$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json) Hash identifier: 8CorevKy6D+EGrH4dtY9rcRve0WYGT/WKo00CR2t9QA= Subject key identifier: 10:E5:1F:69:43:64:21:CC:C5:F4:ED:36:0D:58:5A:65:3D:42:F6:CB Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e Certificate serial: 387232008E4951E645791E1A218B56A7572F96E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft Manifest number: 0220 Signing time: Sun 20 Jul 2025 09:03:57 +0000 Manifest this update: Sun 20 Jul 2025 08:58:57 +0000 Manifest next update: Mon 21 Jul 2025 09:56:57 +0000 Files and hashes: 1: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: 5N/Wd0YuxRMcEUpk/fmXDUj02n81dTqVqyb1T4P+ixA=) 2: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: PyYnfMwZZjBynv89/LlY/K0aQ9UlxMYoLmzx/yfbs2w=) 3: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: 3NgMpZV5LRLe09p3vkec7ImeUr6zl+R4GEX1WforxJc=) 4: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: ruXTtDqCFR6FeRYnsf8ZXUqkN0R5+iLLKkgHPFNoB3A=) 5: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: qj6RPqBgpFxD74LZ8mxbhuxhxbhFUT6c5oaGhUWuA34=) 6: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: Yzc/4D7Q3iiVMpceJ0SReQghPqerbs5PTmpM0kDQva4=) 7: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: wZqhyYMlFnMxPXGy2swOtIb6clVA4BnPUsg46ZKHyzg=) 8: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 6Vd3A68tlmMtxQej2vYw2TTJoQXEgyQe+0Uw9Nd1As0=) 9: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: 0X6DHgcvAIZhL1S7iWw9n32W1I2GuZJRkhwdRW/ZvsA=) 10: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: oZe7kx0dptbnk/pk09tmwpUTyeKrXYcrC32dA/P40Gk=) 11: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: 8O1tIAno00Fq3J11voTy+bZ9nLQmODTuv88Ar+OUiVs=) 12: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: KjBpGCjhgcgzyMWLAwsBFjFxOErpP8CS58MUX0jm8U8=) 13: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: iewdWSe6JDqXZwV+5rxPgHXeqvYSAY33S3waDnF6QEI=) 14: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: ckMcxXPiF8vlvTJRQQIsDxcEVQLOX0RuZe7KgLtHzqI=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:72:32:00:8e:49:51:e6:45:79:1e:1a:21:8b:56:a7:57:2f:96:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e Validity Not Before: Jul 20 08:58:57 2025 GMT Not After : Jul 21 09:56:57 2025 GMT Subject: CN=10E51F69436421CCC5F4ED360D585A653D42F6CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:6a:2a:e2:40:4c:45:a8:07:78:d0:74:37: a4:0b:be:7a:95:34:de:98:72:f9:40:50:7e:48:b6: 8e:60:ea:8f:cd:62:37:b9:ef:30:df:76:8e:44:e6: ba:6a:9d:ee:8a:04:8c:d0:21:fd:88:0a:2a:08:77: 4e:8e:68:ee:12:ef:c4:7b:16:a4:f6:59:a8:39:94: 76:f9:26:f4:90:5b:22:4c:1e:77:94:b5:06:e3:a0: 0e:29:27:e0:fa:ec:d5:b2:7f:49:1d:8f:ea:2e:7e: ef:09:39:9b:9d:77:ca:79:cc:03:ab:70:b6:b7:ff: 26:11:35:5c:81:7f:3c:8d:f9:b8:98:69:2d:63:cb: ad:7f:74:77:06:fa:f9:e5:63:31:f7:e2:52:d6:b5: 38:e9:0a:a5:de:c7:16:c7:0f:d8:d9:26:82:90:35: 34:9b:bf:ac:44:e5:4c:f7:35:c3:f4:d2:ac:99:fb: d7:a3:45:4a:a3:fa:a1:4b:26:96:b8:56:11:5b:88: 5a:a6:38:3f:ef:c5:48:ff:8e:1d:19:a6:ab:0c:6e: 6c:2e:4f:fe:29:09:5d:04:27:fc:1f:41:c1:a4:dc: 96:1b:41:33:c1:5d:a1:c3:3c:29:05:c8:59:d8:e4: eb:63:13:b9:0b:bf:0e:c0:7f:90:64:9f:9d:8b:5a: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:1F:69:43:64:21:CC:C5:F4:ED:36:0D:58:5A:65:3D:42:F6:CB X509v3 Authority Key Identifier: keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0d:7a:6d:87:92:70:82:f0:99:4e:4e:6a:0a:56:5b:41:54: 6b:1f:dc:99:de:53:f8:bf:fd:cb:b4:a4:4b:73:24:ca:0f:e4: 54:c9:dc:84:48:c0:3c:0b:43:49:51:f9:b6:13:c3:d5:35:fc: ed:e3:fb:3b:7b:33:9c:99:11:6f:5b:d3:1d:4f:4f:97:b7:1d: 30:4f:65:cd:95:d2:82:b5:39:07:5d:4f:16:b7:d5:72:1b:c3: 17:47:04:64:d7:0d:9c:bd:42:13:cc:e0:8c:f8:6f:a7:92:89: 0e:a0:84:1e:d6:d5:d7:9d:73:aa:37:51:fd:20:a2:d3:fe:c9: 8f:f5:a9:0a:f2:3b:5e:58:41:fb:de:4e:b9:a9:48:99:45:ca: fb:88:26:83:7a:3e:16:e9:7b:8b:79:07:97:80:78:d5:f5:28: 49:da:d4:bf:86:5b:70:73:c6:0e:f7:d9:8a:8f:30:ce:a3:f2: 2c:88:2a:cc:62:93:61:69:45:ab:ce:d8:13:a1:15:2d:a2:67: ea:88:9e:3c:9b:75:d3:d5:46:a2:e8:8f:6d:03:07:49:5f:35: 87:8d:01:0a:b0:a3:60:4b:01:10:e4:0c:73:d2:bf:a4:03:2a: 0f:58:30:43:2f:bb:7d:08:b4:51:f7:fa:1b:44:70:55:99:6b: 77:08:37:24 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUOHIyAI5JUeZFeR4aIYtWp1cvluIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj MzY0MzM2ZTAeFw0yNTA3MjAwODU4NTdaFw0yNTA3MjEwOTU2NTdaMDMxMTAvBgNV BAMTKDEwRTUxRjY5NDM2NDIxQ0NDNUY0RUQzNjBENTg1QTY1M0Q0MkY2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCck2oq4kBMRagHeNB0N6QLvnqV NN6YcvlAUH5Ito5g6o/NYje57zDfdo5E5rpqne6KBIzQIf2ICioId06OaO4S78R7 FqT2Wag5lHb5JvSQWyJMHneUtQbjoA4pJ+D67NWyf0kdj+oufu8JOZudd8p5zAOr cLa3/yYRNVyBfzyN+biYaS1jy61/dHcG+vnlYzH34lLWtTjpCqXexxbHD9jZJoKQ NTSbv6xE5Uz3NcP00qyZ+9ejRUqj+qFLJpa4VhFbiFqmOD/vxUj/jh0ZpqsMbmwu T/4pCV0EJ/wfQcGk3JYbQTPBXaHDPCkFyFnY5OtjE7kLvw7Af5Bkn52LWhlLAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUEOUfaUNkIczF9O02DVhaZT1C9sswHwYDVR0j BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBADXpth5JwgvCZTk5qClZbQVRrH9yZ3lP4v/3LtKRLcyTKD+RUydyESMA8 C0NJUfm2E8PVNfzt4/s7ezOcmRFvW9MdT0+Xtx0wT2XNldKCtTkHXU8Wt9VyG8MX RwRk1w2cvUITzOCM+G+nkokOoIQe1tXXnXOqN1H9IKLT/smP9akK8jteWEH73k65 qUiZRcr7iCaDej4W6XuLeQeXgHjV9ShJ2tS/hltwc8YO99mKjzDOo/IsiCrMYpNh aUWrztgToRUtomfqiJ48m3XT1Uai6I9tAwdJXzWHjQEKsKNgSwEQ5Axz0r+kAyoP WDBDL7t9CLRR9/obRHBVmWt3CDck -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:39 2025 by rpki-client