$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json) Hash identifier: 0WbElE4IdDPReIkn1jMiMHeGaRnFNpYO/5KhyY3eQOs= Subject key identifier: 97:08:E3:B1:BE:FF:24:D1:4E:88:A4:7E:34:FF:5B:9D:01:46:5F:FA Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e Certificate serial: 103E1DB12727B10356C88A434478E312530B092F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft Manifest number: 01EF Signing time: Fri 13 Jun 2025 13:40:52 +0000 Manifest this update: Fri 13 Jun 2025 13:35:52 +0000 Manifest next update: Sat 14 Jun 2025 17:30:52 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: ruXTtDqCFR6FeRYnsf8ZXUqkN0R5+iLLKkgHPFNoB3A=) 2: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: Yzc/4D7Q3iiVMpceJ0SReQghPqerbs5PTmpM0kDQva4=) 3: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: jYnAPpxhOgYH8OvSOpKquRFXET+MCPDl92KLNLrSOqU=) 4: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: iewdWSe6JDqXZwV+5rxPgHXeqvYSAY33S3waDnF6QEI=) 5: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: wZqhyYMlFnMxPXGy2swOtIb6clVA4BnPUsg46ZKHyzg=) 6: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: 5N/Wd0YuxRMcEUpk/fmXDUj02n81dTqVqyb1T4P+ixA=) 7: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: 8O1tIAno00Fq3J11voTy+bZ9nLQmODTuv88Ar+OUiVs=) 8: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: ckMcxXPiF8vlvTJRQQIsDxcEVQLOX0RuZe7KgLtHzqI=) 9: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: PyYnfMwZZjBynv89/LlY/K0aQ9UlxMYoLmzx/yfbs2w=) 10: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: oZe7kx0dptbnk/pk09tmwpUTyeKrXYcrC32dA/P40Gk=) 11: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: KjBpGCjhgcgzyMWLAwsBFjFxOErpP8CS58MUX0jm8U8=) 12: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: 0X6DHgcvAIZhL1S7iWw9n32W1I2GuZJRkhwdRW/ZvsA=) 13: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: 3NgMpZV5LRLe09p3vkec7ImeUr6zl+R4GEX1WforxJc=) 14: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 6Vd3A68tlmMtxQej2vYw2TTJoQXEgyQe+0Uw9Nd1As0=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3e:1d:b1:27:27:b1:03:56:c8:8a:43:44:78:e3:12:53:0b:09:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e Validity Not Before: Jun 13 13:35:52 2025 GMT Not After : Jun 14 17:30:52 2025 GMT Subject: CN=9708E3B1BEFF24D14E88A47E34FF5B9D01465FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:af:86:6a:3c:90:62:7d:5f:51:32:20:38: e3:89:13:2c:7e:46:d5:21:5f:99:93:62:0c:e1:c2: 15:d1:4a:40:27:76:1a:13:32:71:01:40:58:63:ff: 03:bc:21:91:f3:95:bb:2d:7d:a0:c0:f1:5e:6e:13: c5:e0:20:ed:50:90:d4:b7:be:ad:4e:3a:ec:b0:e8: 20:88:bd:67:1e:ee:0a:2e:23:13:cb:6a:33:35:c4: 35:84:bd:26:af:e2:86:62:99:60:00:35:a8:e6:d0: ef:29:f1:7d:47:62:05:57:21:e1:73:9e:98:95:7f: bb:4d:5a:e2:e4:29:6b:55:33:b3:b0:92:4a:50:80: 1a:5e:77:1d:88:20:6c:0e:9a:cd:6d:d1:f8:48:79: 36:76:4f:91:b2:8b:eb:87:c5:08:98:24:74:c0:27: 7c:73:93:aa:12:23:35:0f:39:1c:f2:15:00:b7:37: ee:43:56:e3:89:e5:e3:d4:f6:50:66:3a:81:66:c0: 93:45:f7:5f:66:43:1b:e0:3c:82:4f:6f:e5:08:25: 7c:45:07:ad:e0:6d:ad:5c:eb:87:b2:35:ad:29:5e: 54:51:4b:40:e7:8d:d8:03:b3:ef:e7:14:d8:72:bb: ab:22:d7:b8:52:ec:20:03:08:30:43:2a:d9:02:f2: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:E3:B1:BE:FF:24:D1:4E:88:A4:7E:34:FF:5B:9D:01:46:5F:FA X509v3 Authority Key Identifier: keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:36:03:5f:43:84:b6:42:0e:6d:36:0b:56:1c:f2:2e:c7:0a: a6:de:de:94:d7:76:44:45:0c:34:3d:13:50:4c:6b:b7:99:af: 51:0d:4f:cd:36:6b:be:91:01:9a:cb:68:1b:34:17:28:f7:3d: 37:8c:e5:4a:c2:5e:42:a6:07:39:46:ad:f0:0e:c5:e0:df:2b: 7d:8e:8e:05:02:78:f0:b6:2e:c0:fb:e4:ef:4f:ba:19:5c:8d: fa:e5:60:14:4e:a8:f0:33:a8:94:41:8b:5f:06:4b:c0:fa:a3: 8d:ca:0f:96:54:45:14:3c:44:20:df:9b:7a:1d:dd:e5:25:3e: 99:ea:44:0f:87:5f:49:45:83:f7:1b:83:c2:c7:59:5c:3d:5b: 79:5c:ab:37:81:32:0c:c0:f3:d7:de:9c:da:2e:94:bd:e4:c1: b0:4a:0f:67:f9:1c:9c:49:f0:6b:97:e0:59:a5:e2:8e:a1:01: d4:34:2d:0d:d4:aa:18:65:96:70:7c:7c:3a:a0:90:a0:ae:ee: 33:ee:21:65:2f:88:da:c2:ce:b6:40:e2:06:05:e4:78:af:88: 26:fc:03:0d:6e:49:97:dc:75:80:54:f6:ba:5d:cc:67:c5:03: 7b:b5:93:0d:79:29:df:ba:f8:01:47:e2:39:29:08:20:c0:fb: b8:43:79:63 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUED4dsScnsQNWyIpDRHjjElMLCS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj MzY0MzM2ZTAeFw0yNTA2MTMxMzM1NTJaFw0yNTA2MTQxNzMwNTJaMDMxMTAvBgNV BAMTKDk3MDhFM0IxQkVGRjI0RDE0RTg4QTQ3RTM0RkY1QjlEMDE0NjVGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UK+GajyQYn1fUTIgOOOJEyx+ RtUhX5mTYgzhwhXRSkAndhoTMnEBQFhj/wO8IZHzlbstfaDA8V5uE8XgIO1QkNS3 vq1OOuyw6CCIvWce7gouIxPLajM1xDWEvSav4oZimWAANajm0O8p8X1HYgVXIeFz npiVf7tNWuLkKWtVM7OwkkpQgBpedx2IIGwOms1t0fhIeTZ2T5Gyi+uHxQiYJHTA J3xzk6oSIzUPORzyFQC3N+5DVuOJ5ePU9lBmOoFmwJNF919mQxvgPIJPb+UIJXxF B63gba1c64eyNa0pXlRRS0DnjdgDs+/nFNhyu6si17hS7CADCDBDKtkC8rkjAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUlwjjsb7/JNFOiKR+NP9bnQFGX/owHwYDVR0j BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBxNgNfQ4S2Qg5tNgtWHPIuxwqm3t6U13ZERQw0PRNQTGu3ma9RDU/NNmu+ kQGay2gbNBco9z03jOVKwl5Cpgc5Rq3wDsXg3yt9jo4FAnjwti7A++TvT7oZXI36 5WAUTqjwM6iUQYtfBkvA+qONyg+WVEUUPEQg35t6Hd3lJT6Z6kQPh19JRYP3G4PC x1lcPVt5XKs3gTIMwPPX3pzaLpS95MGwSg9n+RycSfBrl+BZpeKOoQHUNC0N1KoY ZZZwfHw6oJCgru4z7iFlL4jaws62QOIGBeR4r4gm/AMNbkmX3HWAVPa6XcxnxQN7 tZMNeSnfuvgBR+I5KQggwPu4Q3lj -----END CERTIFICATE-----Generated at Fri Jun 13 18:54:27 2025 by rpki-client