$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: xSeoStLYnLsyCajnF9egAB8wT4FO/g+pgOGeVcco5uI= Subject key identifier: EF:3C:07:51:31:C8:9D:5C:40:66:38:54:18:56:AA:0A:8C:4A:A3:4D Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 679978507AD36A2D03D79E6784F77168CADECE95 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 03E3 Signing time: Wed 01 Jul 2026 10:07:19 +0000 Manifest this update: Wed 01 Jul 2026 10:02:19 +0000 Manifest next update: Thu 02 Jul 2026 13:04:19 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: f5Exw38DUpgFQEpQvV7BJjqto+rtuL18F6S+kbLhc4s=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 23:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:99:78:50:7a:d3:6a:2d:03:d7:9e:67:84:f7:71:68:ca:de:ce:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Jul 1 10:02:19 2026 GMT Not After : Jul 2 13:04:19 2026 GMT Subject: CN=EF3C075131C89D5C406638541856AA0A8C4AA34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:73:84:46:a4:95:31:55:e9:2a:4b:92:18: f0:fc:e5:75:aa:65:e8:9e:28:45:f5:84:cd:ff:c4: de:42:87:0a:5d:d5:f7:ca:c8:d7:5f:65:98:ea:38: fc:06:e2:77:ab:57:ed:e1:cc:e9:c5:d4:cb:1b:41: c2:45:e6:ef:c3:96:d0:33:84:2e:d5:ff:1a:32:af: 08:e5:58:1b:f1:49:1e:7c:94:5a:e8:79:47:ce:1f: 4a:91:83:a4:b5:50:66:bd:15:c9:c5:32:d4:46:75: 02:9d:3f:b8:17:eb:20:5c:fd:4d:80:f9:61:08:5a: 50:1b:0f:7b:f2:ad:1e:4c:21:f8:0b:a2:aa:43:49: 1d:2c:88:44:9b:52:68:b4:81:45:5e:85:0b:d4:73: be:12:18:2b:32:38:c6:57:73:48:68:bb:a9:4f:90: b5:9a:43:2d:84:00:30:e9:d9:9c:77:40:19:e5:37: 63:16:6c:c5:b3:d3:10:89:3e:ad:d4:0f:ad:41:45: 7c:ea:e2:3d:0e:13:d0:0d:b6:6f:f0:5d:5f:df:52: 00:71:cc:1f:7c:31:39:89:a2:50:f1:35:7e:28:f5: 4c:78:d1:a8:c3:fa:25:28:74:96:42:39:86:8b:5c: 89:eb:ac:1e:90:df:c6:73:e1:82:cf:c6:36:c4:53: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3C:07:51:31:C8:9D:5C:40:66:38:54:18:56:AA:0A:8C:4A:A3:4D X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8b:2e:26:32:c0:a9:38:3d:f5:f6:fd:d2:70:78:0b:bf:7c: b5:61:e0:89:78:46:5a:5a:a8:65:78:97:9a:a0:0d:8a:00:f1: 97:3e:e2:18:41:21:5e:c7:3d:5a:9e:a5:e4:df:9c:1e:52:71: 59:73:ec:07:a9:53:ec:11:e8:8c:10:27:89:3e:2f:27:33:eb: 5b:fd:93:18:54:ca:d1:a6:eb:f4:b4:18:46:a3:f8:8d:5d:90: 45:84:b3:07:7b:6d:c3:ca:f1:74:ca:85:28:e3:62:1f:1f:39: 19:18:d7:9f:b0:b7:c4:c5:6e:f8:4a:72:10:eb:58:20:25:d4: ef:9a:db:d5:e3:1b:ff:a6:25:64:6b:41:43:c0:70:9f:f1:69: 25:98:da:5e:c4:5e:bc:1f:6a:fc:be:da:de:82:1c:77:e1:21: 05:54:9f:1d:9f:c1:ea:5a:08:09:d5:94:fb:a5:3e:de:b4:78: 71:38:e1:16:e6:37:43:70:a2:fb:4e:a8:da:ff:bf:4c:74:f5: af:54:53:9d:e6:65:a1:57:84:1e:ef:e9:ad:c8:ce:05:62:af: c2:0c:28:2c:a3:e1:46:68:22:15:66:5e:84:f2:cb:5a:4b:ca: 86:96:3c:92:cf:87:6b:7b:c0:4b:57:1e:94:6c:40:53:71:b5: 74:04:a4:0c -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUZ5l4UHrTai0D155nhPdxaMrezpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNjA3MDExMDAyMTlaFw0yNjA3MDIxMzA0MTlaMDMxMTAvBgNV BAMTKEVGM0MwNzUxMzFDODlENUM0MDY2Mzg1NDE4NTZBQTBBOEM0QUEzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJHOERqSVMVXpKkuSGPD85XWq ZeieKEX1hM3/xN5Chwpd1ffKyNdfZZjqOPwG4nerV+3hzOnF1MsbQcJF5u/DltAz hC7V/xoyrwjlWBvxSR58lFroeUfOH0qRg6S1UGa9FcnFMtRGdQKdP7gX6yBc/U2A +WEIWlAbD3vyrR5MIfgLoqpDSR0siESbUmi0gUVehQvUc74SGCsyOMZXc0hou6lP kLWaQy2EADDp2Zx3QBnlN2MWbMWz0xCJPq3UD61BRXzq4j0OE9ANtm/wXV/fUgBx zB98MTmJolDxNX4o9Ux40ajD+iUodJZCOYaLXInrrB6Q38Zz4YLPxjbEU5tTAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU7zwHUTHInVxAZjhUGFaqCoxKo00wHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAqYsuJjLAqTg99fb90nB4C798tWHgiXhGWlqoZXiXmqANigDxlz7iGEEh Xsc9Wp6l5N+cHlJxWXPsB6lT7BHojBAniT4vJzPrW/2TGFTK0abr9LQYRqP4jV2Q RYSzB3ttw8rxdMqFKONiHx85GRjXn7C3xMVu+EpyEOtYICXU75rb1eMb/6YlZGtB Q8Bwn/FpJZjaXsRevB9q/L7a3oIcd+EhBVSfHZ/B6loICdWU+6U+3rR4cTjhFuY3 Q3Ci+06o2v+/THT1r1RTneZloVeEHu/prcjOBWKvwgwoLKPhRmgiFWZehPLLWkvK hpY8ks+Ha3vAS1celGxAU3G1dASkDA== -----END CERTIFICATE-----Generated at Wed Jul 1 12:42:47 2026 by rpki-client