Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
File:                     8568BF579F56F4139D364514D84EA5EE01CC8048.mft (raw, json)
Hash identifier:          VO2okzGw3Jxyc4vMlOCGelMAUBsfarhbYXb9UcNkvdY=
Subject key identifier:   ED:09:E3:E6:EA:CE:C5:2C:9F:1D:8D:E7:39:C4:71:F4:38:37:0F:30
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       1BAFAFCD38C9D1EB5A6D62C4087908FD62E28B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
Manifest number:          05
Signing time:             Wed 05 Nov 2025 09:43:21 +0000
Manifest this update:     Wed 05 Nov 2025 09:38:21 +0000
Manifest next update:     Thu 06 Nov 2025 11:53:21 +0000
Files and hashes:         1: AS214675.asa (hash: UwgbVr/2/pzaMfMELx81IpKeWgTlfH84H6z9vZmQyrU=)
                          2: 8568BF579F56F4139D364514D84EA5EE01CC8048.crl (hash: rnssESXyxutUn8oxogKb8Bco1/ms+RuUhC3gQOfs9xE=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:af:af:cd:38:c9:d1:eb:5a:6d:62:c4:08:79:08:fd:62:e2:8b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: Nov  5 09:38:21 2025 GMT
            Not After : Nov  6 11:53:21 2025 GMT
        Subject: CN=ED09E3E6EACEC52C9F1D8DE739C471F438370F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:7b:b8:11:19:ca:07:26:99:45:1a:6b:4b:
                    27:fa:35:8b:28:de:6d:ec:94:17:04:52:b8:f7:fd:
                    54:07:80:f7:6e:5e:ad:e6:a4:3b:5a:43:db:8c:f0:
                    90:78:c4:91:42:5b:9d:db:23:8b:87:59:d6:9e:64:
                    77:85:b4:29:80:b2:e6:07:c6:b3:8e:70:d1:5d:c4:
                    9c:99:d8:a7:24:8e:e7:6b:e8:45:e6:22:8e:a7:0e:
                    b0:6b:f7:9b:ad:04:72:a4:0b:87:43:fa:97:aa:a3:
                    66:ab:06:6b:83:3a:5f:29:e5:38:59:66:14:5c:32:
                    e7:99:58:b7:91:b2:e5:b0:fa:b3:5a:96:5a:08:3e:
                    42:e8:3e:2d:b1:e8:ba:63:30:2e:de:07:81:83:40:
                    8d:12:60:5d:b9:e3:ef:e2:8a:da:a7:ee:ae:cf:4e:
                    9c:cc:03:d9:4a:29:99:82:35:5e:06:02:ad:0a:80:
                    56:ef:d7:a4:62:f6:3d:17:7c:b5:05:32:f0:f7:e8:
                    cf:78:4f:a9:83:07:b1:c1:d7:fe:32:48:54:83:eb:
                    1b:4b:fb:9c:32:cc:e8:bb:15:4e:35:a9:86:f0:b7:
                    52:a2:7b:7e:b5:76:6f:63:83:be:ff:6d:4e:47:f0:
                    f3:b3:19:ff:a3:d4:c7:88:7d:98:6d:39:5d:81:e5:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:E3:E6:EA:CE:C5:2C:9F:1D:8D:E7:39:C4:71:F4:38:37:0F:30
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1c:82:1c:e3:e0:f1:99:df:e7:dd:30:12:12:5d:5d:98:54:
         99:e6:55:46:38:71:34:3d:95:73:61:d4:41:83:64:ac:42:87:
         e1:bd:1a:54:18:03:78:31:66:02:85:19:9c:a2:63:9e:ea:f9:
         fb:76:a7:28:4d:39:86:8e:ee:45:f6:08:2e:e6:1e:df:22:35:
         b2:87:a8:b1:db:25:bc:82:13:21:d6:ff:66:a1:ec:d5:6a:fb:
         a1:ac:04:a6:d1:6e:42:23:77:e0:57:9e:db:80:6b:62:23:6e:
         6d:8c:0c:6a:92:83:7c:8a:3c:26:55:dc:75:48:5e:bf:bf:ce:
         f8:73:59:24:d9:c5:67:cb:5f:35:67:b1:6f:42:b4:f4:db:e8:
         fd:33:ba:cf:ec:23:3c:12:d7:98:c8:92:5a:fa:fd:47:f6:0a:
         1f:89:6b:4c:f8:ec:f0:8c:03:da:3b:22:6e:52:64:3b:74:d1:
         fd:d1:c5:3e:95:5b:9b:3c:99:1b:1c:6a:6a:2f:bf:dc:a1:5a:
         a9:dc:0a:f1:73:ac:b6:c7:f3:73:2c:44:88:3b:61:41:7a:5f:
         3f:17:2e:a1:f3:97:c2:2c:ba:2b:fd:3a:93:ec:ac:71:79:ef:
         ae:7f:3b:a2:72:f9:5e:0a:ca:1c:d0:f1:a2:dd:a7:b2:67:8d:
         3b:3f:4c:bd
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUG6+vzTjJ0etabWLECHkI/WLiizEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2OGJmNTc5ZjU2ZjQxMzlkMzY0NTE0ZDg0ZWE1ZWUw
MWNjODA0ODAeFw0yNTExMDUwOTM4MjFaFw0yNTExMDYxMTUzMjFaMDMxMTAvBgNV
BAMTKEVEMDlFM0U2RUFDRUM1MkM5RjFEOERFNzM5QzQ3MUY0MzgzNzBGMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHnu4ERnKByaZRRprSyf6NYso
3m3slBcEUrj3/VQHgPduXq3mpDtaQ9uM8JB4xJFCW53bI4uHWdaeZHeFtCmAsuYH
xrOOcNFdxJyZ2Kckjudr6EXmIo6nDrBr95utBHKkC4dD+peqo2arBmuDOl8p5ThZ
ZhRcMueZWLeRsuWw+rNalloIPkLoPi2x6LpjMC7eB4GDQI0SYF254+/iitqn7q7P
TpzMA9lKKZmCNV4GAq0KgFbv16Ri9j0XfLUFMvD36M94T6mDB7HB1/4ySFSD6xtL
+5wyzOi7FU41qYbwt1Kie361dm9jg77/bU5H8POzGf+j1MeIfZhtOV2B5TEJAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQU7Qnj5urOxSyfHY3nOcRx9Dg3DzAwHwYDVR0j
BBgwFoAUhWi/V59W9BOdNkUU2E6l7gHMgEgwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8va3JpbGwuc3RhcmxhbXAuc3UvcmVwby9zdGFy
bGFtcC8wLzg1NjhCRjU3OUY1NkY0MTM5RDM2NDUxNEQ4NEVBNUVFMDFDQzgwNDgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9oV2lfVjU5VzlCT2ROa1VVMkU2bDdn
SE1nRWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9r
cmlsbC5zdGFybGFtcC5zdS9yZXBvL3N0YXJsYW1wLzAvODU2OEJGNTc5RjU2RjQx
MzlEMzY0NTE0RDg0RUE1RUUwMUNDODA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJYcghzj4PGZ3+fd
MBISXV2YVJnmVUY4cTQ9lXNh1EGDZKxCh+G9GlQYA3gxZgKFGZyiY57q+ft2pyhN
OYaO7kX2CC7mHt8iNbKHqLHbJbyCEyHW/2ah7NVq+6GsBKbRbkIjd+BXntuAa2Ij
bm2MDGqSg3yKPCZV3HVIXr+/zvhzWSTZxWfLXzVnsW9CtPTb6P0zus/sIzwS15jI
klr6/Uf2Ch+Ja0z47PCMA9o7Im5SZDt00f3RxT6VW5s8mRscamovv9yhWqncCvFz
rLbH83MsRIg7YUF6Xz8XLqHzl8Isuiv9OpPsrHF5765/O6Jy+V4KyhzQ8aLdp7Jn
jTs/TL0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:14:38 2025 by rpki-client