Manifest

$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
File:                     DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json)
Hash identifier:          t+I8eZ7U4Rh2SgSK7EJwDQwk5LM+La1dCA0IUSlOeXQ=
Subject key identifier:   38:61:8C:20:7E:FB:7B:F8:C2:9B:16:AD:CD:04:6E:8A:C9:4A:52:A1
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Certificate issuer:       /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial:       3EE8B90E73E39EC0F945B617130BD474BB087808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access:      rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
Manifest number:          6F
Signing time:             Mon 20 Oct 2025 10:49:26 +0000
Manifest this update:     Mon 20 Oct 2025 10:44:26 +0000
Manifest next update:     Tue 21 Oct 2025 11:14:26 +0000
Files and hashes:         1: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=)
                          2: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=)
                          3: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=)
                          4: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=)
                          5: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=)
                          6: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: NG97e0TDufE7gj91J3YUCVGMinkj9pF/SdzdVkFcGgg=)
                          7: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=)
                          8: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=)
                          9: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=)
                          10: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=)
                          11: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=)
                          12: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=)
                          13: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=)
                          14: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=)
Validation:               OK
Signature path:           rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e8:b9:0e:73:e3:9e:c0:f9:45:b6:17:13:0b:d4:74:bb:08:78:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
        Validity
            Not Before: Oct 20 10:44:26 2025 GMT
            Not After : Oct 21 11:14:26 2025 GMT
        Subject: CN=38618C207EFB7BF8C29B16ADCD046E8AC94A52A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:8a:e3:d5:82:10:ca:8c:a2:26:87:6d:41:
                    b9:89:23:0a:72:3c:37:60:55:8a:fa:28:d8:7b:7a:
                    ae:17:d7:95:10:b1:bf:97:0e:e5:5c:4c:45:ee:d1:
                    68:65:8d:87:54:5a:b7:c0:32:b2:b0:de:ed:55:9f:
                    e3:d5:61:0c:92:40:4f:99:6e:36:27:7c:cc:67:57:
                    9d:5a:63:2f:ec:22:2b:51:a8:b1:65:d0:42:46:c1:
                    d6:60:b3:7d:1c:f5:00:23:b5:ae:ae:c3:38:52:8d:
                    48:8f:64:8a:3f:00:42:18:71:b7:c1:33:6b:d4:6d:
                    64:95:0f:31:eb:5b:38:91:78:39:e7:5f:19:50:b3:
                    71:d3:f9:3f:83:d1:b4:78:dd:f6:c3:fb:55:d3:16:
                    15:4b:23:d0:84:fd:4a:fc:91:06:ce:16:ad:53:44:
                    52:a5:3a:37:bb:ec:b2:5f:2b:2e:d0:62:aa:f9:da:
                    7c:6a:aa:2b:b4:f1:78:9d:e4:11:19:76:f1:1e:95:
                    51:e5:8d:14:87:b5:4e:92:c6:1b:20:7f:e3:76:36:
                    9a:7b:bf:73:3d:62:ba:fa:88:85:a9:d8:9d:08:0a:
                    e9:4f:60:ed:2f:40:2b:bd:36:ea:9a:a9:42:a2:0c:
                    c6:1d:1e:34:a1:4d:a9:d3:67:76:0a:2a:62:e9:c3:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:61:8C:20:7E:FB:7B:F8:C2:9B:16:AD:CD:04:6E:8A:C9:4A:52:A1
            X509v3 Authority Key Identifier:
                keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e1:f3:27:a3:e7:62:9d:8f:53:54:51:dc:0e:97:68:d4:63:
         40:0d:fb:de:b0:53:29:77:a4:c9:27:f2:92:93:17:1f:71:96:
         78:21:db:7f:59:ae:79:63:16:65:bf:6c:7d:00:70:6d:f7:b0:
         ea:e7:ab:78:52:7c:ab:63:1c:59:f7:a3:a6:86:23:7c:73:64:
         a0:ed:64:db:6d:d3:3e:a2:68:35:90:e0:3f:b4:45:ab:04:d3:
         18:fa:bd:0d:42:1d:ea:f1:f1:5a:40:ed:5d:d0:7b:3a:b4:ac:
         a3:a4:12:8e:36:74:b4:66:d7:6c:cf:f1:7d:35:25:76:64:d7:
         f0:8d:d5:dd:e7:ef:c3:0c:75:8c:c7:71:e9:99:c1:09:d7:4b:
         66:bb:7e:ff:31:04:22:db:9f:fd:31:ef:4a:1d:78:93:fe:14:
         ce:53:df:6a:11:74:31:e6:06:ad:a1:af:f0:b0:3f:f5:f6:8d:
         5e:3c:b8:2b:54:aa:48:db:5c:be:e7:01:46:7a:90:fe:5e:0b:
         2c:4a:d2:29:14:e4:1b:db:b6:7e:a0:36:0a:18:bf:1d:b3:6d:
         3d:74:29:2c:c7:55:48:97:b4:20:2e:97:ff:51:1f:e5:0f:78:
         f7:7d:af:7b:db:30:fb:9b:57:25:dd:e6:d9:6b:ab:5a:05:a3:
         ed:8f:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:33 2025 by rpki-client