Manifest

$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
File:                     CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft (raw, json)
Hash identifier:          oB99BViD2QgDR+vsL8Buf5XhhnuEJG0lNhx7hs8phfo=
Subject key identifier:   CD:00:1E:F9:4C:C5:29:B6:E3:AF:C8:3E:06:64:43:ED:CE:37:C6:46
Authority key identifier: CB:E2:97:A1:7E:E0:4D:76:DA:67:AF:E1:68:00:9C:B7:74:BD:DE:45
Certificate issuer:       /CN=cbe297a17ee04d76da67afe168009cb774bdde45
Certificate serial:       3AB8C51CB48DCD6A02C295F7DB3FC3DBB6889C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer
Subject info access:      rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
Manifest number:          4D
Signing time:             Sat 18 Oct 2025 22:41:29 +0000
Manifest this update:     Sat 18 Oct 2025 22:36:29 +0000
Manifest next update:     Mon 20 Oct 2025 00:12:29 +0000
Files and hashes:         1: CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl (hash: 2OOmq12spLOWWwPn13LYbU9JtmCG6Ih2d8DChODtyCI=)
                          2: AS60900.asa (hash: 5FY1D+XgMCIyt8ldD15OWrZgs5t2QzYwPClpwHN09kk=)
Validation:               OK
Signature path:           rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl
                          rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 00:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b8:c5:1c:b4:8d:cd:6a:02:c2:95:f7:db:3f:c3:db:b6:88:9c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe297a17ee04d76da67afe168009cb774bdde45
        Validity
            Not Before: Oct 18 22:36:29 2025 GMT
            Not After : Oct 20 00:12:29 2025 GMT
        Subject: CN=CD001EF94CC529B6E3AFC83E066443EDCE37C646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:cd:26:d1:f7:ee:39:06:e0:6d:77:eb:f9:
                    ac:a2:f0:7a:20:a8:df:91:27:b5:0f:1b:91:06:ee:
                    59:11:1d:61:d1:e7:00:9f:6d:6b:29:7f:00:44:c3:
                    2a:dc:7c:f7:32:95:19:2f:4c:a8:0c:53:0e:a9:e9:
                    18:89:e9:6a:83:cc:78:6b:df:7c:5d:c9:94:b0:cd:
                    45:14:93:2b:ab:c7:95:0a:e0:c7:9e:06:11:41:0a:
                    91:33:91:45:82:c5:0c:3a:b5:fb:98:71:62:fe:d1:
                    7b:b3:a2:0d:3e:3c:08:72:04:f6:b9:8e:06:4e:fa:
                    3d:cd:3d:da:c2:79:8e:0d:cf:bc:c1:f4:87:ce:a7:
                    29:5a:4f:75:42:45:67:0e:d7:d3:c4:11:51:fc:65:
                    e5:fa:f0:a4:11:3e:0c:5a:13:84:bf:95:c6:fd:35:
                    27:df:53:71:ac:9f:46:8c:b5:32:b8:51:29:49:b0:
                    13:cd:c8:8a:f2:6e:bf:f0:53:65:cc:f4:1e:10:90:
                    33:c2:a9:fc:bc:20:95:38:ec:79:c7:77:c2:40:c0:
                    f7:13:7f:4e:50:f3:94:06:9a:b2:e9:03:65:bf:4b:
                    55:7b:14:a5:a2:b8:8d:51:9b:ef:fc:68:de:94:7b:
                    35:bb:f7:e4:e1:c8:fd:9a:05:5d:57:ca:e5:01:04:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:1E:F9:4C:C5:29:B6:E3:AF:C8:3E:06:64:43:ED:CE:37:C6:46
            X509v3 Authority Key Identifier:
                keyid:CB:E2:97:A1:7E:E0:4D:76:DA:67:AF:E1:68:00:9C:B7:74:BD:DE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:57:39:da:9c:8c:01:aa:5c:42:16:ac:54:cd:76:a9:8b:92:
         e5:3d:1f:a8:3b:56:4a:78:57:00:69:b0:96:d3:14:dd:d0:fa:
         a2:55:1a:3f:36:ca:02:67:ef:bb:89:32:46:3e:df:ca:9b:06:
         7d:7b:63:12:9d:da:76:24:d2:09:49:b1:24:dd:58:35:09:67:
         1b:94:b1:7a:7a:08:80:53:65:b0:3b:76:c4:c8:de:0f:69:1e:
         91:a0:10:69:5c:fc:aa:3b:76:de:30:e6:43:e9:e5:f8:2c:e5:
         ad:f8:53:12:96:76:0b:d2:39:3d:9b:ab:3a:cc:9d:88:39:36:
         f9:77:ab:12:37:fc:7f:a1:37:b8:f6:5b:3a:d2:b0:25:ee:7e:
         d2:09:d2:d1:4b:3b:cb:aa:4c:fe:6d:cf:3a:35:45:52:fe:86:
         3b:fe:32:3d:43:16:e5:a9:b0:f4:0a:2a:fd:d9:66:0e:f6:c7:
         7b:01:2e:49:9f:b4:7a:81:5d:93:db:bd:5b:75:bc:25:08:45:
         ce:e4:ac:6b:c4:f8:22:c4:fc:67:5a:2d:f5:52:58:82:18:39:
         9d:d5:de:a3:f4:5a:b1:e6:79:eb:00:dc:44:22:7c:c3:65:13:
         26:0b:73:81:02:f6:ec:49:fb:8a:ef:33:ad:1e:27:a6:a3:f9:
         6b:e0:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:19 2025 by rpki-client