Manifest

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
File:                     02B5CF163150ADD82E90362AE55F3173D9749F05.mft (raw, json)
Hash identifier:          SchcOjli82aKuARAanHq1/JPy4/if3gMUaAxQa2kKFk=
Subject key identifier:   57:C6:D8:46:6A:3A:15:5B:F8:F8:E0:84:FC:A1:35:03:14:65:90:83
Authority key identifier: 02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05
Certificate issuer:       /CN=02b5cf163150add82e90362ae55f3173d9749f05
Certificate serial:       708842939B89E057A043096A280DAD1463DA4DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
Manifest number:          98
Signing time:             Wed 05 Nov 2025 04:20:50 +0000
Manifest this update:     Wed 05 Nov 2025 04:15:50 +0000
Manifest next update:     Thu 06 Nov 2025 08:09:50 +0000
Files and hashes:         1: AS206788.asa (hash: Mg8pKFdzIKLQ7mgD8AoSpiq3AdSwb5SJyIc2hLm6NPw=)
                          2: 323030313a3637633a323864343a3a2f34382d3438203d3e20323036373838.roa (hash: PNmjJ5Y8FuXlXHnV22nAEjIm1Iwk0dySIizMcjGUUog=)
                          3: 02B5CF163150ADD82E90362AE55F3173D9749F05.crl (hash: xY5fmstCZBeaPS/d7c2sIRmoXIkuM6D0KdEvHMC7aO0=)
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 08:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:88:42:93:9b:89:e0:57:a0:43:09:6a:28:0d:ad:14:63:da:4d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b5cf163150add82e90362ae55f3173d9749f05
        Validity
            Not Before: Nov  5 04:15:50 2025 GMT
            Not After : Nov  6 08:09:50 2025 GMT
        Subject: CN=57C6D8466A3A155BF8F8E084FCA1350314659083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:d8:e4:f0:4e:5e:92:10:b6:14:84:ae:39:
                    06:5d:4d:24:ee:59:fb:72:94:ef:fc:05:06:41:75:
                    f3:ac:74:26:d2:37:b8:84:60:fc:c4:b4:a1:d5:05:
                    ad:ad:0a:44:fd:5b:24:42:55:2d:ca:0d:c6:87:bb:
                    5a:22:a3:69:ab:b6:d8:ce:0c:86:15:28:15:4f:7e:
                    86:1e:0c:57:f6:09:0e:9f:fd:23:03:84:4f:2d:8a:
                    10:bf:6c:4d:21:49:b8:cb:cb:3b:40:32:88:e9:fe:
                    97:23:a8:05:c3:81:8b:7c:88:48:22:63:a9:87:00:
                    f4:30:c5:aa:a3:eb:cf:19:29:c4:42:43:a5:19:28:
                    60:56:7a:19:aa:8c:15:92:88:0a:9f:c8:b2:72:b2:
                    de:9c:1d:56:fd:1e:ac:8f:57:4a:03:5e:1b:f1:fd:
                    ee:75:da:ac:3b:89:27:49:3c:ec:0b:9f:74:39:a4:
                    41:ac:ef:1d:33:71:0c:49:df:38:21:a7:a9:cf:9c:
                    94:57:dd:14:19:7d:bf:80:3e:96:e0:fa:c4:75:b1:
                    b2:43:aa:a3:27:ec:b5:5b:cd:f7:f7:37:df:17:07:
                    dd:ac:a8:e3:33:1c:7f:c5:54:87:2c:9b:23:74:b5:
                    12:0e:dc:90:aa:5d:2e:ee:aa:a3:e3:55:cc:38:80:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:D8:46:6A:3A:15:5B:F8:F8:E0:84:FC:A1:35:03:14:65:90:83
            X509v3 Authority Key Identifier:
                keyid:02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:d0:ab:e7:b7:8d:20:f5:87:61:a1:d4:dc:da:eb:2b:c4:
         b6:d8:db:65:d6:ec:eb:29:90:05:aa:80:db:a9:7e:14:9c:d3:
         3d:64:3f:fd:68:4f:8b:a0:ca:32:0f:15:1d:09:fa:ae:70:61:
         30:5a:11:a0:8c:72:6b:28:41:2b:b0:56:07:cf:f6:b9:a5:8a:
         4e:64:fc:06:a5:26:9f:d7:ee:9c:d2:22:25:2b:bb:b8:00:d5:
         3b:5c:e6:7b:7b:00:cd:cb:2b:aa:4f:33:c7:00:04:26:33:80:
         df:80:1a:ed:bc:11:e1:8b:b7:53:9d:e4:fb:2d:d6:9a:63:47:
         b9:fc:03:bc:0b:88:cb:50:8c:b2:4a:93:d8:79:89:95:2e:b1:
         63:97:ae:2f:c0:3a:32:a7:e6:d2:e2:48:b1:47:cd:00:b6:50:
         39:03:06:52:56:67:20:98:c5:9f:e1:fb:c2:90:f0:e4:e0:11:
         47:df:16:30:83:e5:7a:54:f3:9b:a6:f6:01:f4:d2:19:39:b5:
         3b:f8:9f:98:25:d1:b3:a3:7d:57:89:5c:bf:b2:56:53:e9:16:
         a1:2a:63:54:57:fe:2d:51:59:b2:07:1a:d3:7d:5c:34:73:90:
         31:4d:42:91:72:66:28:69:fc:84:9a:73:a2:0e:df:d6:b1:6f:
         90:1e:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:04:29 2025 by rpki-client