Manifest

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
File:                     160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft (raw, json)
Hash identifier:          vjRlWGIxtZQH/AoreAVxNBxeIRmtGpJVmfUWCuJazWo=
Subject key identifier:   1B:00:80:7C:40:58:00:5C:B9:BF:F5:38:E3:6C:E1:00:95:6E:83:76
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       579FE8BB014EB2A2D0982BB4F9133A96C3ED2F11
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
Manifest number:          54
Signing time:             Fri 17 Apr 2026 10:28:04 +0000
Manifest this update:     Fri 17 Apr 2026 10:23:04 +0000
Manifest next update:     Sat 18 Apr 2026 14:08:04 +0000
Files and hashes:         1: 323830343a323639633a32653a3a2f34382d3438203d3e203631353735.roa (hash: sZiMsnzGto3m8xwV3L509fjG9cBUL9IxMJZ26sTZAYc=)
                          2: 323830343a323639633a32633a3a2f34382d3438203d3e203631353734.roa (hash: EJs9EyYA7/ku/iG4uFLiKW8buKFxKzpXm0Q2cwSWFG4=)
                          3: 323830343a323639633a32663a3a2f34382d3438203d3e203631353735.roa (hash: 140Ez26X7LEsIBNLftsS0sSgK2pmRO4wnVbkjt6+u6g=)
                          4: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl (hash: k+w38HZxqWLi2AuqLKbF+K/UdncOF0rNP4dunDBtsuU=)
                          5: 323830343a323639633a32643a3a2f34382d3438203d3e203631353734.roa (hash: A05XIRUEYKwgA+sAFSG0wK3DPjPON212TOlQ+UD0G3M=)
Validation:               OK
Signature path:           rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
                          rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9f:e8:bb:01:4e:b2:a2:d0:98:2b:b4:f9:13:3a:96:c3:ed:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: Apr 17 10:23:04 2026 GMT
            Not After : Apr 18 14:08:04 2026 GMT
        Subject: CN=1B00807C4058005CB9BFF538E36CE100956E8376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:2b:8e:f1:4c:6d:9b:a7:c0:6b:8e:bf:38:
                    6a:eb:a5:7c:bf:16:2f:7d:50:de:c5:59:5d:a8:bc:
                    b2:62:c7:7f:06:04:0e:b9:8e:a3:35:6f:af:82:f5:
                    6a:55:5f:e3:a4:80:45:da:f7:50:6b:78:8c:25:cc:
                    fc:6a:32:af:fe:43:85:73:e6:b2:7d:da:48:a6:0e:
                    00:11:15:e4:cf:85:da:b0:4b:26:b7:81:1c:c8:58:
                    d5:9f:5e:0e:fb:a3:c3:68:77:b1:7a:bc:c9:d8:f4:
                    6d:18:2d:04:32:1c:0e:2f:49:ee:57:41:db:45:62:
                    86:78:0b:80:d7:be:79:46:bf:60:e5:dd:f3:93:d7:
                    c5:97:ab:ec:9b:47:f6:36:ec:43:d8:91:2e:f0:19:
                    b1:9d:8f:47:8d:07:7e:8e:bf:82:e6:f8:99:6e:66:
                    b5:6f:19:a1:55:e2:db:e2:67:2d:20:2d:bf:46:8a:
                    00:df:5c:b4:14:ee:27:5b:7b:71:eb:1d:d5:23:ee:
                    de:1f:a9:36:02:11:35:11:fa:5f:f3:b8:19:08:be:
                    64:a6:f3:c3:bf:36:d8:9b:fc:72:c7:c7:6a:2b:b4:
                    f9:f8:78:0a:53:f2:f8:77:b8:f1:df:fc:8d:10:18:
                    a4:1b:47:ee:24:f9:da:c1:e6:7f:1b:94:31:3d:ac:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:80:7C:40:58:00:5C:B9:BF:F5:38:E3:6C:E1:00:95:6E:83:76
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:50:5c:d8:c4:0b:a4:1b:ca:92:7c:18:35:07:b3:b8:f0:
         39:f9:41:4a:90:c1:6c:9c:9d:c5:84:17:76:60:81:33:5c:3d:
         dc:d5:ab:7a:b8:f4:c0:25:d8:d1:31:33:65:d1:83:5c:fe:41:
         65:dd:c6:bb:92:3f:64:ee:eb:3c:08:08:09:42:4a:58:f3:e0:
         38:f6:de:c4:18:6c:88:fb:94:3f:d5:fa:62:94:d4:75:92:6a:
         ca:cf:02:b4:0e:75:17:cb:9b:7d:bf:bc:86:d8:e8:db:54:d6:
         8d:36:9a:d1:70:14:3c:fc:57:ae:7d:77:58:d9:b1:fe:33:6c:
         39:8c:b7:3c:ce:7d:eb:15:08:6c:11:dd:24:71:1c:c8:d9:6f:
         0e:6d:38:26:c0:fa:59:32:6c:64:77:b3:ab:f6:e1:74:9b:e1:
         3b:23:2d:6c:7a:3f:df:ba:fe:5c:3a:7a:d3:92:a2:91:f5:db:
         60:6e:3c:23:29:9d:a3:26:0c:17:07:22:64:10:64:24:12:14:
         a7:e6:54:2a:ae:b6:49:ed:63:d4:33:5f:c1:59:cb:bb:b9:56:
         d0:a3:17:dc:c3:2b:c8:02:45:24:e2:c9:21:98:af:62:c2:eb:
         2b:d8:1e:17:4d:89:ca:9e:bf:95:d7:dc:8e:dd:c4:47:d5:b2:
         7e:47:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:46:52 2026 by rpki-client