a:
         69:62:f3:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:35:11 2026 by rpki-client