Manifest

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
File:                     88332C8750CC71629E694FDDB3615AE083589921.mft (raw, json)
Hash identifier:          IJNnow9j3Elt6JmGyDpPP/C8Ve/AXLpRwzYgREHkMRQ=
Subject key identifier:   60:0F:E8:67:B9:F1:28:DD:75:DD:16:54:C6:7A:10:74:61:49:06:12
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Certificate issuer:       /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial:       37B2F2781382A1D84A6A8B29FB73D8D54A0A52CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
Manifest number:          7A
Signing time:             Sun 19 Oct 2025 21:02:11 +0000
Manifest this update:     Sun 19 Oct 2025 20:57:11 +0000
Manifest next update:     Mon 20 Oct 2025 22:19:11 +0000
Files and hashes:         1: 326130623a346238313a313030303a3a2f34382d3438203d3e20323134343032.roa (hash: kH/MtqMD4GBrxNbGxiKtOK2S9dP8RTkPgNVL8rpxdLk=)
                          2: 326130623a346238303a313030303a3a2f34382d3438203d3e20323134343032.roa (hash: VligHsPMPCiaW6WNZLEkmH1HewhX4eGgWzeKACEKEok=)
                          3: 326130623a346238303a3a2f32392d3239203d3e20323134343032.roa (hash: KyJ4hTRB6MgjD4XdMFzPoO4qu9Nx0aBOZVfoabKnMws=)
                          4: AS214714.asa (hash: 1jmVDPCMxvPogTQCXNTPDULeHgXoapqzXTxBUV9inm4=)
                          5: 88332C8750CC71629E694FDDB3615AE083589921.crl (hash: u1KkQXKxF/Jp84kEzvCPRjH//rh7Kv/AtnwNIhXQ7nc=)
                          6: AS214402.asa (hash: +2kmYZ6qiz/lf40JTDyUjBioEfCYLxRpcGiCShdK6Q4=)
                          7: 326130623a346238313a313030363a3a2f34382d3438203d3e20323136303931.roa (hash: MSQ9WMRKe2lhoJdRc0FEbYv7CvxLFEDfMzOUsuv39FI=)
                          8: 326130623a346238313a313030373a3a2f34382d3438203d3e20343031353735.roa (hash: tvmaxljC7c921jT8fijd4iySzH6w3rzTRr1QbSVM0HY=)
                          9: 326130623a346238313a313031303a3a2f34342d3434203d3e203539343439.roa (hash: y9QEUTLOCvxE4mUeK87Kf1xEE7IN44R877ZM+6e7628=)
                          10: 326130623a346238313a313030343a3a2f34382d3438203d3e20323133353938.roa (hash: ZHIA9xafUnCffPvNkSKqb73VAW2qkAjwUVw9xxt1CI8=)
                          11: 326130623a346238313a313030333a3a2f34382d3438203d3e203331383938.roa (hash: zOMFMc1IDoQLMA29y4I8ThG00Jbepu49yj8BhUFAhPo=)
                          12: 326130623a346238313a313030333a3a2f34382d3438203d3e20323131353835.roa (hash: YqLoXYq8CvWBNnBUykUxXsu7E1d0r/8x3lOP64/m1I0=)
                          13: 326130623a346238313a313030383a3a2f34382d3438203d3e20323131353835.roa (hash: Epp1sDourv8gYLgaPpGfcNI0cfHApzBU4WttOiVlCtg=)
                          14: 326130623a346238313a313030313a3a2f34382d3438203d3e20323130303431.roa (hash: qi7WbXf/3QSpMq9ps0r6CahGGK7jqrbESmGomORXO8M=)
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:f2:78:13:82:a1:d8:4a:6a:8b:29:fb:73:d8:d5:4a:0a:52:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
        Validity
            Not Before: Oct 19 20:57:11 2025 GMT
            Not After : Oct 20 22:19:11 2025 GMT
        Subject: CN=600FE867B9F128DD75DD1654C67A107461490612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:6e:df:8c:b2:a5:80:14:50:e8:c0:b1:f4:
                    4f:f1:29:10:38:ad:02:6f:2e:7e:fb:f2:30:5b:12:
                    77:27:e9:16:e9:dc:8a:66:6c:50:a9:a3:e7:3e:d5:
                    f7:c7:c5:a8:cf:42:94:e3:c8:d1:ad:81:c8:39:40:
                    6c:f0:99:13:ba:1d:21:e1:1e:2f:fe:37:6e:c8:f9:
                    bc:c2:a9:c9:9b:40:e5:36:c2:3e:66:b3:e1:4b:87:
                    73:06:77:b4:2b:06:ea:8b:47:8e:95:1a:8b:a2:2e:
                    c1:8e:56:c9:e0:93:5c:f8:9e:b6:11:b4:bc:72:28:
                    9c:e8:93:eb:4a:e2:be:71:12:e8:da:5e:f0:18:f5:
                    95:cd:0f:68:9e:97:0e:0d:e5:08:a1:8c:00:89:72:
                    6a:ab:e4:e6:39:13:ab:a6:b2:67:dd:34:12:3d:1d:
                    2c:41:6e:38:ed:13:cc:b2:8b:3f:e7:8c:eb:f8:d3:
                    d4:25:70:19:d1:0f:e2:1f:cb:80:01:23:a8:94:53:
                    b0:a8:96:18:a5:c2:4b:8f:67:81:a9:73:bd:32:c0:
                    1f:40:6f:95:8e:a5:f6:8c:a9:12:66:50:6b:cf:d1:
                    9b:bc:52:33:3b:eb:d2:1f:15:09:fd:03:db:ab:91:
                    42:e3:33:2b:4e:37:7f:08:7e:3c:d3:ee:d9:c2:75:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0F:E8:67:B9:F1:28:DD:75:DD:16:54:C6:7A:10:74:61:49:06:12
            X509v3 Authority Key Identifier:
                keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:64:44:e5:7a:fc:e7:9d:60:05:8a:d8:94:28:c3:dc:b3:e4:
         f1:a0:43:6e:61:ef:ce:d5:6e:84:f8:84:db:26:ec:0d:41:8a:
         05:9c:33:12:e9:14:a3:67:bd:2c:4b:03:28:77:44:bb:51:7d:
         f2:95:9d:59:e4:1d:51:9d:8e:40:ab:6c:8f:a9:d0:d6:37:90:
         4c:bf:d0:c1:9e:d6:bf:48:c1:b3:dc:44:00:67:45:4c:13:e8:
         29:24:0d:04:ba:4b:9e:8a:e9:cf:54:27:02:06:11:f1:57:d8:
         32:b7:1f:f3:db:c1:ff:0a:b3:61:53:8d:83:0b:80:27:41:4d:
         db:ce:9d:7a:98:3f:32:9e:98:d3:17:fa:ce:25:a4:27:f0:17:
         f0:f0:b6:25:93:fa:5b:40:94:28:27:c8:a1:99:72:54:16:69:
         cc:de:ab:10:0a:17:a0:0d:3f:f2:a9:48:26:e6:40:f2:62:a2:
         77:32:1d:7b:18:22:82:4d:aa:7b:61:88:74:74:84:08:ac:08:
         f8:2c:02:f1:c6:0e:70:41:35:b3:91:18:b5:b5:49:78:89:c2:
         57:25:a2:fd:70:a6:c7:ff:8b:85:93:05:67:af:21:28:34:f3:
         a5:b3:ee:93:09:07:d7:ab:bc:37:53:69:ec:b4:a8:26:64:dc:
         12:36:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:58 2025 by rpki-client