Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
File:                     8568BF579F56F4139D364514D84EA5EE01CC8048.mft (raw, json)
Hash identifier:          hDqpj9LZHrDxZOi6flGBv5lyCEnZJHHVIY9aNxced0w=
Subject key identifier:   D6:5F:36:50:6C:08:67:00:AE:8A:51:F7:86:72:E4:48:A1:D4:DB:E1
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       1C3211BA7425E9180BACE9687C142CF2D1E49053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
Manifest number:          0105
Signing time:             Tue 12 May 2026 15:28:48 +0000
Manifest this update:     Tue 12 May 2026 15:23:48 +0000
Manifest next update:     Wed 13 May 2026 16:44:48 +0000
Files and hashes:         1: 8568BF579F56F4139D364514D84EA5EE01CC8048.crl (hash: Xe8uRtDwJ2nqyZAV79yMJUq2zMNkly0aWpTWBkuYOcE=)
                          2: AS214675.asa (hash: 23kePyhjqzBcDxnL1nrFryUMWXaZ7+p+KPiWL9cg9mE=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:32:11:ba:74:25:e9:18:0b:ac:e9:68:7c:14:2c:f2:d1:e4:90:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: May 12 15:23:48 2026 GMT
            Not After : May 13 16:44:48 2026 GMT
        Subject: CN=D65F36506C086700AE8A51F78672E448A1D4DBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:1d:1e:b9:11:6d:0a:cf:78:a7:a4:31:02:
                    fb:78:5b:5d:58:07:52:04:48:7d:b7:b6:ef:c4:e8:
                    04:ae:0a:09:bb:91:1e:86:7e:6e:eb:e9:18:46:20:
                    1f:29:78:5c:46:57:f7:35:ee:0a:a2:9f:e9:17:cf:
                    42:b4:b5:2d:47:4f:79:fb:d7:79:dc:63:28:df:52:
                    77:13:aa:e6:8a:48:92:c8:a1:77:07:41:32:e5:bd:
                    b0:df:7b:59:44:62:61:3c:a8:14:ab:d0:3b:34:45:
                    1c:27:82:4a:32:f3:f5:1f:a9:c4:7e:df:fe:8b:57:
                    e8:71:0d:0b:72:ad:41:3b:84:83:7b:53:d5:83:44:
                    de:db:8f:18:c5:6a:08:43:b8:f0:88:36:13:f6:ec:
                    4a:07:b0:a8:01:d0:79:36:a1:08:9a:d0:70:0b:2a:
                    f8:5a:31:1f:a0:74:62:8c:44:c3:54:d8:7d:d4:e3:
                    77:27:45:96:49:77:f7:ab:38:2a:57:6d:6f:19:73:
                    fc:40:3a:a6:ef:20:5b:34:23:77:87:4d:85:48:04:
                    b8:7e:d4:c7:af:63:78:86:40:bb:08:39:c2:67:7c:
                    1b:26:a0:4e:dd:32:26:bc:87:3b:82:4c:c2:51:69:
                    97:ba:a0:7a:1e:6a:df:04:cf:99:f3:04:bc:3a:df:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5F:36:50:6C:08:67:00:AE:8A:51:F7:86:72:E4:48:A1:D4:DB:E1
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:d9:a6:1b:be:cf:af:6b:96:a0:6c:2b:6b:06:26:c0:bf:
         04:72:58:b3:d6:2e:1b:1c:24:1e:ef:24:9d:53:ae:4d:f4:50:
         d1:4d:b8:10:e9:ca:a6:e8:32:55:68:25:46:46:25:01:8e:72:
         4d:13:a5:de:97:39:ac:50:f9:19:81:09:d1:70:40:f3:02:5b:
         4a:93:ef:0e:d2:48:d0:d8:24:91:32:ae:45:59:89:c8:49:e6:
         a0:e8:4f:4a:58:d5:9b:41:aa:ab:52:96:0c:13:9a:36:d1:30:
         6e:56:7d:fb:9f:82:4d:c9:45:7c:c8:84:84:ad:6b:48:64:62:
         58:99:9d:d5:37:00:98:41:d3:e5:e3:2a:4d:97:8f:29:ed:d2:
         af:f3:37:fb:d8:e6:65:43:12:89:c8:40:b8:93:ef:a5:d6:1b:
         88:ef:17:62:e9:a1:e8:e0:7a:28:f5:49:58:05:b7:64:bf:ec:
         58:71:a6:88:cb:97:8a:bd:3c:f5:23:39:8e:96:41:d9:b6:9a:
         df:ec:3a:7c:f3:9f:ef:55:27:c0:14:28:8b:a8:9f:2a:3c:d3:
         00:36:41:f8:a7:b3:3e:16:43:4a:eb:46:98:d9:ab:81:ae:76:
         5e:02:ba:2a:9d:fb:bd:f6:35:30:ea:b5:4b:c9:9e:af:98:fa:
         a3:77:77:d8
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUHDIRunQl6RgLrOlofBQs8tHkkFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2OGJmNTc5ZjU2ZjQxMzlkMzY0NTE0ZDg0ZWE1ZWUw
MWNjODA0ODAeFw0yNjA1MTIxNTIzNDhaFw0yNjA1MTMxNjQ0NDhaMDMxMTAvBgNV
BAMTKEQ2NUYzNjUwNkMwODY3MDBBRThBNTFGNzg2NzJFNDQ4QTFENERCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWB0euRFtCs94p6QxAvt4W11Y
B1IESH23tu/E6ASuCgm7kR6Gfm7r6RhGIB8peFxGV/c17gqin+kXz0K0tS1HT3n7
13ncYyjfUncTquaKSJLIoXcHQTLlvbDfe1lEYmE8qBSr0Ds0RRwngkoy8/UfqcR+
3/6LV+hxDQtyrUE7hIN7U9WDRN7bjxjFaghDuPCINhP27EoHsKgB0Hk2oQia0HAL
KvhaMR+gdGKMRMNU2H3U43cnRZZJd/erOCpXbW8Zc/xAOqbvIFs0I3eHTYVIBLh+
1MevY3iGQLsIOcJnfBsmoE7dMia8hzuCTMJRaZe6oHoeat8Ez5nzBLw630S9AgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQU1l82UGwIZwCuilH3hnLkSKHU2+EwHwYDVR0j
BBgwFoAUhWi/V59W9BOdNkUU2E6l7gHMgEgwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8va3JpbGwuc3RhcmxhbXAuc3UvcmVwby9zdGFy
bGFtcC8wLzg1NjhCRjU3OUY1NkY0MTM5RDM2NDUxNEQ4NEVBNUVFMDFDQzgwNDgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9oV2lfVjU5VzlCT2ROa1VVMkU2bDdn
SE1nRWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9r
cmlsbC5zdGFybGFtcC5zdS9yZXBvL3N0YXJsYW1wLzAvODU2OEJGNTc5RjU2RjQx
MzlEMzY0NTE0RDg0RUE1RUUwMUNDODA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB0Y2aYbvs+va5ag
bCtrBibAvwRyWLPWLhscJB7vJJ1Trk30UNFNuBDpyqboMlVoJUZGJQGOck0Tpd6X
OaxQ+RmBCdFwQPMCW0qT7w7SSNDYJJEyrkVZichJ5qDoT0pY1ZtBqqtSlgwTmjbR
MG5Wffufgk3JRXzIhISta0hkYliZndU3AJhB0+XjKk2Xjynt0q/zN/vY5mVDEonI
QLiT76XWG4jvF2Lpoejgeij1SVgFt2S/7FhxpojLl4q9PPUjOY6WQdm2mt/sOnzz
n+9VJ8AUKIuonyo80wA2Qfinsz4WQ0rrRpjZq4Gudl4Cuiqd+732NTDqtUvJnq+Y
+qN3d9g=
-----END CERTIFICATE-----
Generated at Tue May 12 21:57:48 2026 by rpki-client