Manifest

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
File:                     160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft (raw, json)
Hash identifier:          0ITuYgpPOXHRhQZmc5D/5PKDo1EfQ1iY4gN15sDlSnk=
Subject key identifier:   B3:D9:B8:91:5F:01:EE:9E:34:B0:B6:67:0C:B6:EC:D4:45:B6:CC:16
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       6E536FD1311BD806CB4E0D87D1861334546ADADA
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
Manifest number:          21
Signing time:             Thu 02 Apr 2026 21:55:48 +0000
Manifest this update:     Thu 02 Apr 2026 21:50:48 +0000
Manifest next update:     Fri 03 Apr 2026 23:38:48 +0000
Files and hashes:         1: 323830343a323639633a32643a3a2f34382d3438203d3e203631353734.roa (hash: u7aBGMhbMjkQN1A5KveP3oaJJUSaswyiuJyOX+AI73Q=)
                          2: 323830343a323639633a32653a3a2f34382d3438203d3e203631353735.roa (hash: xkEq9KROdazTnrgOhT9Sm4s3NUG+9rDR5HG82MbEk5g=)
                          3: 323830343a323639633a32663a3a2f34382d3438203d3e203631353735.roa (hash: 0cl0MNKN1CcFMIlE04IWsatnqQqdyo5vxoyQL0gxU5A=)
                          4: 323830343a323639633a32633a3a2f34382d3438203d3e203631353734.roa (hash: QMavE9K7gBEM6GogGHcYvsZl5bvzYs0lsPVzr0Q3K/c=)
                          5: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl (hash: UAKaREOVObZB1cTz2XOFHtMriCHR4RG1D3uyt8w+Xxw=)
Validation:               OK
Signature path:           rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
                          rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Apr 2026 23:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:6f:d1:31:1b:d8:06:cb:4e:0d:87:d1:86:13:34:54:6a:da:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: Apr  2 21:50:48 2026 GMT
            Not After : Apr  3 23:38:48 2026 GMT
        Subject: CN=B3D9B8915F01EE9E34B0B6670CB6ECD445B6CC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:f9:bd:23:52:52:9b:92:c4:73:e7:02:2a:
                    15:4c:45:34:a4:7d:98:36:47:15:e1:da:72:0f:ec:
                    49:8e:68:24:32:b4:16:61:00:09:2b:e4:57:14:06:
                    56:c1:72:a8:9a:c8:a4:0c:dd:ef:38:a5:ea:6a:74:
                    26:33:60:58:bf:d6:ec:46:6f:d0:91:68:e5:10:af:
                    63:98:bd:40:5d:92:6b:a9:df:5f:2e:fd:b0:c2:e8:
                    5c:10:c3:d2:e7:1b:41:10:e3:ef:af:cd:be:52:2a:
                    42:49:1e:ef:56:82:10:aa:2c:dc:09:71:19:35:96:
                    4d:14:78:0c:3a:38:9a:e0:9a:06:47:a5:94:a1:fa:
                    c0:c0:ed:87:4e:ea:24:dd:c5:2e:a5:58:e7:a6:c3:
                    7a:6e:62:30:b1:21:a2:a3:7b:64:87:0f:93:01:4e:
                    d4:50:2a:6c:f2:cf:d3:ad:21:f7:0d:b9:9f:95:96:
                    b2:26:51:8f:db:ed:33:de:45:0f:f8:45:bb:49:3b:
                    b8:3d:30:ab:c7:4f:98:a4:d6:ab:7f:fa:4f:08:ab:
                    5e:59:3d:73:8e:95:7f:92:39:36:c3:16:d0:05:0a:
                    dd:62:7d:ca:d1:c1:3f:b8:d2:cc:1c:97:db:86:8e:
                    75:03:e4:f3:e8:52:f7:40:55:77:d8:20:c6:1d:61:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D9:B8:91:5F:01:EE:9E:34:B0:B6:67:0C:B6:EC:D4:45:B6:CC:16
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:36:16:1e:08:d4:44:27:97:aa:b0:1b:bc:c1:0d:21:26:14:
         a9:81:d4:b7:5d:28:a7:cb:8f:ac:bb:f3:96:1c:5e:38:ad:67:
         05:56:fa:a3:c4:bd:51:2f:90:d0:31:4e:fa:fe:49:38:f5:0a:
         f0:ce:bc:f4:7e:0d:97:fb:70:49:25:23:d8:bd:f6:5e:28:ac:
         fa:20:3f:c4:76:c2:5b:06:16:5b:05:fd:cc:68:df:67:6b:59:
         68:06:c4:56:57:c7:12:e1:3b:29:64:46:8d:6d:25:b3:fb:c3:
         34:d0:5c:d4:12:6b:10:03:13:27:11:ed:b1:93:93:90:c7:c8:
         76:ea:68:4d:43:da:c7:35:5e:84:e9:3b:4a:b2:2a:4d:f0:aa:
         68:10:f2:10:81:24:05:66:03:34:8a:30:59:99:d8:43:61:9e:
         73:c2:2e:d8:39:cc:60:4f:e2:0d:0b:95:d4:76:d2:13:f5:d7:
         96:9d:64:49:3e:92:1e:8d:19:4a:60:d2:3d:07:5c:97:83:8e:
         63:87:b2:9d:86:b5:1f:14:69:1c:c5:5c:81:1a:b1:67:2a:72:
         d9:5c:47:6a:3b:1d:f5:84:b6:94:5e:76:23:c0:5d:51:d8:e4:
         d3:7e:cf:4a:0d:3e:fd:54:94:28:81:3f:00:ae:65:17:20:34:
         54:1f:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 10:29:16 2026 by rpki-client