Manifest

$ rpki-client -vvf krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
File:                     ED42F9C384F588482A56A937C446B70EB594BD3F.mft (raw, json)
Hash identifier:          vEqwUDCbWYRVzCM90yCEqNBW/w2R3/gUAdZF+TKMrVM=
Subject key identifier:   60:1C:5B:CA:51:DA:3F:8E:50:F2:4F:50:EE:72:D6:1C:CF:3B:EA:ED
Authority key identifier: ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F
Certificate issuer:       /CN=ed42f9c384f588482a56a937c446b70eb594bd3f
Certificate serial:       0720D46E87ED7AF9EF1C200C7F3F6072EC20F5E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
Subject info access:      rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
Manifest number:          6A
Signing time:             Tue 12 May 2026 13:53:45 +0000
Manifest this update:     Tue 12 May 2026 13:48:45 +0000
Manifest next update:     Wed 13 May 2026 16:40:45 +0000
Files and hashes:         1: AS200160.asa (hash: lZx/pYgFDXY3T5GQJehrLxT/aF+EeNNNjngTbkaa5bk=)
                          2: ED42F9C384F588482A56A937C446B70EB594BD3F.crl (hash: QuUqI6MjOaYejTMM3G+GGfwTqCgi5vfL+Hx18GPBKcA=)
Validation:               OK
Signature path:           rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl
                          rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:20:d4:6e:87:ed:7a:f9:ef:1c:20:0c:7f:3f:60:72:ec:20:f5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed42f9c384f588482a56a937c446b70eb594bd3f
        Validity
            Not Before: May 12 13:48:45 2026 GMT
            Not After : May 13 16:40:45 2026 GMT
        Subject: CN=601C5BCA51DA3F8E50F24F50EE72D61CCF3BEAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:01:f8:2a:74:2f:61:67:4b:aa:6e:ac:06:
                    db:a3:de:cb:3a:21:d4:9c:11:fd:a0:0a:f6:1f:9e:
                    41:b2:9c:eb:7e:a5:cc:63:5b:83:70:0f:6b:38:e7:
                    a0:4a:a1:2f:13:b9:43:c3:0b:34:8e:23:b7:7d:bd:
                    db:83:68:11:d9:91:d5:1f:0b:2a:b4:d6:9f:83:34:
                    70:4d:1a:b4:2c:0a:b3:f2:a9:e6:bd:79:f7:39:6d:
                    7d:ca:e6:1b:46:36:e1:7e:e8:b8:89:6d:36:28:de:
                    76:77:d3:6c:5e:40:94:cb:74:f7:b1:34:b9:76:5f:
                    02:3d:30:fc:fe:c4:b1:2b:e5:38:27:ab:4f:5a:20:
                    09:67:90:85:59:54:54:df:e4:b9:a7:74:ad:b4:09:
                    01:b2:e6:a1:63:7a:95:6d:9a:02:fe:d2:ac:93:45:
                    af:81:1c:c2:02:53:6a:3d:65:6d:12:77:27:56:56:
                    95:7a:01:9b:7e:e5:29:03:39:21:2a:4c:d5:0b:a0:
                    8d:dc:91:eb:1e:12:81:2b:84:f5:28:d6:c5:19:29:
                    8f:d8:ac:bb:73:9a:9b:b4:8f:44:e4:cc:21:e1:ab:
                    af:c2:cc:b1:61:40:77:88:02:ba:ba:c2:19:45:95:
                    81:1b:a8:0e:46:27:ce:dd:45:6c:b1:e1:d7:1f:4d:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1C:5B:CA:51:DA:3F:8E:50:F2:4F:50:EE:72:D6:1C:CF:3B:EA:ED
            X509v3 Authority Key Identifier:
                keyid:ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:03:d3:27:6a:72:c8:37:ee:57:1e:fe:fe:73:93:ae:9b:
         d1:ec:50:41:52:40:59:b6:88:50:f4:d2:83:5f:8b:f8:ff:4e:
         fd:b1:8a:8b:49:68:d7:b1:87:90:03:7a:3b:4d:3a:32:e5:31:
         75:47:ae:e8:7c:7c:a3:71:7d:b0:0b:c0:6b:62:20:9d:ed:91:
         98:5a:1e:cd:98:fa:8d:23:ea:20:ec:7c:4b:12:aa:d0:19:65:
         ef:02:6e:3a:9f:42:59:e9:c3:b0:f4:e3:eb:5b:e3:44:39:17:
         9d:91:6e:3c:de:ec:80:27:10:29:eb:11:9b:0e:0c:9e:dd:3e:
         40:56:59:d9:93:65:e2:e3:e0:34:e3:be:5d:91:44:07:ed:82:
         fd:5b:0d:da:e6:3f:ba:2b:dd:40:8b:4d:8d:26:c9:cb:23:81:
         fa:6f:2c:bc:fb:ac:8f:1f:52:40:a1:1b:66:ef:f9:01:4d:2e:
         fb:b5:65:84:ee:9a:fe:d0:92:14:c7:93:ed:30:9c:b2:88:3c:
         67:9d:41:b2:c4:9e:da:62:72:66:2f:ee:9b:9e:c3:5a:2d:d8:
         99:b8:60:16:24:1d:c5:ff:1c:fb:87:ca:fd:94:b4:1d:cd:f1:
         a1:57:35:2d:6c:20:68:85:cf:a2:2e:41:fa:8c:eb:2f:c7:3c:
         35:d5:21:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:37 2026 by rpki-client