$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: cEwsbI2ES6HcP0mPUdELVy2T80HCNGnBcrIisa0aZJc= Subject key identifier: 3A:CF:08:3D:AA:62:44:33:04:AA:FE:53:F9:71:05:98:59:B7:F5:55 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 579A409FE18957EE78D80BA89DBE0E01EA9B6238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 6E Signing time: Sun 19 Oct 2025 15:39:24 +0000 Manifest this update: Sun 19 Oct 2025 15:34:24 +0000 Manifest next update: Mon 20 Oct 2025 18:46:24 +0000 Files and hashes: 1: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=) 2: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=) 3: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=) 4: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=) 5: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: YMw7OJO8rpHbQBzHxeq/ORj/Rt84quaYhQMrlnMNsS8=) 6: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=) 7: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=) 8: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=) 9: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=) 10: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=) 11: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=) 12: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=) 13: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=) 14: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 18:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9a:40:9f:e1:89:57:ee:78:d8:0b:a8:9d:be:0e:01:ea:9b:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Oct 19 15:34:24 2025 GMT Not After : Oct 20 18:46:24 2025 GMT Subject: CN=3ACF083DAA62443304AAFE53F971059859B7F555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:b0:9e:17:66:d7:72:d8:fb:17:7b:ab:b4: 21:80:be:6e:46:6c:a9:88:97:94:9c:b4:32:26:9a: 43:0a:fa:cb:4c:37:32:ab:6c:ab:69:cc:05:64:c6: ef:1a:31:bf:e6:fb:b6:da:0e:07:16:eb:f4:c5:da: 2c:6c:27:bd:f9:c1:cd:65:8b:b8:82:ba:86:27:aa: 35:af:97:53:25:fd:09:0c:2a:51:49:2b:1b:97:44: d4:d4:d6:18:19:d7:53:16:6c:10:d1:c6:16:e0:06: 6f:c6:42:ad:a1:de:13:4c:89:2a:96:94:28:30:91: 43:e0:59:18:7e:8c:0e:3d:30:c3:17:46:cc:c3:41: 45:de:11:f9:2f:a0:d2:6c:46:06:e1:f1:c4:7c:28: dc:d1:9a:05:ec:4c:22:2e:76:29:77:00:f2:c1:b0: 5b:28:3e:99:48:51:fb:38:73:3e:3c:89:c7:ae:17: d8:03:b2:76:49:00:7a:36:3b:c0:68:0f:8b:a8:01: b1:5c:6b:43:71:c5:5f:b9:e6:32:f5:f8:69:5f:7d: ac:3d:e3:f2:e5:c4:e2:c6:cc:79:91:fa:fd:bc:2a: 95:fa:2d:45:8b:87:c3:85:8a:c8:0b:4a:07:3a:f6: 92:62:ae:33:81:61:26:b7:07:de:76:cb:ad:bd:3f: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CF:08:3D:AA:62:44:33:04:AA:FE:53:F9:71:05:98:59:B7:F5:55 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:27:e6:a7:19:53:8f:d9:48:98:e0:0d:39:80:6e:e9:e5:80: b3:ff:bd:f6:c1:ea:46:f2:43:5b:aa:89:b6:ba:73:26:2e:3d: 07:71:d5:84:9a:9d:58:67:28:e9:6d:fd:40:89:2e:14:49:f2: 90:52:3d:b8:2a:e5:cc:05:c7:84:3d:0f:0c:0e:fb:48:30:97: f2:a5:1b:86:9c:26:2d:38:ad:7e:78:15:49:bd:58:7c:b0:84: aa:5f:28:8d:f8:34:38:12:28:db:6d:0c:53:42:2a:2a:31:ab: f6:4b:38:2d:1a:a4:c2:9f:a3:4e:e4:6a:08:15:48:eb:63:59: e3:c2:8d:09:a3:58:5d:a0:af:34:ca:ae:df:23:a6:90:92:0b: 2b:f0:c8:b9:23:2f:4f:e1:22:91:b5:ab:59:3c:04:81:47:80: 54:a7:14:2f:f3:5a:ea:68:3c:01:76:e5:64:5f:20:f6:48:19: 28:a1:61:07:61:7b:88:39:2f:ad:98:f8:3c:68:33:ad:a3:28: c9:c2:3f:e6:a9:b4:3f:94:c4:b7:73:3d:06:89:c2:5f:91:18: de:08:6b:b7:c7:26:0f:95:e4:af:fb:a3:ab:2a:9b:f9:45:83: bc:d7:82:91:b7:1e:81:2d:27:eb:7d:3b:e9:40:c7:18:a2:58: e6:9d:7d:cc -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUV5pAn+GJV+542Auonb4OAeqbYjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNTEwMTkxNTM0MjRaFw0yNTEwMjAxODQ2MjRaMDMxMTAvBgNV BAMTKDNBQ0YwODNEQUE2MjQ0MzMwNEFBRkU1M0Y5NzEwNTk4NTlCN0Y1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/bCeF2bXctj7F3urtCGAvm5G bKmIl5SctDImmkMK+stMNzKrbKtpzAVkxu8aMb/m+7baDgcW6/TF2ixsJ735wc1l i7iCuoYnqjWvl1Ml/QkMKlFJKxuXRNTU1hgZ11MWbBDRxhbgBm/GQq2h3hNMiSqW lCgwkUPgWRh+jA49MMMXRszDQUXeEfkvoNJsRgbh8cR8KNzRmgXsTCIudil3APLB sFsoPplIUfs4cz48iceuF9gDsnZJAHo2O8BoD4uoAbFca0NxxV+55jL1+Glffaw9 4/LlxOLGzHmR+v28KpX6LUWLh8OFisgLSgc69pJirjOBYSa3B952y629P2v7AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUOs8IPapiRDMEqv5T+XEFmFm39VUwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCbJ+anGVOP2UiY4A05gG7p5YCz/732wepG8kNbqom2unMmLj0HcdWEmp1Y Zyjpbf1AiS4USfKQUj24KuXMBceEPQ8MDvtIMJfypRuGnCYtOK1+eBVJvVh8sISq XyiN+DQ4EijbbQxTQioqMav2SzgtGqTCn6NO5GoIFUjrY1njwo0Jo1hdoK80yq7f I6aQkgsr8Mi5Iy9P4SKRtatZPASBR4BUpxQv81rqaDwBduVkXyD2SBkooWEHYXuI OS+tmPg8aDOtoyjJwj/mqbQ/lMS3cz0GicJfkRjeCGu3xyYPleSv+6OrKpv5RYO8 14KRtx6BLSfrfTvpQMcYoljmnX3M -----END CERTIFICATE-----Generated at Mon Oct 20 02:47:06 2025 by rpki-client