Manifest

$ rpki-client -vvf krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
File:                     ED42F9C384F588482A56A937C446B70EB594BD3F.mft (raw, json)
Hash identifier:          beilXM1AsiFNbrQK8GdlMuktzmt5+F8Vw15lrlqsi7Y=
Subject key identifier:   96:15:3A:A8:D3:BF:8B:EB:EC:67:52:3A:56:ED:ED:5C:C9:C3:66:24
Authority key identifier: ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F
Certificate issuer:       /CN=ed42f9c384f588482a56a937c446b70eb594bd3f
Certificate serial:       69BE188E39050B1D5C22752FEE337339CD7A9C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
Subject info access:      rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
Manifest number:          47
Signing time:             Fri 17 Apr 2026 08:48:19 +0000
Manifest this update:     Fri 17 Apr 2026 08:43:19 +0000
Manifest next update:     Sat 18 Apr 2026 09:53:19 +0000
Files and hashes:         1: ED42F9C384F588482A56A937C446B70EB594BD3F.crl (hash: WPMxb+iA3jYUKmyKkskUfLwek0oVB4Kzzh/L0Tl+HN8=)
                          2: AS200160.asa (hash: lZx/pYgFDXY3T5GQJehrLxT/aF+EeNNNjngTbkaa5bk=)
Validation:               OK
Signature path:           rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl
                          rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:18:8e:39:05:0b:1d:5c:22:75:2f:ee:33:73:39:cd:7a:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed42f9c384f588482a56a937c446b70eb594bd3f
        Validity
            Not Before: Apr 17 08:43:19 2026 GMT
            Not After : Apr 18 09:53:19 2026 GMT
        Subject: CN=96153AA8D3BF8BEBEC67523A56EDED5CC9C36624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:8e:c8:ec:3d:c0:0c:fd:09:d1:4d:2c:7c:
                    a3:69:e6:1d:4c:39:d5:4a:56:4a:78:1b:32:ab:62:
                    1a:b5:b0:dd:fe:75:24:02:ac:10:06:77:5e:c6:18:
                    88:5c:3c:9c:bd:31:99:ec:c1:31:7b:0a:f2:83:b4:
                    e5:43:5b:99:2d:16:d7:3d:c2:62:4f:d3:38:6e:52:
                    a9:72:6c:e0:07:66:3f:56:e0:d4:b1:aa:a2:53:0b:
                    7a:95:f9:98:65:af:cb:16:9f:b2:fa:ce:aa:bf:4f:
                    47:62:5b:aa:9c:d8:b7:94:06:e4:b1:4e:0f:97:cb:
                    39:62:4c:52:4c:dd:c6:49:09:61:b4:79:1a:b9:f8:
                    29:fd:70:61:92:aa:7b:ab:5d:bb:e4:ac:98:74:ed:
                    b3:ce:7a:d0:e6:83:d0:f9:73:c7:d1:f7:57:00:42:
                    5b:84:41:a2:4c:60:4c:88:40:8b:dc:71:85:ae:06:
                    08:1c:b2:c7:b3:dc:3b:73:29:e4:c2:09:32:c0:09:
                    84:45:b8:68:1d:d8:89:ca:f2:54:48:00:6d:32:82:
                    85:27:67:b0:10:77:fb:a2:12:ed:ae:59:36:02:f2:
                    ad:f0:52:ff:88:9a:b7:63:e1:47:60:e6:83:ac:3a:
                    b2:83:98:c0:c7:2b:ab:fd:12:46:a3:52:ca:93:47:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:3A:A8:D3:BF:8B:EB:EC:67:52:3A:56:ED:ED:5C:C9:C3:66:24
            X509v3 Authority Key Identifier:
                keyid:ED:42:F9:C3:84:F5:88:48:2A:56:A9:37:C4:46:B7:0E:B5:94:BD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UL5w4T1iEgqVqk3xEa3DrWUvT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/0/ED42F9C384F588482A56A937C446B70EB594BD3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d3:16:e2:8c:cb:df:57:c9:7b:ef:19:e4:eb:12:d3:3b:e6:
         5c:10:b7:ae:99:a5:76:3b:b2:de:7c:ff:55:cc:92:c5:ba:c3:
         ad:da:1d:f8:fb:53:4d:af:86:7d:fa:d2:ee:7b:63:aa:b8:9e:
         90:f0:1a:9f:fd:f8:08:90:d5:da:23:f8:d4:25:22:42:b2:b9:
         94:b0:c9:6d:0a:7f:66:17:20:68:99:6d:18:d4:08:59:43:54:
         72:0e:67:e0:2c:8f:ca:95:94:49:ab:c4:53:6b:c4:35:df:8b:
         35:46:d8:38:e6:03:8c:60:c6:ac:24:22:42:e0:c8:9e:50:72:
         85:91:11:ab:1f:b4:4c:97:82:5c:16:65:32:0f:9c:98:19:a3:
         54:8b:de:29:2c:46:bd:48:eb:a0:10:83:38:d3:6e:8d:6c:f0:
         99:81:d7:ac:e4:e6:5a:78:f1:9b:a5:b9:d3:c2:8a:c6:20:0c:
         67:b3:9a:c5:0a:1b:ee:62:ff:1c:5f:4e:de:24:d9:f3:27:24:
         f6:fb:0b:11:fa:b8:f9:ec:81:a9:69:a6:31:37:2b:96:7f:ad:
         17:ab:db:c7:bd:e9:72:39:b2:43:91:70:db:eb:2f:97:45:9c:
         0f:c1:3a:34:e8:bd:0e:fb:00:4a:df:56:74:85:2f:35:18:90:
         97:31:51:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:44 2026 by rpki-client