$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft File: 7ACA2B768DEF8BB9544468ED5F726256C364336E.mft (raw, json) Hash identifier: NpuihefT+fS+s+SOOovLjX4XzMMo3P4A7DxwL279E0A= Subject key identifier: 50:E7:47:49:CE:94:9A:7F:31:AD:27:5D:2A:6C:A6:31:F0:91:32:C5 Authority key identifier: 7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E Certificate issuer: /CN=7aca2b768def8bb9544468ed5f726256c364336e Certificate serial: 3EA436B2CD60D7CE08CE1373A0F3284F7C275044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft Manifest number: 01E0 Signing time: Mon 02 Jun 2025 09:00:27 +0000 Manifest this update: Mon 02 Jun 2025 08:55:27 +0000 Manifest next update: Tue 03 Jun 2025 11:37:27 +0000 Files and hashes: 1: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: ckMcxXPiF8vlvTJRQQIsDxcEVQLOX0RuZe7KgLtHzqI=) 2: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: KjBpGCjhgcgzyMWLAwsBFjFxOErpP8CS58MUX0jm8U8=) 3: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: ruXTtDqCFR6FeRYnsf8ZXUqkN0R5+iLLKkgHPFNoB3A=) 4: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: 8O1tIAno00Fq3J11voTy+bZ9nLQmODTuv88Ar+OUiVs=) 5: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: oZe7kx0dptbnk/pk09tmwpUTyeKrXYcrC32dA/P40Gk=) 6: 7ACA2B768DEF8BB9544468ED5F726256C364336E.crl (hash: nHK6vRMpxbE+nSWPBNeAQ0xoLyhF0Li9ZL4Qd3/iDU8=) 7: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: wZqhyYMlFnMxPXGy2swOtIb6clVA4BnPUsg46ZKHyzg=) 8: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: Yzc/4D7Q3iiVMpceJ0SReQghPqerbs5PTmpM0kDQva4=) 9: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: iewdWSe6JDqXZwV+5rxPgHXeqvYSAY33S3waDnF6QEI=) 10: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: 6Vd3A68tlmMtxQej2vYw2TTJoQXEgyQe+0Uw9Nd1As0=) 11: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: 0X6DHgcvAIZhL1S7iWw9n32W1I2GuZJRkhwdRW/ZvsA=) 12: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: 3NgMpZV5LRLe09p3vkec7ImeUr6zl+R4GEX1WforxJc=) 13: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: 5N/Wd0YuxRMcEUpk/fmXDUj02n81dTqVqyb1T4P+ixA=) 14: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: PyYnfMwZZjBynv89/LlY/K0aQ9UlxMYoLmzx/yfbs2w=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 11:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a4:36:b2:cd:60:d7:ce:08:ce:13:73:a0:f3:28:4f:7c:27:50:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aca2b768def8bb9544468ed5f726256c364336e Validity Not Before: Jun 2 08:55:27 2025 GMT Not After : Jun 3 11:37:27 2025 GMT Subject: CN=50E74749CE949A7F31AD275D2A6CA631F09132C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:3a:62:84:d9:b8:d8:38:66:28:ba:6e:b0: 90:f9:e0:f2:96:34:78:8b:2b:ad:ec:77:b4:51:a3: b5:74:93:ba:0c:95:fc:b1:57:d8:a7:f5:62:0d:d4: f4:91:c2:9c:59:98:8e:7b:f0:f0:6b:9f:2d:3b:38: 25:77:85:79:ad:76:09:bc:b3:86:30:c4:f7:fd:f3: 37:78:ee:97:fc:9f:6c:a6:aa:67:76:67:70:5b:e2: 95:c0:2c:3a:aa:cb:ab:d0:62:bb:45:85:5a:fb:d3: b2:e8:34:b3:6c:c3:9c:a1:2f:42:fc:5b:d8:68:36: d5:99:f8:22:f4:d7:0a:2b:dd:06:ff:54:2c:ce:5b: c9:76:a9:ac:53:77:43:46:e0:f9:27:ea:c6:dc:ef: 45:25:07:da:7e:01:70:9a:9f:a0:e1:6d:fd:23:84: ee:de:f7:6a:3d:70:9b:74:07:08:1b:6d:59:a4:14: 18:3e:36:d2:8b:28:de:d1:a2:0f:8e:ad:26:b5:6c: e7:b8:ac:42:33:bd:7a:62:4b:df:21:35:d8:74:49: 8f:62:6b:4e:63:77:70:d9:ec:e3:ba:d9:7a:16:63: 6a:b3:8a:a8:02:a0:78:57:3f:5f:48:f0:7d:38:57: 14:68:6e:0f:c5:9c:32:73:3b:f0:1e:12:06:6f:d6: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E7:47:49:CE:94:9A:7F:31:AD:27:5D:2A:6C:A6:31:F0:91:32:C5 X509v3 Authority Key Identifier: keyid:7A:CA:2B:76:8D:EF:8B:B9:54:44:68:ED:5F:72:62:56:C3:64:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:24:d7:88:7e:e4:a2:1d:b2:d9:1d:2f:04:c2:bd:be:3a:73: 79:bf:34:97:ef:15:02:ee:c4:79:16:b4:78:d5:8f:90:7d:b8: 01:11:c2:91:fd:2d:06:5a:6e:7d:a0:bf:97:6f:17:b6:59:91: 18:07:5b:89:1c:ea:d8:77:77:8c:ca:7a:50:31:e3:c3:81:9d: f5:d7:df:65:3f:47:d6:f3:83:d5:4d:6f:3a:1a:ff:23:ba:99: a8:3a:71:da:c2:3f:a8:fc:ee:de:7a:64:82:59:0d:1d:01:3f: c7:1c:be:4f:23:0e:21:4c:3c:47:2d:7d:0a:e9:46:0e:82:36: 9f:ff:7b:4c:4c:81:76:23:9d:5a:50:55:68:00:4f:f3:b7:0b: e2:0b:e9:9a:53:ca:19:e4:f2:95:2b:7d:ab:f3:f2:49:1a:5d: e4:8a:97:b7:ef:7c:af:e9:6f:36:32:53:06:24:f2:3b:11:77: 48:16:32:53:7f:73:4a:96:ba:e8:07:18:e1:77:06:e8:ea:d4: 11:31:df:dc:32:ef:10:30:84:d9:a3:e5:98:24:af:3c:96:bd: f1:5a:8e:63:f0:e7:56:7f:31:5d:76:bb:4e:72:24:3b:b9:f1: 33:c6:e1:51:f7:a2:b9:6d:b4:83:e6:cc:03:7c:92:e4:94:11: 5c:a8:d8:76 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUPqQ2ss1g184IzhNzoPMoT3wnUEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FjYTJiNzY4ZGVmOGJiOTU0NDQ2OGVkNWY3MjYyNTZj MzY0MzM2ZTAeFw0yNTA2MDIwODU1MjdaFw0yNTA2MDMxMTM3MjdaMDMxMTAvBgNV BAMTKDUwRTc0NzQ5Q0U5NDlBN0YzMUFEMjc1RDJBNkNBNjMxRjA5MTMyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7TpihNm42DhmKLpusJD54PKW NHiLK63sd7RRo7V0k7oMlfyxV9in9WIN1PSRwpxZmI578PBrny07OCV3hXmtdgm8 s4YwxPf98zd47pf8n2ymqmd2Z3Bb4pXALDqqy6vQYrtFhVr707LoNLNsw5yhL0L8 W9hoNtWZ+CL01wor3Qb/VCzOW8l2qaxTd0NG4Pkn6sbc70UlB9p+AXCan6Dhbf0j hO7e92o9cJt0BwgbbVmkFBg+NtKLKN7Rog+OrSa1bOe4rEIzvXpiS98hNdh0SY9i a05jd3DZ7OO62XoWY2qziqgCoHhXP19I8H04VxRobg/FnDJzO/AeEgZv1qONAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUUOdHSc6Umn8xrSddKmymMfCRMsUwHwYDVR0j BBgwFoAUesordo3vi7lURGjtX3JiVsNkM24wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvN0FDQTJCNzY4REVGOEJCOTU0NDQ2OEVENUY3MjYyNTZD MzY0MzM2RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vzb3JkbzN2aTdsVVJH anRYM0ppVnNOa00yNC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x LzdBQ0EyQjc2OERFRjhCQjk1NDQ0NjhFRDVGNzI2MjU2QzM2NDMzNkUubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAhJNeIfuSiHbLZHS8Ewr2+OnN5vzSX7xUC7sR5FrR41Y+QfbgBEcKR/S0G Wm59oL+Xbxe2WZEYB1uJHOrYd3eMynpQMePDgZ31199lP0fW84PVTW86Gv8jupmo OnHawj+o/O7eemSCWQ0dAT/HHL5PIw4hTDxHLX0K6UYOgjaf/3tMTIF2I51aUFVo AE/ztwviC+maU8oZ5PKVK32r8/JJGl3kipe373yv6W82MlMGJPI7EXdIFjJTf3NK lrroBxjhdwbo6tQRMd/cMu8QMITZo+WYJK88lr3xWo5j8OdWfzFddrtOciQ7ufEz xuFR96K5bbSD5swDfJLklBFcqNh2 -----END CERTIFICATE-----Generated at Mon Jun 2 16:25:10 2025 by rpki-client