Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          DW11Vzyl/SYIvK8ctIPMuq4N38P+TJEQpd0qTHPT+M0=
Subject key identifier:   8F:16:F2:90:11:78:D1:A3:C0:78:3C:99:F9:FF:17:F7:D1:F9:84:09
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       282BE04E8905ED77373B89D1CE54749C80FF3FEE
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          041F
Signing time:             Sat 15 Aug 2026 19:17:33 +0000
Manifest this update:     Sat 15 Aug 2026 19:12:33 +0000
Manifest next update:     Sun 16 Aug 2026 20:41:33 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: ZGH9qaBgT6mpYco1GmMVRdD+kFsPyYzIkm3LjKfO4FE=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2b:e0:4e:89:05:ed:77:37:3b:89:d1:ce:54:74:9c:80:ff:3f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Aug 15 19:12:33 2026 GMT
            Not After : Aug 16 20:41:33 2026 GMT
        Subject: CN=8F16F2901178D1A3C0783C99F9FF17F7D1F98409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:0f:64:f2:68:83:5c:8e:0c:0e:be:55:8c:
                    d4:6d:02:31:4a:5c:1d:10:7f:1d:3c:ea:44:cd:fa:
                    d3:64:2a:d4:cd:fc:a4:45:c5:29:60:83:f0:8f:88:
                    ba:19:d0:89:25:c7:82:8c:06:7c:19:ad:8e:85:ce:
                    c4:a0:28:5e:17:a0:48:ea:ee:10:d5:92:02:50:52:
                    82:47:c8:d7:2b:d0:9c:cd:15:2e:84:d7:74:6f:51:
                    89:05:12:a3:36:4d:bd:80:a5:d9:76:e6:ef:96:f1:
                    17:49:cf:e6:1a:2d:bd:24:b6:d9:12:1d:bf:11:57:
                    83:a6:aa:ab:22:25:c0:33:e6:7a:b2:d2:9a:4c:e8:
                    17:67:27:34:2a:1e:ee:f6:f5:c1:51:c0:ca:f8:c1:
                    85:b7:c1:b9:db:ed:00:ba:bb:20:09:42:74:65:51:
                    60:e7:05:1a:d8:bf:af:9a:52:1d:0e:63:1a:07:c4:
                    82:18:b2:ab:58:7d:81:fb:fd:ca:56:ad:e5:6d:37:
                    81:17:6a:b9:bc:59:ee:98:b1:ba:51:f4:b6:d4:0c:
                    ae:e0:e3:61:87:57:ac:d1:2a:d7:7d:40:5f:53:04:
                    5f:4b:85:50:34:a1:61:37:aa:05:d1:90:a0:3b:bd:
                    27:6a:83:af:ac:2d:b5:1e:de:20:85:ec:a0:b5:b1:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:F2:90:11:78:D1:A3:C0:78:3C:99:F9:FF:17:F7:D1:F9:84:09
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:38:98:da:b1:54:9b:76:4c:34:b7:df:3c:83:45:39:1a:
         84:ca:36:4f:66:1e:17:62:c0:32:56:63:4a:93:a7:1a:55:fc:
         2f:4b:47:04:a6:27:47:70:f4:88:f5:f0:5e:c4:29:c0:ff:27:
         8b:e3:2b:ed:8b:64:9e:6d:48:42:31:7e:6b:4e:32:ef:16:7f:
         4b:6e:f0:26:6f:aa:0c:d2:2e:bc:b8:ff:90:fd:3e:c5:da:d0:
         16:de:9d:dd:15:5f:cf:62:16:fc:2e:99:3c:1f:08:a9:22:4d:
         4e:4c:38:77:47:01:87:ca:1c:70:c4:b5:37:b1:40:56:08:3e:
         b2:14:2d:e4:ae:ce:47:b3:c7:89:11:52:6d:84:9c:c7:b5:3a:
         ff:49:1a:7f:00:36:fa:1f:be:59:4e:d5:2a:9d:64:fc:e0:29:
         39:5d:32:3e:ad:df:70:4b:25:c2:ad:a6:07:6c:d8:f5:bc:f9:
         d0:63:4b:28:b5:d7:63:81:1a:02:f2:32:ec:98:54:d7:72:5e:
         ba:d8:51:38:58:06:4d:a8:61:1a:30:ea:69:f4:50:ea:86:9e:
         ae:ac:7d:02:07:13:c8:d8:3a:9e:bd:69:c2:e8:af:c7:23:fb:
         10:12:68:9d:95:a2:6e:a9:d0:cb:bc:07:ad:08:b6:11:76:14:
         26:2d:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 23:34:18 2026 by rpki-client