Manifest

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
File:                     BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft (raw, json)
Hash identifier:          +YjXKBf8j9mGeNbiz+tFWzr973Tcz4d2o+jsWvaw3cY=
Subject key identifier:   5A:E9:BE:FF:69:5D:2F:12:34:14:11:A9:EE:1E:3F:22:BD:37:5F:47
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Certificate issuer:       /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial:       5A56E8C7B51B70C3224E1E3F447DB2F78959C4C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
Manifest number:          4A
Signing time:             Fri 25 Sep 2026 20:45:51 +0000
Manifest this update:     Fri 25 Sep 2026 20:40:51 +0000
Manifest next update:     Sat 26 Sep 2026 21:57:51 +0000
Files and hashes:         1: 326131343a373538333a653130303a3a2f34302d3430203d3e20323135373630.roa (hash: 9iYXqz2uZswuFGmbb3I2IKAg+SWvtdIdDTWgAWdK6sI=)
                          2: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: BaRn+VV9Mjv1d3bI1ejWVjhYGt/Z44aYBaRQrdawqUg=)
                          3: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: 0WfGIbdnCqY+ccClEvoLWkuTmchpzxdgcLtMMvZROJk=)
                          4: 326131343a373538333a653162303a3a2f34342d3434203d3e20323135373630.roa (hash: Sbur0LFeWPNeDmxIDkcbbfwfykhvNRJQKSdXoitfsqA=)
                          5: BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl (hash: e7kNOLncftdNzaxEfqBxq/xIi6KMDsfUc53ppg0fHmc=)
                          6: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: ZlZazCwIM5LGuIaeyYSvXDahbBBCJ7o6hK9PdYVxgtg=)
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:56:e8:c7:b5:1b:70:c3:22:4e:1e:3f:44:7d:b2:f7:89:59:c4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
        Validity
            Not Before: Sep 25 20:40:51 2026 GMT
            Not After : Sep 26 21:57:51 2026 GMT
        Subject: CN=5AE9BEFF695D2F12341411A9EE1E3F22BD375F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:50:d9:54:de:bb:a4:42:09:b8:67:c4:60:
                    77:6c:f1:9d:fb:9b:32:f8:93:ba:b7:fb:ea:f8:b4:
                    cf:4f:85:40:ba:c3:00:62:4a:bf:d5:b1:a1:d2:f0:
                    57:31:4b:ff:eb:0f:cc:47:b5:d6:fd:98:6a:66:19:
                    ec:8c:9f:b5:cf:fd:03:b6:9e:be:87:f6:3e:57:3f:
                    31:77:cc:73:0b:74:f7:91:b9:76:e0:7b:13:32:ca:
                    21:d3:42:f8:6c:64:50:85:b0:40:49:71:f0:42:ab:
                    d8:09:77:07:48:07:29:63:f8:db:1e:19:2d:ae:a7:
                    12:ff:df:1b:04:0e:4c:5d:6f:e8:56:3c:c8:bc:58:
                    3b:ce:1d:cc:5d:1d:01:dd:9b:2c:ce:bd:99:0e:43:
                    c4:85:1e:cd:fa:f5:1e:a4:ea:ef:24:ab:25:2c:92:
                    93:fd:2d:fa:15:d1:ad:72:bc:95:56:be:9f:e6:d7:
                    27:fb:9a:3f:21:f6:e4:46:cb:71:42:87:1b:a5:e4:
                    89:6b:a0:50:0f:bd:58:26:f3:14:ba:91:16:c5:6e:
                    3d:fe:7c:d1:86:5b:ac:87:aa:2f:0e:8b:80:cc:48:
                    c5:0b:8e:3f:5e:94:95:cc:61:b5:f2:3e:b4:4e:a9:
                    05:88:06:08:37:a8:54:0c:f0:d0:0f:84:ae:bb:45:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:BE:FF:69:5D:2F:12:34:14:11:A9:EE:1E:3F:22:BD:37:5F:47
            X509v3 Authority Key Identifier:
                keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:57:e7:c0:a4:46:cd:79:d3:0d:c5:fa:d1:a3:44:b7:00:
         d0:41:d7:2a:af:1c:29:81:cd:9c:2e:4b:04:79:e8:ca:7d:94:
         26:a3:5c:0e:c1:11:65:58:21:9e:74:86:81:ee:b5:cf:a6:b0:
         0d:12:5a:1b:2e:03:e2:f7:b3:cb:bc:42:95:ba:87:b6:84:37:
         68:bb:95:d1:5c:bd:20:68:44:94:10:24:92:33:65:a1:bc:65:
         39:2c:b1:c4:82:88:30:3c:c1:8b:a4:68:1c:09:f1:b5:1d:a1:
         0b:db:d2:73:95:69:b2:e0:e8:74:80:78:58:c1:24:99:db:16:
         6b:95:d7:5e:7f:47:81:3e:df:08:05:0a:4b:8d:d7:c4:3b:57:
         f7:1f:c4:c3:0d:bb:df:49:55:5a:22:c1:10:19:d4:9e:17:81:
         9f:07:0f:66:df:3c:cb:f9:d6:9c:5b:89:55:06:cd:e9:de:50:
         22:ca:e2:c2:b7:8d:96:d8:af:26:2f:b7:93:ca:c0:98:db:f4:
         bd:ef:1b:da:cc:a1:4a:a5:02:98:9c:f6:3c:d7:40:fb:13:c8:
         dd:4e:fd:f0:b6:47:2a:5f:e3:53:8c:50:8c:3e:10:f8:95:66:
         d0:1f:8c:c6:ac:3b:2d:95:d4:63:8c:77:26:60:d6:d5:ed:31:
         f6:c4:9f:33
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWlbox7UbcMMiTh4/RH2y94lZxMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzNUY4M0ExREM4OEM4RTU2NTRFNUVGRThENjQwRTA5
RDAyMkQwNjAeFw0yNjA5MjUyMDQwNTFaFw0yNjA5MjYyMTU3NTFaMDMxMTAvBgNV
BAMTKDVBRTlCRUZGNjk1RDJGMTIzNDE0MTFBOUVFMUUzRjIyQkQzNzVGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZVDZVN67pEIJuGfEYHds8Z37
mzL4k7q3++r4tM9PhUC6wwBiSr/VsaHS8FcxS//rD8xHtdb9mGpmGeyMn7XP/QO2
nr6H9j5XPzF3zHMLdPeRuXbgexMyyiHTQvhsZFCFsEBJcfBCq9gJdwdIBylj+Nse
GS2upxL/3xsEDkxdb+hWPMi8WDvOHcxdHQHdmyzOvZkOQ8SFHs369R6k6u8kqyUs
kpP9LfoV0a1yvJVWvp/m1yf7mj8h9uRGy3FChxul5IlroFAPvVgm8xS6kRbFbj3+
fNGGW6yHqi8Oi4DMSMULjj9elJXMYbXyPrROqQWIBgg3qFQM8NAPhK67RXR1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWum+/2ldLxI0FBGp7h4/Ir03X0cwHwYDVR0j
BBgwFoAUvzX4Oh3IjI5WVOXv6NZA4J0CLQYwDgYDVR0PAQH/BAQDAgeAMHcGA1Ud
HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVtcy9yZXBv
L2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMi9CRjM1RjgzQTFEQzg4QzhFNTY1NEU1RUZF
OEQ2NDBFMDlEMDIyRDA2LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF
BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0JGMzVGODNB
MURDODhDOEU1NjU0RTVFRkU4RDY0MEUwOUQwMjJEMDYuY2VyMIGCBggrBgEFBQcB
CwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVt
cy9yZXBvL2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMi9CRjM1RjgzQTFEQzg4QzhFNTY1
NEU1RUZFOEQ2NDBFMDlEMDIyRDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKo5X58CkRs150w3F+tGj
RLcA0EHXKq8cKYHNnC5LBHnoyn2UJqNcDsERZVghnnSGge61z6awDRJaGy4D4vez
y7xClbqHtoQ3aLuV0Vy9IGhElBAkkjNlobxlOSyxxIKIMDzBi6RoHAnxtR2hC9vS
c5VpsuDodIB4WMEkmdsWa5XXXn9HgT7fCAUKS43XxDtX9x/Eww2730lVWiLBEBnU
nheBnwcPZt88y/nWnFuJVQbN6d5QIsriwreNltivJi+3k8rAmNv0ve8b2syhSqUC
mJz2PNdA+xPI3U798LZHKl/jU4xQjD4Q+JVm0B+Mxqw7LZXUY4x3JmDW1e0x9sSf
Mw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:06 2026 by rpki-client