Manifest

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
File:                     F3980A549A69CF361510BAE9C265FFA332C71DD2.mft (raw, json)
Hash identifier:          JRbxlzsDacteQTl02hIk/z3pH/busabHTnUfH24SZfY=
Subject key identifier:   F5:A9:60:92:E7:BE:A4:37:13:75:31:DB:D1:39:10:12:8E:D3:F7:85
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       2EA9E882652D44B72835BD51C97D790C8337EEB5
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
Manifest number:          0201
Signing time:             Wed 04 Nov 2026 13:08:46 +0000
Manifest this update:     Wed 04 Nov 2026 13:03:46 +0000
Manifest next update:     Thu 05 Nov 2026 15:56:46 +0000
Files and hashes:         1: F3980A549A69CF361510BAE9C265FFA332C71DD2.crl (hash: 6WG43vr6zPMTLELibs/BGTq2KRCMA1EXUYLrwAsoZyQ=)
                          2: AS61576.asa (hash: 3jDRJ2Z8HmUlAVPQAgoWSaET0V1FHyY1gGYL194gFcw=)
                          3: 323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa (hash: 3PiMeU5I4aQkssZPlJqNjiKEZlf65rAkgAPvpTvCabo=)
                          4: 323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa (hash: JxiztBjas9diXSq/zEeN4O0OCr6uoDsHqtp9NofLcyo=)
                          5: AS61575.asa (hash: aOHnhS0wcEjjf8PVOS/716LYQ8EPmpmLvzSxU7Ptco8=)
                          6: 323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa (hash: XZNIZFLX1ToBilKimiEPe/jgsV7oXQFmiCZTt8m3j64=)
                          7: 323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa (hash: ItCTfp7Zm7miWrrl6fMguGUqGP9/OzhRMquw80N+nAQ=)
                          8: AS61574.asa (hash: k/HYMjePQP9lLDfHdRVN8undMffH2faaM1P1uRxpO5o=)
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 15:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a9:e8:82:65:2d:44:b7:28:35:bd:51:c9:7d:79:0c:83:37:ee:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Nov  4 13:03:46 2026 GMT
            Not After : Nov  5 15:56:46 2026 GMT
        Subject: CN=F5A96092E7BEA437137531DBD13910128ED3F785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:26:25:64:31:80:ae:da:1f:8c:cc:8c:77:
                    9f:6d:7c:da:af:3d:a3:5c:56:f3:fd:28:ef:d7:fb:
                    9c:5d:c4:15:c2:25:ce:bc:b8:65:f8:b0:e9:e9:95:
                    c7:b3:13:fd:fb:85:c4:39:83:1d:7e:1e:4d:1b:02:
                    bc:87:05:27:06:f4:6b:08:cd:fa:b9:d2:de:63:e7:
                    d3:bf:f5:bc:50:e1:fe:28:fe:74:51:7b:5c:6d:32:
                    0e:c7:c1:49:11:43:8c:80:db:d5:3c:92:3d:1b:fe:
                    e2:07:d7:dd:0e:4c:cc:db:28:59:eb:4c:e7:f9:22:
                    64:59:a0:fb:21:5a:3a:8c:cb:f1:b4:f8:6e:15:95:
                    c6:db:ea:dc:65:b5:25:21:21:26:e6:56:ff:11:f5:
                    77:6a:38:17:1c:62:0d:e0:c0:2f:33:51:9a:07:64:
                    a4:7c:d8:8a:d2:f1:ee:a4:7a:fc:6b:22:63:47:59:
                    b5:48:d2:2f:7d:d8:e3:48:6a:1a:a5:8b:18:0b:b9:
                    a8:29:78:42:1d:b8:b1:20:df:d7:9d:fb:24:fb:93:
                    35:cb:4d:f2:b4:4c:20:c8:ff:de:71:c0:78:79:38:
                    d2:70:36:e0:b3:59:92:0a:d9:5d:de:4e:4a:ca:da:
                    bb:dd:71:76:89:92:20:d0:56:7c:5a:40:43:9a:4b:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:60:92:E7:BE:A4:37:13:75:31:DB:D1:39:10:12:8E:D3:F7:85
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:b8:54:26:48:9c:18:94:2e:39:54:b4:a7:39:49:f3:67:
         e9:1f:f2:74:df:a0:5a:8b:7d:f3:79:f5:ad:d7:23:fc:0f:70:
         aa:d5:e3:59:15:51:f4:cd:18:c7:71:cf:b5:d8:f4:1b:4a:8b:
         a6:43:a2:d9:f5:af:7b:4c:85:dd:7b:95:b7:6c:f2:83:07:02:
         df:90:cb:7a:85:ab:22:56:a0:2a:0d:55:20:af:20:49:4f:f6:
         fd:48:bb:24:6b:b7:41:39:ab:e9:3e:8f:c3:13:1a:1e:cb:b6:
         ab:ae:3b:c4:41:a5:d7:7a:36:83:4a:bf:62:3b:91:20:c4:75:
         d2:f2:10:87:d7:1a:c3:ca:28:8b:dd:93:cf:7d:be:02:63:d0:
         31:b9:d3:4f:e8:15:24:36:82:d3:33:8c:51:e2:a7:6f:70:92:
         88:cc:34:d0:9f:09:67:76:ab:ab:7a:d1:ae:e3:75:5e:57:f9:
         12:5b:d0:d4:42:00:ac:0d:7f:7f:9a:f9:6a:1d:38:e6:7d:dc:
         5f:9f:73:2f:d7:42:cc:c4:5c:97:14:1b:ad:31:d1:02:8e:80:
         70:32:8c:8d:4d:ad:f0:9e:ca:e4:ee:d8:c8:a3:1a:db:08:0f:
         10:74:59:ea:4b:03:75:ff:a6:54:7e:bd:b1:8b:7e:2e:00:22:
         93:5b:03:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIULqnogmUtRLcoNb1RyX15DIM37rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjExMDQxMzAzNDZaFw0yNjExMDUxNTU2NDZaMDMxMTAvBgNV
BAMTKEY1QTk2MDkyRTdCRUE0MzcxMzc1MzFEQkQxMzkxMDEyOEVEM0Y3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aiYlZDGArtofjMyMd59tfNqv
PaNcVvP9KO/X+5xdxBXCJc68uGX4sOnplcezE/37hcQ5gx1+Hk0bAryHBScG9GsI
zfq50t5j59O/9bxQ4f4o/nRRe1xtMg7HwUkRQ4yA29U8kj0b/uIH190OTMzbKFnr
TOf5ImRZoPshWjqMy/G0+G4Vlcbb6txltSUhISbmVv8R9XdqOBccYg3gwC8zUZoH
ZKR82IrS8e6kevxrImNHWbVI0i992ONIahqlixgLuagpeEIduLEg39ed+yT7kzXL
TfK0TCDI/95xwHh5ONJwNuCzWZIK2V3eTkrK2rvdcXaJkiDQVnxaQEOaS37pAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQU9algkue+pDcTdTHb0TkQEo7T94UwHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjB1
BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFF
OUMyNjVGRkEzMzJDNzFERDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6PbhUJkicGJQuOVS0pzlJ82fp
H/J036Bai33zefWt1yP8D3Cq1eNZFVH0zRjHcc+12PQbSoumQ6LZ9a97TIXde5W3
bPKDBwLfkMt6hasiVqAqDVUgryBJT/b9SLska7dBOavpPo/DExoey7arrjvEQaXX
ejaDSr9iO5EgxHXS8hCH1xrDyiiL3ZPPfb4CY9AxudNP6BUkNoLTM4xR4qdvcJKI
zDTQnwlndquretGu43VeV/kSW9DUQgCsDX9/mvlqHTjmfdxfn3Mv10LMxFyXFBut
MdECjoBwMoyNTa3wnsrk7tjIoxrbCA8QdFnqSwN1/6ZUfr2xi34uACKTWwO5
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:01:15 2026 by rpki-client