Manifest

$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
File:                     F3980A549A69CF361510BAE9C265FFA332C71DD2.mft (raw, json)
Hash identifier:          H9CFtLBELawGGrI2RKJ0dxCuzWpUXhAgWO2wBUyWNJk=
Subject key identifier:   65:4F:86:D3:38:73:B1:C1:1D:62:AF:EA:81:DE:DF:A9:7E:D2:AF:57
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       2EA5323ED603460AC10D4AE4BDE86D9862DF60B0
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
Manifest number:          04
Signing time:             Thu 13 Aug 2026 05:13:30 +0000
Manifest this update:     Thu 13 Aug 2026 05:08:30 +0000
Manifest next update:     Fri 14 Aug 2026 05:45:30 +0000
Files and hashes:         1: AS61574.asa (hash: tE3S2lYEP4c+TVk46AUPDLHD3Z3mAYlDJkVPGFgW2uc=)
                          2: 323830343a323639633a33383a3a2f34382d3438203d3e203631353734.roa (hash: M1fvydSvwY4egqC+bDLjih8yo6fQtenuiU0OD7niQ0Y=)
                          3: AS61575.asa (hash: og2xRp+Ph4PNpwdrTz3ofTzEPBm6Gxya84tHpEXhxKE=)
                          4: 323830343a323639633a33623a3a2f34382d3438203d3e203631353734.roa (hash: l0rovz/6WsgBAiYRux16TcrNvuG6iYU3sL1sP6JQ8XM=)
                          5: 323830343a323639633a33613a3a2f34382d3438203d3e203631353734.roa (hash: 7BOGvsSs9kbI6YBDC0j+KriGmGgJwV/nrRP2EMNkdGw=)
                          6: AS61576.asa (hash: IDbAzwLBWat8oEDG+hC1AA414JRqG1yoR0dc4ICzXOk=)
                          7: 323830343a323639633a33393a3a2f34382d3438203d3e203631353734.roa (hash: zNPT+iMyg6qlGByIxLinNL048eUbWMvzlRT7s+z9hKA=)
                          8: F3980A549A69CF361510BAE9C265FFA332C71DD2.crl (hash: AruCslMZeNBgSZQtuCJmCESEmUOg7GFqSCZMzFS2PeI=)
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 15:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:32:3e:d6:03:46:0a:c1:0d:4a:e4:bd:e8:6d:98:62:df:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Aug 13 05:08:30 2026 GMT
            Not After : Aug 14 05:45:30 2026 GMT
        Subject: CN=654F86D33873B1C11D62AFEA81DEDFA97ED2AF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:91:da:21:d1:37:83:20:08:d1:ef:3d:b2:
                    9f:87:8f:27:6c:37:a2:88:03:cb:cc:f3:5b:ff:8f:
                    fb:ad:8b:8a:fa:69:81:19:16:e9:b3:0c:a4:38:71:
                    2f:ca:95:2b:fd:9e:64:d7:f0:2f:f2:b8:fc:a4:2c:
                    ff:74:f5:e3:3f:86:5a:2e:60:b0:87:f3:9a:ef:03:
                    15:ef:a3:b8:3d:95:2c:93:02:ff:e9:52:a4:4a:17:
                    b8:75:1a:76:66:d0:60:30:4d:66:58:30:2f:e5:a0:
                    57:80:10:90:af:ce:4c:52:c2:f3:43:e8:3b:b6:83:
                    dd:60:c6:a7:cc:88:08:07:a0:b7:a9:99:60:88:92:
                    2f:f1:c2:78:68:17:5e:dc:f0:5f:11:bc:74:e5:24:
                    98:9a:17:45:30:7c:bb:7e:02:95:2d:a0:5d:81:f9:
                    97:05:95:e5:47:22:f1:35:cf:02:f7:61:68:4c:f4:
                    c2:3e:7c:df:20:0a:e6:0b:a5:c4:14:58:ab:32:f9:
                    bc:26:33:8f:5a:b8:53:b1:4f:dc:af:ba:b0:96:ae:
                    95:8c:51:1f:4a:8c:65:e0:26:62:9c:0b:aa:4d:b5:
                    da:a5:89:20:6e:9e:fd:bb:26:6c:ad:b3:53:e6:28:
                    83:a1:bb:15:ba:10:5a:9d:66:1e:86:d3:bb:67:ab:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4F:86:D3:38:73:B1:C1:1D:62:AF:EA:81:DE:DF:A9:7E:D2:AF:57
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:82:c5:ae:53:86:fe:bf:10:14:be:79:77:f7:7d:6d:bf:
         52:d3:e6:34:ca:11:43:1e:1d:a0:28:c7:87:25:29:1f:d9:da:
         0b:1b:40:33:fa:fa:ec:a5:1f:ff:16:3d:3a:67:7d:17:9e:62:
         7f:da:de:77:6f:21:8c:02:b5:a3:57:6f:31:73:fb:72:da:f4:
         2d:2a:20:f8:99:a0:63:ae:8e:27:44:44:ed:b3:3c:e2:52:63:
         1c:76:cb:da:80:1e:b5:9a:97:21:19:aa:e2:4f:9e:b1:f8:e9:
         9c:8d:33:d2:2b:f6:81:c3:d9:3e:75:93:09:0c:85:48:0d:18:
         35:af:5c:5d:40:8f:e3:e9:a0:23:a3:d3:c6:f1:8d:d6:d4:df:
         7f:55:3e:a9:c7:2d:d5:05:9d:04:2b:bf:15:85:6f:53:4b:7d:
         15:37:2c:9c:a6:9e:26:3e:35:89:86:b2:68:7b:42:7c:36:a5:
         75:87:43:ed:c7:d4:b6:2b:bc:a3:00:52:fe:77:55:56:7d:23:
         c0:50:35:61:a9:83:56:b9:20:1c:41:69:ad:72:5e:65:7e:f8:
         f5:09:7f:10:0f:20:69:ad:04:4a:f3:e6:4a:65:53:aa:ec:07:
         18:63:61:49:10:40:56:ca:4b:7f:fc:8b:58:7f:89:96:18:3c:
         4a:23:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:39 2026 by rpki-client