Manifest

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
File:                     F79647511753842C2E53F2B5A8CA789825A09B7D.mft (raw, json)
Hash identifier:          NBoDRQLih4XORq1bJhh//LctdVF/bQZljVdd8Aj++6c=
Subject key identifier:   C8:1E:9A:37:93:51:58:A2:4A:DC:6B:2F:90:D6:01:17:C6:51:F5:61
Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D
Certificate issuer:       /CN=F79647511753842C2E53F2B5A8CA789825A09B7D
Certificate serial:       4C33A4299F46380722DA159B9A3CE4FC1C0FC0D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
Manifest number:          1A
Signing time:             Sat 27 Jun 2026 02:01:07 +0000
Manifest this update:     Sat 27 Jun 2026 01:56:07 +0000
Manifest next update:     Sun 28 Jun 2026 05:14:07 +0000
Files and hashes:         1: 0EE737362A63227799B760296110BD044DB7821A.cer (hash: 68B5Pxm5X6VvNuRyhsFneX/lzVkDsEhCvKtFQRVsI/4=)
                          2: F79647511753842C2E53F2B5A8CA789825A09B7D.crl (hash: UD5+ja1fBktblN3m1E/L/+xT/6FXpJFrpIw7vjQ5zyk=)
                          3: AS61574.asa (hash: 55wmqKUwsN4gfnCnS8UhCL9K3G7Q23oJcK5QReiY8x0=)
                          4: AS61575.roa (hash: zEw5aVoMUZLF+uF8932t0tJXOYy6Db0+urWp45CLqWM=)
                          5: AS61574.roa (hash: CFBwLo4WbnRrp19g4XPkrkdP3QMm3ER/UNyHMztnsaE=)
Validation:               OK
Signature path:           rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 05:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:33:a4:29:9f:46:38:07:22:da:15:9b:9a:3c:e4:fc:1c:0f:c0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D
        Validity
            Not Before: Jun 27 01:56:07 2026 GMT
            Not After : Jun 28 05:14:07 2026 GMT
        Subject: CN=C81E9A37935158A24ADC6B2F90D60117C651F561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:aa:d7:1a:65:a5:1a:f7:0c:9d:8d:27:f3:
                    1e:18:65:3e:6b:94:1a:bb:cd:99:bf:4e:2c:84:f8:
                    92:97:49:c5:4c:13:3c:59:6f:68:71:21:09:d1:65:
                    e7:38:08:f2:df:85:2c:95:af:5f:01:62:12:6d:05:
                    8f:a8:c7:e0:9d:ac:f4:01:1b:55:ec:fb:92:ce:04:
                    37:bc:0a:c2:50:c9:74:07:91:7c:2b:74:1a:d8:da:
                    66:49:ca:69:e9:ca:c6:cc:06:af:26:03:96:e1:87:
                    dc:2c:7d:8e:f8:10:b0:07:61:e0:e6:35:a2:59:92:
                    29:b7:e1:8e:2f:c7:ba:38:8d:a8:0b:85:1b:69:2a:
                    aa:f4:24:af:e9:68:43:bd:d7:77:f8:ea:4d:ee:22:
                    c5:79:9a:fb:2b:bd:b0:98:2e:14:7f:3e:e5:1a:75:
                    ed:05:c0:49:67:9a:b7:f6:82:0f:52:ed:20:ca:f6:
                    47:b1:32:cc:37:cb:64:e3:bc:29:cf:74:92:89:18:
                    af:b4:dc:0d:ae:86:0b:d9:87:ea:e8:11:13:81:a8:
                    1d:62:3f:57:f7:90:7b:3c:b5:cf:91:f7:d5:34:d4:
                    07:a5:30:7f:50:bd:75:75:e0:9d:90:1a:3a:14:4e:
                    c2:1e:c3:ce:23:72:d5:5f:ea:3e:8d:16:c6:d4:e1:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:9A:37:93:51:58:A2:4A:DC:6B:2F:90:D6:01:17:C6:51:F5:61
            X509v3 Authority Key Identifier:
                keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:e7:4b:f3:59:c1:b7:aa:d2:93:1b:79:95:aa:e5:e8:5f:
         b3:c9:43:df:3d:e8:45:a9:84:c5:e9:67:4e:5b:6c:3a:3a:23:
         8c:98:bc:c9:2d:89:c2:92:23:c6:9e:ad:74:51:f7:3a:33:97:
         f6:da:85:23:9d:88:41:31:d4:16:48:1e:b1:03:6f:3e:22:0b:
         f4:ad:2d:06:e6:df:1c:25:73:3f:5a:72:0e:fa:37:4f:2f:73:
         ac:62:9d:dd:ec:fe:45:a7:e9:e8:95:38:b9:b5:ca:ce:c7:87:
         77:6a:df:96:5a:b3:80:ae:ad:2c:d8:22:14:c8:7e:20:3f:e8:
         96:bf:36:ef:5a:86:37:87:d7:b6:ea:eb:9c:59:2a:22:77:9b:
         61:ca:4e:bd:bc:db:44:92:e7:15:32:bb:89:8a:1c:d3:eb:5c:
         31:22:9d:6d:9d:b4:21:9a:d2:dc:58:3c:9d:a2:86:98:6c:46:
         d3:84:d6:a5:3a:10:eb:fc:ac:16:ff:96:82:1c:bb:6f:dd:85:
         9d:fc:75:04:b6:f3:83:5e:40:4a:85:9e:36:1a:95:56:f3:cc:
         18:e6:1a:ec:12:7a:d2:97:8e:e9:ed:e6:51:33:33:83:1f:bd:
         85:9d:d9:c2:df:eb:a6:93:85:db:f3:ab:19:09:7b:14:90:07:
         4f:bc:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:03:46 2026 by rpki-client