Manifest

$ rpki-client -vvf krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
File:                     2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft (raw, json)
Hash identifier:          R+iwj8N1IB+/ChYVgYPWMbBIaECXs/gc5ZILNAmxy6s=
Subject key identifier:   02:C2:D2:42:8E:10:11:78:F2:33:3D:C4:81:F9:EE:A2:17:5D:89:31
Authority key identifier: 2C:BF:9F:5D:26:01:FC:AA:FF:FB:D2:B4:EE:03:3F:47:4A:72:63:52
Certificate issuer:       /CN=2cbf9f5d2601fcaafffbd2b4ee033f474a726352
Certificate serial:       084C67D5949312BF38E6C47C1E6AF8D3C0AA9D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer
Subject info access:      rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
Manifest number:          01F4
Signing time:             Sun 19 Oct 2025 09:53:29 +0000
Manifest this update:     Sun 19 Oct 2025 09:48:29 +0000
Manifest next update:     Mon 20 Oct 2025 12:26:29 +0000
Files and hashes:         1: AS200160.asa (hash: 2BzvFHcBMmp/M1ePB77IDIqyWHwXFyi4XEE3ug96dfQ=)
                          2: 2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl (hash: Qc44M/i/KBYSVGYayb4Rd8LFvBxcWLwsoAm1Cvd2Cm4=)
Validation:               OK
Signature path:           rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl
                          rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4c:67:d5:94:93:12:bf:38:e6:c4:7c:1e:6a:f8:d3:c0:aa:9d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbf9f5d2601fcaafffbd2b4ee033f474a726352
        Validity
            Not Before: Oct 19 09:48:29 2025 GMT
            Not After : Oct 20 12:26:29 2025 GMT
        Subject: CN=02C2D2428E101178F2333DC481F9EEA2175D8931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:23:5d:71:09:e5:eb:d4:4d:d5:bb:0f:61:
                    40:ca:2d:56:19:15:b7:c1:67:c5:a0:65:4e:20:24:
                    31:df:a5:91:2f:90:dd:c5:7f:20:08:a6:f2:10:d2:
                    3b:b0:aa:b6:68:89:a0:6d:0f:b8:c2:99:7f:38:f1:
                    f2:42:55:46:1d:9a:5e:18:c3:7c:e6:9b:5c:56:aa:
                    ef:d2:c5:e7:09:8a:96:cf:fe:20:8a:b7:f5:f5:20:
                    a7:52:e2:b7:36:9d:72:9b:33:1b:6a:b2:a2:e8:b7:
                    f9:6d:53:9c:0f:35:0f:ee:ac:52:58:83:0a:6b:41:
                    c5:36:f9:f7:0b:85:fc:f8:92:9b:5a:ac:76:8c:f6:
                    53:24:44:f5:fa:95:36:f4:a8:3c:76:60:4a:f8:a1:
                    23:52:aa:60:a6:c2:a0:40:95:cb:0f:93:d8:7a:ee:
                    64:0e:1c:97:08:a5:67:39:73:86:4e:c7:56:57:94:
                    a8:b8:fe:9e:dc:94:1f:40:02:14:7f:fe:32:ad:f9:
                    55:b1:b8:c2:e5:72:f6:89:00:07:3b:93:85:93:c6:
                    d7:92:52:74:d6:6d:0a:cf:49:8c:1a:a4:75:ef:b6:
                    94:b2:8f:b9:c8:77:ab:4e:54:f5:b6:aa:2c:7f:52:
                    9e:9d:d9:c2:e9:2a:65:5d:f9:9a:93:e3:47:63:35:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:D2:42:8E:10:11:78:F2:33:3D:C4:81:F9:EE:A2:17:5D:89:31
            X509v3 Authority Key Identifier:
                keyid:2C:BF:9F:5D:26:01:FC:AA:FF:FB:D2:B4:EE:03:3F:47:4A:72:63:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:91:30:89:30:61:8c:d1:96:f4:bc:b8:99:12:4c:b9:aa:
         32:35:ef:31:04:38:c2:8c:bf:9b:90:f7:27:1a:60:24:ab:d9:
         c2:64:b9:89:ec:f9:f6:97:ad:47:95:3b:c7:a7:a1:fa:2a:2f:
         56:9e:c9:3d:01:3a:bf:f3:78:16:d8:7d:1a:3e:b5:90:86:86:
         db:e5:92:bb:f4:31:2a:08:ec:20:36:fd:e3:07:06:e1:17:b4:
         98:35:25:88:59:cd:26:fd:e2:ce:1c:56:92:32:34:f0:3d:cc:
         83:03:71:ab:15:73:e6:f4:3e:65:5f:9f:66:ea:76:fa:bb:f3:
         ff:5c:c6:3e:7a:55:c3:ea:95:f8:a1:9e:9c:89:09:cb:0f:89:
         e6:74:47:19:83:a2:c0:70:b2:8f:15:a3:71:5a:ae:95:8b:1b:
         5e:66:80:66:7a:34:e0:d0:5c:7b:44:f3:63:ba:cf:31:69:67:
         2d:87:7d:37:b3:f3:89:2f:6c:29:ce:41:fe:2b:d6:d6:15:cc:
         db:d4:35:d7:73:63:22:5b:70:f3:33:fb:68:d0:a4:03:c9:f6:
         c6:71:ff:41:bb:61:e3:ba:68:64:74:84:d7:d3:87:19:a8:1e:
         29:fe:88:0f:1c:12:e0:b5:6e:8a:17:a8:99:71:43:ba:0e:8a:
         e8:23:2e:e8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUCExn1ZSTEr845sR8Hmr408CqnZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmNiZjlmNWQyNjAxZmNhYWZmZmJkMmI0ZWUwMzNmNDc0
YTcyNjM1MjAeFw0yNTEwMTkwOTQ4MjlaFw0yNTEwMjAxMjI2MjlaMDMxMTAvBgNV
BAMTKDAyQzJEMjQyOEUxMDExNzhGMjMzM0RDNDgxRjlFRUEyMTc1RDg5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFiNdcQnl69RN1bsPYUDKLVYZ
FbfBZ8WgZU4gJDHfpZEvkN3FfyAIpvIQ0juwqrZoiaBtD7jCmX848fJCVUYdml4Y
w3zmm1xWqu/SxecJipbP/iCKt/X1IKdS4rc2nXKbMxtqsqLot/ltU5wPNQ/urFJY
gwprQcU2+fcLhfz4kptarHaM9lMkRPX6lTb0qDx2YEr4oSNSqmCmwqBAlcsPk9h6
7mQOHJcIpWc5c4ZOx1ZXlKi4/p7clB9AAhR//jKt+VWxuMLlcvaJAAc7k4WTxteS
UnTWbQrPSYwapHXvtpSyj7nId6tOVPW2qix/Up6d2cLpKmVd+ZqT40djNULTAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUAsLSQo4QEXjyMz3EgfnuohddiTEwHwYDVR0j
BBgwFoAULL+fXSYB/Kr/+9K07gM/R0pyY1IwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8va3JpbGwudXRhLm5nL3JlcG8vcG9uZ2VyeS8w
LzJDQkY5RjVEMjYwMUZDQUFGRkZCRDJCNEVFMDMzRjQ3NEE3MjYzNTIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9MTC1mWFNZQl9Lcl8tOUswN2dNX1IwcHlZMUku
Y2VyMGwGCCsGAQUFBwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly9rcmlsbC51
dGEubmcvcmVwby9wb25nZXJ5LzAvMkNCRjlGNUQyNjAxRkNBQUZGRkJEMkI0RUUw
MzNGNDc0QTcyNjM1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBABxvkTCJMGGM0Zb0vLiZEky5qjI17zEE
OMKMv5uQ9ycaYCSr2cJkuYns+faXrUeVO8enofoqL1aeyT0BOr/zeBbYfRo+tZCG
htvlkrv0MSoI7CA2/eMHBuEXtJg1JYhZzSb94s4cVpIyNPA9zIMDcasVc+b0PmVf
n2bqdvq78/9cxj56VcPqlfihnpyJCcsPieZ0RxmDosBwso8Vo3FarpWLG15mgGZ6
NODQXHtE82O6zzFpZy2HfTez84kvbCnOQf4r1tYVzNvUNddzYyJbcPMz+2jQpAPJ
9sZx/0G7YeO6aGR0hNfThxmoHin+iA8cEuC1booXqJlxQ7oOiugjLug=
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:40 2025 by rpki-client