Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          8/ETg/a8F8KKRmsz4D93oPD7KVDOa7Q0wJNI/3+vLDA=
Subject key identifier:   C5:D9:A0:47:C0:6A:67:53:18:44:73:5D:D4:90:53:6F:67:8F:A3:53
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       29971168808FDC353EE4CB4863E2613322E4BD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0878
Signing time:             Fri 17 Apr 2026 01:16:54 +0000
Manifest this update:     Fri 17 Apr 2026 01:11:54 +0000
Manifest next update:     Sat 18 Apr 2026 03:24:54 +0000
Files and hashes:         1: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: WqnPhejGIpkZ0xjXVvvod9Bjx2w1OURfMjc0Q0hE0uQ=)
                          2: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 5FkiKEMEsvRMc75EhhhqzQGAWBAp/vUFv5o2r+QS74o=)
                          3: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: +0GPXjQoS+N412w6ofV8eg2e5UX1asnUPxI6dYS84sA=)
                          4: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: k1L2Of8QfV2MIN/B39N63nTwZ7dvoxi+6OPXT00R6qo=)
                          5: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: E1ij3bDyIG8EyOMOs4WlnekVoXoJM7MwO01MmBUUlIw=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:97:11:68:80:8f:dc:35:3e:e4:cb:48:63:e2:61:33:22:e4:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Apr 17 01:11:54 2026 GMT
            Not After : Apr 18 03:24:54 2026 GMT
        Subject: CN=C5D9A047C06A67531844735DD490536F678FA353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:e3:58:61:53:fa:6b:41:77:9b:30:35:6d:
                    cf:91:f2:13:e8:98:99:fb:94:d9:3d:a3:d2:c4:07:
                    25:e4:aa:a5:54:71:24:eb:fc:08:aa:99:2d:2b:1b:
                    13:65:d1:98:c1:8b:06:a4:b4:17:7c:76:dc:b1:0b:
                    11:8d:be:f9:15:64:4c:e6:bf:65:1d:1e:0f:4e:8a:
                    f9:af:7f:ec:01:3a:11:35:a5:88:cc:55:da:06:c5:
                    54:b6:b0:af:9f:52:b0:6c:ac:d0:fa:22:53:f8:99:
                    9a:54:d6:1b:7e:05:db:d5:75:2b:22:e4:99:a0:00:
                    8a:0a:56:d9:99:ff:88:ec:bb:71:5f:2b:fd:9e:30:
                    22:76:c4:d6:47:d7:42:99:a8:6b:ce:c6:67:34:3c:
                    ed:3e:0a:8c:5b:38:d9:bb:44:f1:c5:57:9c:4e:31:
                    82:e3:8a:c7:ad:89:ad:14:d5:63:e6:68:11:c0:08:
                    cc:cf:9e:ce:59:e7:80:de:cc:b2:51:88:7a:b7:69:
                    54:fc:1f:9f:e7:f7:c2:01:f7:33:c9:e3:53:56:3a:
                    f0:02:e3:bc:7d:8f:c2:56:f5:9b:d0:d6:c4:af:e8:
                    b7:6d:61:45:bd:f0:de:13:3b:3b:16:83:f9:2a:ef:
                    8c:6a:66:17:b3:3f:6d:b9:96:f5:83:09:98:76:90:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D9:A0:47:C0:6A:67:53:18:44:73:5D:D4:90:53:6F:67:8F:A3:53
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:70:29:a3:65:46:5e:bc:d7:77:57:88:8c:ae:54:ff:2f:4c:
         52:61:46:54:23:7b:17:df:11:c6:30:4b:40:19:bf:45:66:08:
         ef:7f:15:f2:14:ef:93:2f:7b:36:1d:93:9e:34:49:35:54:ac:
         12:19:e1:04:63:93:19:a7:b8:1a:70:f9:41:be:37:7f:1c:26:
         52:f6:48:e6:c1:00:e3:35:fd:9e:f6:50:62:09:39:b8:93:02:
         cb:bc:ab:c2:ef:22:70:ff:94:58:e8:89:c5:0f:ac:f7:4e:d7:
         6a:72:20:83:10:d4:7b:37:89:5a:b6:95:bb:df:6a:44:00:bf:
         e5:6b:84:60:d3:11:49:b3:0b:dd:2b:21:b4:ec:81:d6:3e:24:
         ad:df:91:1c:0e:38:16:9d:ab:95:b9:92:b0:88:68:fd:4b:30:
         e4:ba:56:a9:99:45:ac:45:bd:27:02:0e:41:a6:75:bc:5b:1c:
         4b:cc:18:e0:36:b8:b2:b4:96:50:87:45:c1:44:d0:43:37:4c:
         86:09:de:6a:51:49:18:21:50:9e:f7:25:fe:81:c8:9d:ee:5a:
         18:2e:db:87:b2:d4:8b:97:8e:36:22:3d:28:4e:3a:33:7f:2d:
         de:4d:6b:4a:4c:f8:51:f5:10:13:02:72:1f:7b:c8:9e:10:d6:
         b5:3c:f4:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:30 2026 by rpki-client