$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: pWTPACOQHtzFi1+dpAaIa0nbzaUDnKjLYS8ilQrASAk= Subject key identifier: 1E:6F:29:BB:F9:E4:E2:6B:57:9A:00:84:09:DA:1D:CE:9C:0F:6F:EE Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 6BA1FE5E2B7BA05A1766A3CE8ABD4D208BBB9EC1 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 029B Signing time: Tue 28 Oct 2025 08:04:46 +0000 Manifest this update: Tue 28 Oct 2025 07:59:46 +0000 Manifest next update: Wed 29 Oct 2025 09:50:46 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: buKmSMgDOmdRHcI6m9YaDV6QwyUXuexRF17WBxcPDUs=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 09:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a1:fe:5e:2b:7b:a0:5a:17:66:a3:ce:8a:bd:4d:20:8b:bb:9e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Oct 28 07:59:46 2025 GMT Not After : Oct 29 09:50:46 2025 GMT Subject: CN=1E6F29BBF9E4E26B579A008409DA1DCE9C0F6FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:cb:b2:e8:6f:f8:b9:f1:4e:eb:f6:d3:b9: 6e:6d:a8:e6:3f:d1:d2:15:b0:bc:5c:bc:ce:cd:35: fb:be:e6:9d:0c:57:d7:98:f4:bc:3c:de:19:33:40: ee:bf:bd:ce:89:20:f9:bf:da:d3:f4:d5:cb:24:53: 75:15:c7:43:80:4a:50:41:a6:29:88:87:87:80:30: 2b:c8:ef:4b:a6:39:98:cc:9c:ed:b5:43:ff:ee:47: 3a:89:8c:81:64:1c:83:be:f0:ff:df:65:91:2a:d0: 35:26:d9:d7:8d:25:ee:98:18:51:70:5a:c8:f2:19: de:6f:e7:0d:03:32:b0:2f:31:2b:48:64:3b:de:ef: 71:cf:3f:72:3d:f3:2d:ac:86:f6:4e:60:41:f5:72: 29:e9:60:20:1a:ae:a6:5d:71:23:40:6c:c3:43:82: 53:b9:39:8b:47:d5:70:02:bf:2b:41:fe:ac:3e:66: df:57:27:4d:bb:b2:c2:a4:a5:44:aa:72:06:fa:85: 5e:7f:0a:a5:24:eb:40:ed:1d:4a:f3:1c:95:43:b7: c5:d4:e7:bd:89:0f:27:51:5b:ee:58:6c:b4:53:8e: 50:96:4d:c3:10:bb:38:27:9a:1a:2c:1b:6e:f3:45: 5b:34:94:ba:06:9d:63:7d:0a:b7:3f:f9:4c:b4:05: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:29:BB:F9:E4:E2:6B:57:9A:00:84:09:DA:1D:CE:9C:0F:6F:EE X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:80:54:c7:2e:ff:68:c8:f6:b4:28:90:f3:3e:b5:fd:ca:73: 5f:62:b3:1e:62:49:64:56:a0:54:55:c7:a2:9e:33:07:6c:cd: 95:84:c8:c2:2e:98:47:85:93:77:57:1a:99:1e:75:3d:5f:58: 84:c4:96:30:3e:98:d8:0d:76:83:b4:46:cb:dc:16:a0:24:8f: 00:49:49:86:0b:24:46:33:5e:30:87:57:30:75:75:e7:dc:29: 32:64:7c:e0:4a:8b:45:6a:be:2d:58:45:36:48:e5:93:78:4e: 3a:b4:25:8e:1d:4d:b7:49:bb:c1:f4:ff:76:b0:fc:76:5d:e7: 39:aa:fa:ce:20:28:f6:b8:85:86:1b:54:6d:b3:12:ee:26:7e: e0:b1:50:f8:b7:ef:12:f0:0f:29:2a:ec:64:dd:33:36:d7:3d: 31:3a:aa:48:f8:bc:f5:96:f3:6a:ac:e5:8c:fc:16:69:bc:93: 58:22:db:bf:0c:6a:e8:d1:c2:38:6a:34:f8:aa:72:7f:82:53: 7c:84:56:3d:a4:59:65:af:7c:af:9c:0f:b8:ff:61:41:bb:a4: e2:1b:13:68:cc:96:31:32:c0:fe:d7:d8:9e:e2:d7:c8:8c:ec: 20:c5:0c:27:77:b7:69:a8:a6:d3:b3:55:33:0c:23:ef:d4:eb: c6:64:7e:37 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUa6H+Xit7oFoXZqPOir1NIIu7nsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNTEwMjgwNzU5NDZaFw0yNTEwMjkwOTUwNDZaMDMxMTAvBgNV BAMTKDFFNkYyOUJCRjlFNEUyNkI1NzlBMDA4NDA5REExRENFOUMwRjZGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRMuy6G/4ufFO6/bTuW5tqOY/ 0dIVsLxcvM7NNfu+5p0MV9eY9Lw83hkzQO6/vc6JIPm/2tP01cskU3UVx0OASlBB pimIh4eAMCvI70umOZjMnO21Q//uRzqJjIFkHIO+8P/fZZEq0DUm2deNJe6YGFFw WsjyGd5v5w0DMrAvMStIZDve73HPP3I98y2shvZOYEH1cinpYCAarqZdcSNAbMND glO5OYtH1XACvytB/qw+Zt9XJ027ssKkpUSqcgb6hV5/CqUk60DtHUrzHJVDt8XU 572JDydRW+5YbLRTjlCWTcMQuzgnmhosG27zRVs0lLoGnWN9Crc/+Uy0BcqxAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUHm8pu/nk4mtXmgCECdodzpwPb+4wHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEA2oBUxy7/aMj2tCiQ8z61/cpzX2KzHmJJZFagVFXHop4zB2zNlYTIwi6Y R4WTd1camR51PV9YhMSWMD6Y2A12g7RGy9wWoCSPAElJhgskRjNeMIdXMHV159wp MmR84EqLRWq+LVhFNkjlk3hOOrQljh1Nt0m7wfT/drD8dl3nOar6ziAo9riFhhtU bbMS7iZ+4LFQ+LfvEvAPKSrsZN0zNtc9MTqqSPi89ZbzaqzljPwWabyTWCLbvwxq 6NHCOGo0+Kpyf4JTfIRWPaRZZa98r5wPuP9hQbuk4hsTaMyWMTLA/tfYnuLXyIzs IMUMJ3e3aaim07NVMwwj79TrxmR+Nw== -----END CERTIFICATE-----Generated at Tue Oct 28 23:06:42 2025 by rpki-client