Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          No1YAN/l+LWnUTmq8Oe8SExmPP0YSigc+Tt9x5+jK88=
Subject key identifier:   A8:8E:AB:B8:2B:34:9E:9F:37:36:08:9D:08:69:7F:12:C7:BE:09:B9
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       729AB4536DAF9E1164DCFEA7DB07FEB53846591C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          08D2
Signing time:             Tue 12 May 2026 13:17:41 +0000
Manifest this update:     Tue 12 May 2026 13:12:41 +0000
Manifest next update:     Wed 13 May 2026 14:52:41 +0000
Files and hashes:         1: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: k1L2Of8QfV2MIN/B39N63nTwZ7dvoxi+6OPXT00R6qo=)
                          2: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: +0GPXjQoS+N412w6ofV8eg2e5UX1asnUPxI6dYS84sA=)
                          3: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 5FkiKEMEsvRMc75EhhhqzQGAWBAp/vUFv5o2r+QS74o=)
                          4: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: WqnPhejGIpkZ0xjXVvvod9Bjx2w1OURfMjc0Q0hE0uQ=)
                          5: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: kG5K7fGZt2gNTNqipcU5jx+A7Ih6SerQ8QSkdIn2j+U=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9a:b4:53:6d:af:9e:11:64:dc:fe:a7:db:07:fe:b5:38:46:59:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: May 12 13:12:41 2026 GMT
            Not After : May 13 14:52:41 2026 GMT
        Subject: CN=A88EABB82B349E9F3736089D08697F12C7BE09B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:13:e3:91:fa:b5:70:bb:4a:db:1d:86:9e:
                    2f:b4:05:ff:5b:17:1d:81:c1:31:ba:20:f5:27:c9:
                    87:bb:59:c2:ce:96:17:7d:78:e5:1a:1c:11:a4:a2:
                    7e:39:32:1d:98:b1:20:2f:e6:01:50:db:a1:c3:51:
                    07:39:90:92:02:de:bd:93:56:a9:39:dd:f6:ce:c2:
                    6c:7e:e4:f7:16:0f:8d:c8:98:ce:05:51:d9:c3:99:
                    e8:96:c3:a5:7e:14:4b:ff:05:62:6b:ca:d3:fb:79:
                    35:bc:32:67:af:d0:73:4e:af:d2:7c:60:1f:b4:5a:
                    38:b2:f3:fc:05:8d:61:ef:09:8c:08:e5:23:f5:b0:
                    1a:bb:88:b8:be:55:98:94:0f:5f:69:47:52:6d:e2:
                    7a:3c:a2:59:38:73:b9:b5:c2:9d:98:77:49:7e:4f:
                    33:ef:de:1b:b9:f5:e4:0a:c1:10:71:95:df:76:1c:
                    8f:e4:80:37:7c:6a:8b:6a:59:db:81:85:03:da:ee:
                    f5:65:2c:69:b2:94:eb:af:70:77:6c:b7:c0:8d:10:
                    88:71:1e:1a:b7:9f:49:97:f2:b4:83:e0:4d:ab:55:
                    49:06:1f:fe:67:46:2d:cd:88:32:08:96:64:54:94:
                    b6:87:2e:36:79:25:e5:d6:d8:46:d7:8a:f7:61:7a:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:AB:B8:2B:34:9E:9F:37:36:08:9D:08:69:7F:12:C7:BE:09:B9
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:a0:36:76:21:e7:8a:59:5d:97:5a:a6:db:cb:11:e2:b5:
         ee:9e:ce:09:8d:25:67:1a:4f:f2:67:8e:a6:24:6d:bd:cb:2e:
         dd:ab:cb:b9:d6:46:94:7b:4a:de:8f:ba:71:e8:34:ff:a6:27:
         f7:f6:8f:63:3e:4f:d1:2c:84:8e:d2:1b:f3:bf:d6:f1:a3:88:
         d7:63:f9:c1:56:3c:85:cc:58:8d:66:dd:3c:e8:c6:fd:8c:49:
         e9:0e:3a:06:3c:74:96:3c:71:79:ba:0d:72:99:5b:39:4b:1b:
         82:e4:78:da:fc:85:bb:fc:e0:92:6f:e7:30:cb:3a:98:fa:1d:
         ee:fc:e1:7b:a6:f9:5c:a9:30:4f:63:5a:5a:e1:35:52:ef:3a:
         d5:09:bf:c8:43:c5:9f:d7:e8:00:1f:ca:de:a5:d4:c9:6b:a0:
         b3:aa:f9:aa:21:02:39:a0:bc:3b:97:df:2a:78:18:17:6c:d3:
         84:1c:1c:a2:2d:69:b3:4d:fd:ca:b7:33:c1:e9:11:43:41:8f:
         96:fc:bd:6f:34:41:a3:3e:f7:97:fc:38:3c:3b:a8:1f:12:a9:
         cc:bd:7a:0d:c3:c1:3e:d5:25:75:87:28:c1:17:59:e0:9d:49:
         94:08:df:bc:4c:8e:17:71:17:30:18:97:08:a6:26:00:e2:fd:
         25:ab:5c:69
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUcpq0U22vnhFk3P6n2wf+tThGWRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFkZDU0NjY3MjMwODQ0OTBlZjQ5MWM2MTliOGJjNjFh
MzI4YThiNjAeFw0yNjA1MTIxMzEyNDFaFw0yNjA1MTMxNDUyNDFaMDMxMTAvBgNV
BAMTKEE4OEVBQkI4MkIzNDlFOUYzNzM2MDg5RDA4Njk3RjEyQzdCRTA5QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYeBPjkfq1cLtK2x2Gni+0Bf9b
Fx2BwTG6IPUnyYe7WcLOlhd9eOUaHBGkon45Mh2YsSAv5gFQ26HDUQc5kJIC3r2T
Vqk53fbOwmx+5PcWD43ImM4FUdnDmeiWw6V+FEv/BWJrytP7eTW8Mmev0HNOr9J8
YB+0Wjiy8/wFjWHvCYwI5SP1sBq7iLi+VZiUD19pR1Jt4no8olk4c7m1wp2Yd0l+
TzPv3hu59eQKwRBxld92HI/kgDd8aotqWduBhQPa7vVlLGmylOuvcHdst8CNEIhx
Hhq3n0mX8rSD4E2rVUkGH/5nRi3NiDIIlmRUlLaHLjZ5JeXW2EbXivdher8LAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUqI6ruCs0np83NgidCGl/Ese+CbkwHwYDVR0j
BBgwFoAUSt1UZnIwhEkO9JHGGbi8YaMoqLYwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC8wLzRBREQ1NDY2NzIzMDg0NDkwRUY0OTFDNjE5QjhCQzYxQTMyOEE4QjYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9TdDFVWm5Jd2hFa085SkhHR2JpOFlhTW9x
TFkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzAvNEFERDU0NjY3MjMwODQ0OTBFRjQ5
MUM2MTlCOEJDNjFBMzI4QThCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABJ7oDZ2IeeKWV2XWqbbyxHi
te6ezgmNJWcaT/JnjqYkbb3LLt2ry7nWRpR7St6PunHoNP+mJ/f2j2M+T9EshI7S
G/O/1vGjiNdj+cFWPIXMWI1m3Tzoxv2MSekOOgY8dJY8cXm6DXKZWzlLG4LkeNr8
hbv84JJv5zDLOpj6He784Xum+VypME9jWlrhNVLvOtUJv8hDxZ/X6AAfyt6l1Mlr
oLOq+aohAjmgvDuX3yp4GBds04QcHKItabNN/cq3M8HpEUNBj5b8vW80QaM+95f8
ODw7qB8Sqcy9eg3DwT7VJXWHKMEXWeCdSZQI37xMjhdxFzAYlwimJgDi/SWrXGk=
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:06 2026 by rpki-client