$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: EZuvrRzwEFgpwTK9q9EvEs6z1H7B5HaG/vTBfHNoXKs= Subject key identifier: 79:33:05:49:48:A3:58:F8:0F:FE:C2:B7:04:E3:E8:23:68:AD:2C:C0 Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 4A1CCFE43D4FAAB457AAEBF564EB7D405CF924F2 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 0366 Signing time: Sun 29 Mar 2026 04:41:40 +0000 Manifest this update: Sun 29 Mar 2026 04:36:40 +0000 Manifest next update: Mon 30 Mar 2026 08:04:40 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: spxvTTH5SHyb/eTJQ2sNsqYCongtLTPmARBRb0pusak=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 08:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1c:cf:e4:3d:4f:aa:b4:57:aa:eb:f5:64:eb:7d:40:5c:f9:24:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Mar 29 04:36:40 2026 GMT Not After : Mar 30 08:04:40 2026 GMT Subject: CN=7933054948A358F80FFEC2B704E3E82368AD2CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:f1:f0:ac:2b:f5:6d:c1:8b:f0:26:23:ec: c9:e3:be:f0:4c:9f:02:67:a0:e8:42:5a:ad:80:b0: 25:c1:b7:85:c6:27:f7:45:3f:4e:0f:21:7e:12:ea: f7:f3:b6:8f:64:0b:33:ec:f5:24:22:2b:2b:3e:f7: 27:90:fe:6e:01:df:bd:8e:de:5a:13:44:53:8b:33: 4a:0e:e6:d6:e9:5f:7a:2d:39:47:7d:76:0e:21:0b: de:5a:2b:d9:42:02:54:b7:3d:38:77:38:ce:47:ee: d6:50:e2:24:cf:38:99:5d:0c:24:1c:fa:3e:31:f7: 02:91:2c:f4:ba:8e:5c:78:26:34:72:9b:78:ca:6d: 25:06:c9:43:8a:94:91:d0:2c:b9:91:3f:d7:dd:ce: f6:2a:6f:f8:eb:35:f3:6d:b7:1f:d6:2c:ba:24:b9: 62:a7:63:2b:b0:3f:5a:8e:2e:e9:2b:6b:c7:aa:79: 65:9d:a7:b9:9c:06:4c:cc:d2:4d:66:8d:34:15:d7: 07:d9:4c:94:d9:6c:ca:4a:31:f4:8c:42:58:9d:20: d9:7f:8a:a3:9d:4c:83:6b:67:c2:e1:7a:1c:91:01: 70:77:d0:d3:9b:78:5b:76:8b:d0:59:24:15:f2:18: e2:21:57:d5:8c:2b:12:2d:da:33:44:3a:e3:09:12: 90:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:05:49:48:A3:58:F8:0F:FE:C2:B7:04:E3:E8:23:68:AD:2C:C0 X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:59:cd:39:65:6b:75:bf:8f:c6:62:81:d7:68:90:9d:ac:e1: 64:41:51:5e:e9:65:fc:76:a8:fd:20:24:b1:98:67:ae:35:9a: 55:86:84:de:3f:e0:83:1b:0c:c5:da:ab:9f:0e:af:d8:2b:79: 21:9b:94:57:a7:ea:85:dc:81:fb:18:6a:2b:8c:e4:af:6d:d5: fd:c0:0a:89:a7:c1:d6:6a:b7:a5:a3:7c:3d:56:4c:d0:f6:19: 10:d7:03:e1:e4:4d:8e:19:99:f5:bc:19:c5:72:41:80:47:3e: f4:63:22:ff:9a:d1:e4:a6:91:91:32:a1:12:65:47:24:f0:06: 7c:72:3c:26:ff:90:92:d0:2e:2c:e4:9e:6e:cd:e2:8c:00:07: be:07:23:bc:ad:26:c0:a2:95:fa:aa:6f:71:35:c2:1f:5d:de: af:f7:5a:d5:2f:30:6b:d6:48:96:c6:af:e1:e5:9b:42:0e:45: f2:4f:5c:47:23:81:e3:d1:d6:2f:4c:68:fc:4d:91:8a:34:77: 9f:f4:4e:e3:b3:f2:e6:30:67:75:35:de:d2:ae:fc:57:f7:45: 22:6b:23:7f:c7:55:aa:f0:d6:9c:1a:a7:da:be:00:26:93:6f: dc:3d:0e:80:12:c9:d7:7c:2c:b8:bb:54:7a:e1:19:d0:b5:3d: 02:85:21:85 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUShzP5D1PqrRXquv1ZOt9QFz5JPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNjAzMjkwNDM2NDBaFw0yNjAzMzAwODA0NDBaMDMxMTAvBgNV BAMTKDc5MzMwNTQ5NDhBMzU4RjgwRkZFQzJCNzA0RTNFODIzNjhBRDJDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdn/HwrCv1bcGL8CYj7MnjvvBM nwJnoOhCWq2AsCXBt4XGJ/dFP04PIX4S6vfzto9kCzPs9SQiKys+9yeQ/m4B372O 3loTRFOLM0oO5tbpX3otOUd9dg4hC95aK9lCAlS3PTh3OM5H7tZQ4iTPOJldDCQc +j4x9wKRLPS6jlx4JjRym3jKbSUGyUOKlJHQLLmRP9fdzvYqb/jrNfNttx/WLLok uWKnYyuwP1qOLukra8eqeWWdp7mcBkzM0k1mjTQV1wfZTJTZbMpKMfSMQlidINl/ iqOdTINrZ8LhehyRAXB30NObeFt2i9BZJBXyGOIhV9WMKxIt2jNEOuMJEpB3AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUeTMFSUijWPgP/sK3BOPoI2itLMAwHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAvFnNOWVrdb+PxmKB12iQnazhZEFRXull/Hao/SAksZhnrjWaVYaE3j/g gxsMxdqrnw6v2Ct5IZuUV6fqhdyB+xhqK4zkr23V/cAKiafB1mq3paN8PVZM0PYZ ENcD4eRNjhmZ9bwZxXJBgEc+9GMi/5rR5KaRkTKhEmVHJPAGfHI8Jv+QktAuLOSe bs3ijAAHvgcjvK0mwKKV+qpvcTXCH13er/da1S8wa9ZIlsav4eWbQg5F8k9cRyOB 49HWL0xo/E2RijR3n/RO47Py5jBndTXe0q78V/dFImsjf8dVqvDWnBqn2r4AJpNv 3D0OgBLJ13wsuLtUeuEZ0LU9AoUhhQ== -----END CERTIFICATE-----Generated at Sun Mar 29 19:24:44 2026 by rpki-client