Manifest

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
File:                     F3980A549A69CF361510BAE9C265FFA332C71DD2.mft (raw, json)
Hash identifier:          NcedO26BxsRVw6A6M7PP7F3t1fUKMsmsGb7zLm11gsY=
Subject key identifier:   A9:CA:45:11:E7:72:4B:97:F9:D3:8E:0D:BD:19:6C:6A:F5:CF:20:ED
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       7253BB8B7B04383B71AA22021026F3CD62A8A73E
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
Manifest number:          E7
Signing time:             Mon 28 Sep 2026 12:39:47 +0000
Manifest this update:     Mon 28 Sep 2026 12:34:47 +0000
Manifest next update:     Tue 29 Sep 2026 15:42:47 +0000
Files and hashes:         1: F3980A549A69CF361510BAE9C265FFA332C71DD2.crl (hash: O3uXlLBemhFyhDcW082pc4wU3Qu5KiwHcKlGk8uP1i4=)
                          2: 323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa (hash: XZNIZFLX1ToBilKimiEPe/jgsV7oXQFmiCZTt8m3j64=)
                          3: 323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa (hash: ItCTfp7Zm7miWrrl6fMguGUqGP9/OzhRMquw80N+nAQ=)
                          4: AS61575.asa (hash: KR2FYSDolPQeonIYz1WOzjWMiAbm4kMyek8IUMdOtWA=)
                          5: 323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa (hash: 3PiMeU5I4aQkssZPlJqNjiKEZlf65rAkgAPvpTvCabo=)
                          6: 323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa (hash: JxiztBjas9diXSq/zEeN4O0OCr6uoDsHqtp9NofLcyo=)
                          7: AS61576.asa (hash: Fs7tetBzerjGxdhb3Y4HWri9ws5XjeLy6Zr9oBM1Buw=)
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Sep 2026 15:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:bb:8b:7b:04:38:3b:71:aa:22:02:10:26:f3:cd:62:a8:a7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Sep 28 12:34:47 2026 GMT
            Not After : Sep 29 15:42:47 2026 GMT
        Subject: CN=A9CA4511E7724B97F9D38E0DBD196C6AF5CF20ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:87:c2:86:dc:23:7f:91:6d:6e:bc:bf:3d:
                    ca:44:55:60:b2:01:da:ba:f0:be:ea:d3:f6:04:ba:
                    20:ed:8e:6b:a2:ef:f3:82:7a:4c:0b:d0:c6:b2:2a:
                    0e:3b:3f:d0:b5:1d:56:c1:1a:9e:26:95:bd:3a:05:
                    97:14:66:ac:f1:58:1d:8c:0d:15:22:22:0d:51:31:
                    9f:82:9e:86:4f:8c:56:55:88:dd:9d:b3:71:31:31:
                    f8:24:d4:d9:a3:90:ec:c5:62:c5:62:f2:ab:2a:52:
                    03:de:8a:c8:e0:9a:0f:38:05:31:2f:8f:b2:5e:60:
                    70:ed:e6:70:65:9c:99:d4:68:52:29:0c:e5:c9:4a:
                    b1:b9:57:bb:97:ca:e9:f5:fd:68:6e:e8:09:ef:cb:
                    19:40:fc:26:59:a0:6a:65:53:41:94:72:f3:47:bc:
                    5c:96:4f:3c:95:e6:08:cf:09:72:0c:16:8d:e8:79:
                    9c:a9:f4:20:d5:5c:ac:95:2b:de:1e:48:ac:44:ce:
                    e1:95:80:a4:ca:fc:65:12:7d:44:0f:14:98:7e:96:
                    22:71:03:6e:dd:9f:c4:13:32:b6:2f:e7:62:09:5b:
                    80:c2:6c:f3:d6:8f:8c:82:fe:72:da:24:f6:e0:c4:
                    68:fb:fa:c5:c2:ff:b4:92:c4:7b:c9:07:77:c8:f8:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:45:11:E7:72:4B:97:F9:D3:8E:0D:BD:19:6C:6A:F5:CF:20:ED
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:36:ee:a8:34:ae:7f:c1:f2:44:b1:a8:58:42:35:f1:63:e7:
         03:82:85:6c:79:75:21:b7:65:cc:ca:5b:06:0b:22:c3:c5:12:
         37:40:86:29:b3:93:94:48:e6:15:7b:c4:df:aa:b2:06:2f:fe:
         82:47:b1:80:07:1d:a5:0e:2a:86:b5:c9:b5:65:ad:6d:08:ab:
         1a:7e:19:e3:99:8c:e0:12:c9:51:be:2c:b9:76:16:9a:7d:8f:
         96:82:aa:6e:00:cf:de:53:62:d2:5e:f7:e0:59:7f:e5:2c:44:
         f7:69:b0:1c:f8:92:98:7b:cc:a8:e1:a7:8d:00:b3:90:c1:46:
         d3:f7:f6:54:4b:d5:0c:3e:a1:db:06:54:7c:7c:ef:a7:df:4a:
         8f:17:ed:83:b1:f4:bb:fd:49:64:b2:63:e0:83:f5:57:f4:63:
         66:a8:0a:50:5d:85:f6:65:0e:d8:71:2e:3d:1a:0a:af:e1:15:
         b2:45:cd:43:a9:99:e1:42:e2:c0:53:28:ea:23:fa:24:ee:90:
         b5:df:89:8b:bc:8b:56:3b:69:a2:47:9c:85:0b:0c:ad:e4:e4:
         5f:01:46:70:17:d4:e8:3c:24:eb:40:76:df:be:a1:64:51:6d:
         27:58:45:31:7c:ee:7a:b8:15:3c:3b:84:90:0b:7c:d3:e7:91:
         ec:1f:5a:a0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUclO7i3sEODtxqiICECbzzWKopz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjA5MjgxMjM0NDdaFw0yNjA5MjkxNTQyNDdaMDMxMTAvBgNV
BAMTKEE5Q0E0NTExRTc3MjRCOTdGOUQzOEUwREJEMTk2QzZBRjVDRjIwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjYfChtwjf5Ftbry/PcpEVWCy
Adq68L7q0/YEuiDtjmui7/OCekwL0MayKg47P9C1HVbBGp4mlb06BZcUZqzxWB2M
DRUiIg1RMZ+CnoZPjFZViN2ds3ExMfgk1NmjkOzFYsVi8qsqUgPeisjgmg84BTEv
j7JeYHDt5nBlnJnUaFIpDOXJSrG5V7uXyun1/Whu6AnvyxlA/CZZoGplU0GUcvNH
vFyWTzyV5gjPCXIMFo3oeZyp9CDVXKyVK94eSKxEzuGVgKTK/GUSfUQPFJh+liJx
A27dn8QTMrYv52IJW4DCbPPWj4yC/nLaJPbgxGj7+sXC/7SSxHvJB3fI+LqfAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUqcpFEedyS5f5044NvRlsavXPIO0wHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjB1
BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFF
OUMyNjVGRkEzMzJDNzFERDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhNu6oNK5/wfJEsahYQjXxY+cD
goVseXUht2XMylsGCyLDxRI3QIYps5OUSOYVe8TfqrIGL/6CR7GABx2lDiqGtcm1
Za1tCKsafhnjmYzgEslRviy5dhaafY+WgqpuAM/eU2LSXvfgWX/lLET3abAc+JKY
e8yo4aeNALOQwUbT9/ZUS9UMPqHbBlR8fO+n30qPF+2DsfS7/UlksmPgg/VX9GNm
qApQXYX2ZQ7YcS49Ggqv4RWyRc1DqZnhQuLAUyjqI/ok7pC134mLvItWO2miR5yF
Cwyt5ORfAUZwF9ToPCTrQHbfvqFkUW0nWEUxfO56uBU8O4SQC3zT55HsH1qg
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:15:07 2026 by rpki-client