$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json) Hash identifier: lMrwM2oFyS0aESSP/BRpuvrP/d8cZL3dIrttjG86mqM= Subject key identifier: 65:A0:86:15:63:74:36:76:45:1A:35:29:99:D0:AE:9E:51:28:3D:2F Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e Certificate serial: 29BF2CC2B404A78B1600B5A3722BC5A7987A5D16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft Manifest number: 01BA Signing time: Mon 05 May 2025 05:34:44 +0000 Manifest this update: Mon 05 May 2025 05:29:44 +0000 Manifest next update: Tue 06 May 2025 09:11:44 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: housp/NQrT3wpqClESKpJc+buA8NGpEKQSVaZk63L84=) 2: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: /gK7sT8vO6oSb1xKhSKHO77+weY6Y7CXtqogLjBhWSo=) 3: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: CH2m9ZitLf7PD63u+NkvuD6/h3y7uT6CT5l3zpNBz9U=) 4: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 5yK+THE86yROjd9HC9sn3hUmll8GgcjhlJ8ciBlc4TU=) 5: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: jrS4f5gL+axV2/DGmLCJcZIqy/i7XIWyGkeH42twB/Q=) 6: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: W2qRy9ddX7Xp81mc3K5+FrYJ8ie6RIhNH5at+Z0oViE=) 7: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 1EpfRAU7kW2kv2/RfJoCDKIPQ6o226tRJYfE0DzmmiI=) 8: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: YvoWbvlov4FjG1b7Qda+fqlVP6ujMhr8m/fEQddsSfE=) 9: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: 3YH32z1pX8kitA9NiLHWwrgMRTfRtB0C1VTCrZwpHGI=) 10: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: NEH+nWO/0QP09WYvLtFrEDSvemn5G6vHFDHYbSjG3N0=) 11: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: B0MsruuFMEAhMjk5c7pq7kRL1RXPmsLLWMxvykRicM4=) 12: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: fRBi82z9xlh0EpdrRlJTIWdvSoHnkeEUFIlo6Ndcxeo=) 13: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: e0CUD7jXhCf+ydR36N5Q5VZ7VITtWHCNrC5jmkREB/Q=) 14: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: ZYlzB3SOQwN3wrzewJr0kwZ/HRFdFo8jxmqTLeyxEAo=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 09:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bf:2c:c2:b4:04:a7:8b:16:00:b5:a3:72:2b:c5:a7:98:7a:5d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e Validity Not Before: May 5 05:29:44 2025 GMT Not After : May 6 09:11:44 2025 GMT Subject: CN=65A0861563743676451A352999D0AE9E51283D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:76:af:c4:0d:df:19:20:65:01:e6:09:1a: 62:f0:c3:51:6c:92:f8:0f:d3:71:3d:9d:73:e6:69: 0b:b9:f8:c8:15:88:df:67:9b:b1:50:6f:1e:9a:33: 42:da:42:88:b4:c8:04:a1:93:3d:a5:f5:40:39:13: 61:01:d6:47:24:67:18:61:63:ff:c5:99:81:56:26: b5:11:38:65:cb:5d:0c:3e:45:01:c8:46:29:3c:68: a4:0c:7c:3e:39:4d:64:30:58:cd:98:48:aa:e9:fb: d3:74:e0:71:15:b1:9a:e1:f3:95:50:3f:21:e5:bd: 84:62:ff:55:7b:93:ed:70:b8:1c:c0:a5:41:b5:65: 7b:88:44:ef:ab:ba:b4:c4:76:1a:3a:8c:12:00:2f: 1c:b1:42:7b:a3:ec:11:84:53:6c:80:00:a8:f9:72: f1:f8:e0:ad:50:55:bc:32:df:31:6d:bc:18:ee:24: 4a:d9:33:d7:65:24:a4:bd:c9:a8:98:30:05:c6:31: d7:f6:99:20:06:ef:f5:34:61:28:1e:cc:51:3c:e2: 7d:5b:bd:a9:4f:91:1c:70:55:42:76:92:f6:c4:9f: ec:0e:2c:fe:88:71:08:ba:df:1d:b1:09:7b:6b:5d: 73:1d:86:38:9a:c3:0a:1b:4a:0c:8d:69:6a:19:13: 2b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:86:15:63:74:36:76:45:1A:35:29:99:D0:AE:9E:51:28:3D:2F X509v3 Authority Key Identifier: keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:6b:9e:b6:f4:37:cc:e0:c2:a2:c8:b3:01:bd:1c:28:52: e8:ff:6f:1b:90:48:ff:bb:34:87:0f:2a:6a:e4:00:e5:44:03: 01:d7:f3:af:fb:62:c0:ca:cb:ce:5a:a1:be:38:c0:6c:5e:f0: 88:ec:c4:ad:c2:3a:69:3d:3f:be:fa:68:16:48:12:c2:4a:86: 0e:0b:01:ea:33:74:ed:5f:02:39:91:15:84:63:26:46:54:3c: e3:90:bd:a0:1b:98:24:81:fd:a6:cf:57:f8:42:c7:9f:26:0b: 25:01:3a:01:1f:32:0a:b4:60:7f:a3:50:4b:b3:4e:54:24:28: 69:55:2f:d9:31:f0:d4:28:75:c2:cd:72:f1:ab:b0:ad:eb:23: b1:3c:36:b0:20:64:bd:a6:40:bc:33:07:9f:51:15:d6:27:bf: 8c:56:0e:d3:3c:11:35:02:11:fd:9f:7e:81:b5:73:d8:40:8a: 56:18:f7:af:b7:10:ce:04:bd:84:ab:ab:6a:9c:27:a6:8a:d9: 7a:b8:cb:16:35:b8:ad:a5:5a:cc:8a:70:93:f2:ba:b0:b1:09: 71:e1:65:f3:d1:b5:e5:a8:2a:22:49:fd:3f:68:c7:2a:d9:35: c8:49:0c:0b:d0:26:2f:33:c1:0b:66:54:8a:36:44:db:9e:1c: 7f:99:29:fd -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUKb8swrQEp4sWALWjcivFp5h6XRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj MzY0MzM2ZTAeFw0yNTA1MDUwNTI5NDRaFw0yNTA1MDYwOTExNDRaMDMxMTAvBgNV BAMTKDY1QTA4NjE1NjM3NDM2NzY0NTFBMzUyOTk5RDBBRTlFNTEyODNEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtnavxA3fGSBlAeYJGmLww1Fs kvgP03E9nXPmaQu5+MgViN9nm7FQbx6aM0LaQoi0yAShkz2l9UA5E2EB1kckZxhh Y//FmYFWJrUROGXLXQw+RQHIRik8aKQMfD45TWQwWM2YSKrp+9N04HEVsZrh85VQ PyHlvYRi/1V7k+1wuBzApUG1ZXuIRO+rurTEdho6jBIALxyxQnuj7BGEU2yAAKj5 cvH44K1QVbwy3zFtvBjuJErZM9dlJKS9yaiYMAXGMdf2mSAG7/U0YSgezFE84n1b valPkRxwVUJ2kvbEn+wOLP6IcQi63x2xCXtrXXMdhjiawwobSgyNaWoZEyvlAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUZaCGFWN0NnZFGjUpmdCunlEoPS8wHwYDVR0j BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBa+muetvQ3zODCosizAb0cKFLo/28bkEj/uzSHDypq5ADlRAMB1/Ov+2LA ysvOWqG+OMBsXvCI7MStwjppPT+++mgWSBLCSoYOCwHqM3TtXwI5kRWEYyZGVDzj kL2gG5gkgf2mz1f4QsefJgslAToBHzIKtGB/o1BLs05UJChpVS/ZMfDUKHXCzXLx q7Ct6yOxPDawIGS9pkC8MwefURXWJ7+MVg7TPBE1AhH9n36BtXPYQIpWGPevtxDO BL2Eq6tqnCemitl6uMsWNbitpVrMinCT8rqwsQlx4WXz0bXlqCoiSf0/aMcq2TXI SQwL0CYvM8ELZlSKNkTbnhx/mSn9 -----END CERTIFICATE-----Generated at Mon May 5 23:28:08 2025 by rpki-client