$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json) Hash identifier: jeCCyx7ZbaVk3tx77gNxoJBmB69vOOgSik6Bcvb/SSM= Subject key identifier: 69:0C:C8:3E:EF:39:32:83:4D:9A:D8:BA:38:5D:FB:83:2D:54:74:C7 Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e Certificate serial: 6081FDD6D47E1B4D4A8AA0438D1146070F370C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft Manifest number: 0203 Signing time: Sat 28 Jun 2025 13:23:50 +0000 Manifest this update: Sat 28 Jun 2025 13:18:50 +0000 Manifest next update: Sun 29 Jun 2025 13:53:50 +0000 Files and hashes: 1: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: iewdWSe6JDqXZwV+5rxPgHXeqvYSAY33S3waDnF6QEI=) 2: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: 3NgMpZV5LRLe09p3vkec7ImeUr6zl+R4GEX1WforxJc=) 3: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: KjBpGCjhgcgzyMWLAwsBFjFxOErpP8CS58MUX0jm8U8=) 4: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: ckMcxXPiF8vlvTJRQQIsDxcEVQLOX0RuZe7KgLtHzqI=) 5: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: YSSHP8ramWh4b/PHl908J0H1XYLgoL50BnIKvHT8MQE=) 6: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 6Vd3A68tlmMtxQej2vYw2TTJoQXEgyQe+0Uw9Nd1As0=) 7: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: PyYnfMwZZjBynv89/LlY/K0aQ9UlxMYoLmzx/yfbs2w=) 8: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: 5N/Wd0YuxRMcEUpk/fmXDUj02n81dTqVqyb1T4P+ixA=) 9: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: 8O1tIAno00Fq3J11voTy+bZ9nLQmODTuv88Ar+OUiVs=) 10: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: wZqhyYMlFnMxPXGy2swOtIb6clVA4BnPUsg46ZKHyzg=) 11: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: 0X6DHgcvAIZhL1S7iWw9n32W1I2GuZJRkhwdRW/ZvsA=) 12: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: oZe7kx0dptbnk/pk09tmwpUTyeKrXYcrC32dA/P40Gk=) 13: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: ruXTtDqCFR6FeRYnsf8ZXUqkN0R5+iLLKkgHPFNoB3A=) 14: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: Yzc/4D7Q3iiVMpceJ0SReQghPqerbs5PTmpM0kDQva4=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:81:fd:d6:d4:7e:1b:4d:4a:8a:a0:43:8d:11:46:07:0f:37:0c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e Validity Not Before: Jun 28 13:18:50 2025 GMT Not After : Jun 29 13:53:50 2025 GMT Subject: CN=690CC83EEF3932834D9AD8BA385DFB832D5474C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:5e:2f:6b:eb:9c:78:17:61:71:dd:ca:d1: af:0c:1c:45:49:9b:d4:ef:99:71:b9:61:e1:73:44: 21:29:35:89:57:29:93:e8:e9:e3:d6:e7:4e:77:2b: 14:a3:31:26:b7:06:45:d7:41:4e:21:24:63:02:d9: 8d:5c:7a:27:83:a6:06:28:90:ce:5b:d7:cd:e2:ce: b8:86:58:1e:75:1e:2d:b8:da:f5:be:65:82:7e:3b: 13:aa:2f:4a:af:e9:e5:eb:b4:c9:44:ed:8e:32:e0: a2:61:eb:b9:3a:ec:e3:2f:50:25:83:b5:67:1c:c0: 46:48:64:97:e1:3c:fa:cf:96:41:93:94:0a:b0:39: a3:7a:79:e7:96:83:85:53:4a:1a:7a:ad:3a:3f:1b: a6:45:90:7c:eb:7a:c5:bf:12:dd:14:82:c1:24:71: 77:0b:f7:e8:89:eb:40:53:45:72:4b:38:e9:1f:56: c5:7e:d9:e8:1f:14:45:ad:22:63:81:f8:16:52:f9: a9:7c:28:e2:4d:48:86:90:b9:4c:40:bd:d1:ec:bf: 97:4e:cf:eb:8c:06:15:be:f6:a1:78:c4:d2:cb:a6: 47:88:9c:93:92:59:44:e9:37:56:be:77:3f:16:24: 8a:a0:d4:95:86:9c:1e:8f:ee:08:c8:bb:ec:b1:74: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:C8:3E:EF:39:32:83:4D:9A:D8:BA:38:5D:FB:83:2D:54:74:C7 X509v3 Authority Key Identifier: keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:23:0f:68:99:6c:41:53:36:99:87:dc:3b:b3:0e:cf:98:b9: c6:a1:09:cc:12:d1:91:64:ee:41:a5:43:75:ff:0b:49:49:e2: 21:9e:ae:c8:e5:19:35:93:7b:8b:8c:15:40:9f:18:c3:0c:9d: 21:31:9f:95:f9:eb:4a:49:f2:18:47:59:aa:fe:46:c5:e2:42: 5e:a3:fb:31:5b:2d:1a:51:cb:7f:7e:40:8b:13:ac:f0:d3:f6: 1b:9a:e0:76:e3:24:e8:51:d5:db:de:aa:a0:5c:16:13:3a:64: f4:2c:1c:52:30:2f:41:d5:1a:22:c2:a9:20:97:c8:1a:17:5c: f0:dc:1d:90:20:64:a1:9b:b2:95:62:83:f3:ce:d2:47:00:7d: fa:1f:d2:a3:71:c7:fa:aa:9e:20:b7:54:b7:fe:7a:b3:f5:2e: e8:2b:e9:60:be:6c:13:64:76:14:1d:74:4a:8d:73:22:e1:2a: bc:bd:7d:b5:41:15:15:24:ae:6a:71:41:44:2d:ec:53:42:36: 1f:c0:24:12:5b:8a:18:84:fa:58:79:c7:a4:ce:a8:2e:11:47: c2:d7:fe:9f:a7:ee:ec:04:ee:ae:85:f8:ee:2d:4f:ea:a1:f9: 18:8e:4c:83:54:9d:a1:8a:d0:ce:b5:8d:d4:91:31:b4:20:bf: 72:74:ef:ae -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUYIH91tR+G01KiqBDjRFGBw83DIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj MzY0MzM2ZTAeFw0yNTA2MjgxMzE4NTBaFw0yNTA2MjkxMzUzNTBaMDMxMTAvBgNV BAMTKDY5MENDODNFRUYzOTMyODM0RDlBRDhCQTM4NURGQjgzMkQ1NDc0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQF4va+uceBdhcd3K0a8MHEVJ m9TvmXG5YeFzRCEpNYlXKZPo6ePW5053KxSjMSa3BkXXQU4hJGMC2Y1ceieDpgYo kM5b183izriGWB51Hi242vW+ZYJ+OxOqL0qv6eXrtMlE7Y4y4KJh67k67OMvUCWD tWccwEZIZJfhPPrPlkGTlAqwOaN6eeeWg4VTShp6rTo/G6ZFkHzresW/Et0UgsEk cXcL9+iJ60BTRXJLOOkfVsV+2egfFEWtImOB+BZS+al8KOJNSIaQuUxAvdHsv5dO z+uMBhW+9qF4xNLLpkeInJOSWUTpN1a+dz8WJIqg1JWGnB6P7gjIu+yxdMdZAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUaQzIPu85MoNNmti6OF37gy1UdMcwHwYDVR0j BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAIIw9omWxBUzaZh9w7sw7PmLnGoQnMEtGRZO5BpUN1/wtJSeIhnq7I5Rk1 k3uLjBVAnxjDDJ0hMZ+V+etKSfIYR1mq/kbF4kJeo/sxWy0aUct/fkCLE6zw0/Yb muB24yToUdXb3qqgXBYTOmT0LBxSMC9B1Roiwqkgl8gaF1zw3B2QIGShm7KVYoPz ztJHAH36H9Kjccf6qp4gt1S3/nqz9S7oK+lgvmwTZHYUHXRKjXMi4Sq8vX21QRUV JK5qcUFELexTQjYfwCQSW4oYhPpYecekzqguEUfC1/6fp+7sBO6uhfjuLU/qofkY jkyDVJ2hitDOtY3UkTG0IL9ydO+u -----END CERTIFICATE-----Generated at Sat Jun 28 23:50:02 2025 by rpki-client