Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          nFm/o0yXKi9bIylmPTr4wXF3WjEivtoHSos37ev02lk=
Subject key identifier:   8E:56:C2:32:42:CD:81:F4:E0:96:5C:C5:94:19:32:79:C3:77:03:03
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       4ADA2ED0B59C87355DE673F28A9C496E16DC47BD
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          03A5
Signing time:             Fri 15 May 2026 12:51:59 +0000
Manifest this update:     Fri 15 May 2026 12:46:59 +0000
Manifest next update:     Sat 16 May 2026 13:18:59 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: OL9fBFYmNsZb7nVoJvGQqZa+5hKOtFCPqGJsBlrEQE4=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 13:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:da:2e:d0:b5:9c:87:35:5d:e6:73:f2:8a:9c:49:6e:16:dc:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: May 15 12:46:59 2026 GMT
            Not After : May 16 13:18:59 2026 GMT
        Subject: CN=8E56C23242CD81F4E0965CC594193279C3770303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:4d:6e:ff:f6:84:ef:a4:0d:3c:79:29:50:
                    6f:50:bd:d2:8c:90:7f:a6:0a:39:b2:7c:63:59:2f:
                    a0:39:e1:21:4f:06:6e:f2:25:d9:61:9a:fc:3d:46:
                    71:f3:73:4b:fa:db:58:a3:7a:e3:f9:f2:cc:21:92:
                    ef:32:e1:8f:f9:4c:be:c1:9a:50:13:ac:23:91:32:
                    86:36:1a:84:07:8b:ed:bf:1f:63:9b:58:c4:27:70:
                    50:cc:79:b3:c6:93:b1:5f:9f:b8:5d:eb:19:1c:a3:
                    a9:9d:e3:e4:b5:0f:95:41:ac:12:13:6b:d0:5d:db:
                    c3:e2:ff:01:38:06:f1:a4:06:89:9d:fc:16:2d:98:
                    29:9c:5f:55:18:61:7b:1c:43:16:a0:77:12:45:45:
                    a7:e7:9a:e4:6b:41:23:b7:aa:f4:21:67:5e:05:69:
                    91:2e:99:cd:49:11:10:d6:14:fd:88:cf:00:18:49:
                    87:49:77:ca:2c:cf:de:37:f3:9d:b4:a6:af:67:aa:
                    65:04:91:16:64:83:d3:5b:e0:c8:f6:ab:06:4a:fa:
                    55:19:1b:7d:12:14:1e:86:35:00:b3:62:74:06:ae:
                    2f:92:25:40:a1:c2:7e:1d:12:6d:4f:c6:f7:b0:f1:
                    e1:fd:c4:06:c0:10:c5:1d:5d:06:39:5d:e6:32:1d:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:C2:32:42:CD:81:F4:E0:96:5C:C5:94:19:32:79:C3:77:03:03
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:da:65:71:c1:53:35:b4:5e:c5:50:31:2b:da:6d:c6:5c:94:
         83:89:31:f2:da:36:e3:41:fc:0d:c5:39:ca:ff:5c:7f:8c:89:
         0f:15:51:25:e0:a3:d9:f0:f3:fa:4e:4d:18:7c:51:70:6e:6b:
         11:6f:a2:bf:af:13:cf:94:31:1d:07:9b:85:39:f9:87:29:4c:
         c8:70:21:1f:64:b4:c1:88:f7:ee:76:69:af:3d:00:f0:7f:69:
         fc:a3:91:49:be:a3:2e:2b:f2:2c:b0:b1:4a:fc:68:d9:79:a8:
         a5:fb:95:d4:12:97:5e:59:7e:5f:66:73:61:22:7d:53:ae:fe:
         97:cd:0e:53:bc:da:f6:dc:f5:3c:08:31:c9:1c:76:38:fd:e5:
         1c:4c:c0:91:7f:2b:39:b3:e3:63:1d:38:90:d0:08:1c:8b:cf:
         bf:42:02:dd:96:d9:dd:92:ba:68:ff:42:6c:93:61:ab:13:e6:
         15:36:32:f8:43:1d:41:77:59:92:c3:61:1d:eb:c9:c0:dd:20:
         73:16:45:3f:4d:e6:cb:33:f8:e8:0e:36:9d:9b:f6:67:c2:79:
         75:f0:f7:79:dd:8a:d2:d7:5f:00:9a:75:c9:ae:76:19:49:ae:
         85:e8:2e:61:39:f9:09:ac:3d:71:fa:1f:41:29:3e:74:2f:2a:
         df:2d:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 22:48:59 2026 by rpki-client