$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json) Hash identifier: VXgADLRDKVB5qP1KHuOnXdqOr1SeHhzgq/amE5DMYDM= Subject key identifier: DD:B5:36:F6:71:7A:B5:D9:07:8F:2E:CC:FB:00:AD:66:5E:97:65:66 Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e Certificate serial: 7FD97BA384A7FDE82E48E6E4BCBDA964632F508F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft Manifest number: 0195 Signing time: Sun 06 Apr 2025 20:54:14 +0000 Manifest this update: Sun 06 Apr 2025 20:49:14 +0000 Manifest next update: Mon 07 Apr 2025 21:45:14 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: housp/NQrT3wpqClESKpJc+buA8NGpEKQSVaZk63L84=) 2: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: YvoWbvlov4FjG1b7Qda+fqlVP6ujMhr8m/fEQddsSfE=) 3: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: B0MsruuFMEAhMjk5c7pq7kRL1RXPmsLLWMxvykRicM4=) 4: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: /gK7sT8vO6oSb1xKhSKHO77+weY6Y7CXtqogLjBhWSo=) 5: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: 3YH32z1pX8kitA9NiLHWwrgMRTfRtB0C1VTCrZwpHGI=) 6: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: NEH+nWO/0QP09WYvLtFrEDSvemn5G6vHFDHYbSjG3N0=) 7: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: ferdn59YCRZ7o3LNp/sMJiiat7z3SnSwsfrYBTdVPfA=) 8: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: e0CUD7jXhCf+ydR36N5Q5VZ7VITtWHCNrC5jmkREB/Q=) 9: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: jrS4f5gL+axV2/DGmLCJcZIqy/i7XIWyGkeH42twB/Q=) 10: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 1EpfRAU7kW2kv2/RfJoCDKIPQ6o226tRJYfE0DzmmiI=) 11: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: W2qRy9ddX7Xp81mc3K5+FrYJ8ie6RIhNH5at+Z0oViE=) 12: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: CH2m9ZitLf7PD63u+NkvuD6/h3y7uT6CT5l3zpNBz9U=) 13: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: ZYlzB3SOQwN3wrzewJr0kwZ/HRFdFo8jxmqTLeyxEAo=) 14: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 5yK+THE86yROjd9HC9sn3hUmll8GgcjhlJ8ciBlc4TU=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 21:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d9:7b:a3:84:a7:fd:e8:2e:48:e6:e4:bc:bd:a9:64:63:2f:50:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e Validity Not Before: Apr 6 20:49:14 2025 GMT Not After : Apr 7 21:45:14 2025 GMT Subject: CN=DDB536F6717AB5D9078F2ECCFB00AD665E976566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:32:c3:01:2b:e3:e8:c1:5e:f8:c3:8e:ac: f3:ab:12:7c:d1:f7:45:ba:65:7a:79:6d:ce:d4:aa: 26:c3:86:6a:1f:b4:00:33:fb:b9:a0:4a:9a:f7:17: fa:2d:f5:6d:fe:5f:58:e3:5d:b6:e0:43:c3:8b:94: 00:5a:ab:03:4e:05:f0:4b:03:01:64:c0:42:ac:33: 11:5b:b2:be:c1:04:3c:46:1f:b9:52:48:11:6e:e2: 01:77:71:30:ad:1f:e0:df:35:3f:18:a5:3b:d7:65: b5:0d:9e:74:3b:62:e8:b4:44:53:d2:17:69:fd:2a: 58:13:d9:bc:2a:3b:55:d7:36:54:57:d4:06:32:24: 93:94:09:1a:4c:14:d7:46:3f:99:c1:a7:26:89:e1: 4b:b6:4c:2f:40:77:2c:0a:d8:b7:1d:7e:f1:d4:75: 42:f1:e7:fa:9e:78:67:98:f3:1e:99:1c:1a:6f:57: 47:43:6c:4d:7c:30:dd:d3:90:9d:2c:30:da:e0:f2: ac:5d:da:f8:5e:9f:26:98:19:2f:9d:0a:b9:5b:a2: be:9c:fc:ca:56:a0:24:69:26:cf:89:d3:2c:21:6d: d6:21:c8:b2:5a:fc:45:24:8c:a8:31:8b:a2:92:d2: 50:fd:c6:df:e9:d5:37:e3:db:b0:2b:cc:72:31:a8: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:36:F6:71:7A:B5:D9:07:8F:2E:CC:FB:00:AD:66:5E:97:65:66 X509v3 Authority Key Identifier: keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:58:21:65:bf:0c:e0:76:05:af:2d:09:e2:b2:18:2c:8e:50: 77:d2:1e:1f:29:d4:c9:a6:db:b9:5d:b9:ef:27:8e:fe:31:a0: 50:06:70:9c:a1:1f:33:db:49:a1:1c:90:96:a8:49:01:cf:41: f5:6c:55:40:2b:5e:f2:b3:2d:30:10:55:70:23:56:2e:8a:5d: 81:52:b0:14:f0:f9:01:c7:e5:0c:02:52:c2:99:ca:84:9f:91: d8:37:44:21:0e:8e:19:0e:f5:2d:f9:3d:e2:9b:06:f5:d6:2b: 33:94:32:93:dd:79:ad:4d:61:4a:c6:69:f8:c5:29:5c:be:f4: c2:79:b2:a1:b3:c0:e2:9c:d2:f5:cd:88:64:5f:45:a9:31:ff: 01:06:cd:db:01:f8:08:a3:c8:bd:d7:ed:00:c5:4a:71:2f:d1: 43:81:c8:2a:2a:a9:e9:d0:be:1e:e7:d3:4f:34:47:6b:05:5d: bd:f4:95:b7:3c:37:49:11:0e:76:3d:de:da:7e:b8:17:99:0e: 72:fa:7c:55:f6:fe:8a:3a:55:fd:49:9a:35:bf:5f:a7:5f:d3: 7a:4a:5a:7f:4b:d0:69:e7:d8:0c:c5:db:56:57:e5:cb:94:cb: c5:c3:93:1c:17:00:ae:2f:42:36:27:a5:62:c8:00:cd:05:7c: 76:ae:0a:d0 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUf9l7o4Sn/eguSObkvL2pZGMvUI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj MzY0MzM2ZTAeFw0yNTA0MDYyMDQ5MTRaFw0yNTA0MDcyMTQ1MTRaMDMxMTAvBgNV BAMTKEREQjUzNkY2NzE3QUI1RDkwNzhGMkVDQ0ZCMDBBRDY2NUU5NzY1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOzLDASvj6MFe+MOOrPOrEnzR 90W6ZXp5bc7UqibDhmoftAAz+7mgSpr3F/ot9W3+X1jjXbbgQ8OLlABaqwNOBfBL AwFkwEKsMxFbsr7BBDxGH7lSSBFu4gF3cTCtH+DfNT8YpTvXZbUNnnQ7Yui0RFPS F2n9KlgT2bwqO1XXNlRX1AYyJJOUCRpMFNdGP5nBpyaJ4Uu2TC9AdywK2LcdfvHU dULx5/qeeGeY8x6ZHBpvV0dDbE18MN3TkJ0sMNrg8qxd2vhenyaYGS+dCrlbor6c /MpWoCRpJs+J0ywhbdYhyLJa/EUkjKgxi6KS0lD9xt/p1Tfj27ArzHIxqB1/AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQU3bU29nF6tdkHjy7M+wCtZl6XZWYwHwYDVR0j BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCnWCFlvwzgdgWvLQnishgsjlB30h4fKdTJptu5XbnvJ47+MaBQBnCcoR8z 20mhHJCWqEkBz0H1bFVAK17ysy0wEFVwI1Yuil2BUrAU8PkBx+UMAlLCmcqEn5HY N0QhDo4ZDvUt+T3imwb11iszlDKT3XmtTWFKxmn4xSlcvvTCebKhs8DinNL1zYhk X0WpMf8BBs3bAfgIo8i91+0AxUpxL9FDgcgqKqnp0L4e59NPNEdrBV299JW3PDdJ EQ52Pd7afrgXmQ5y+nxV9v6KOlX9SZo1v1+nX9N6Slp/S9Bp59gMxdtWV+XLlMvF w5McFwCuL0I2J6ViyADNBXx2rgrQ -----END CERTIFICATE-----Generated at Mon Apr 7 09:23:33 2025 by rpki-client