Manifest

$ rpki-client -vvvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          N9C0A83FN6I9elmfLoJ+DKEy79n4N7nB9rROgCiIZo4=
Subject key identifier:   AE:1C:6A:98:AA:3D:9A:24:B7:C7:A0:F1:C5:8C:15:66:69:81:42:5B
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       4DE7E5C9116981C8BCB591165DAC1289D8512FAC
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          0467
Signing time:             Fri 09 Oct 2026 03:52:57 +0000
Manifest this update:     Fri 09 Oct 2026 03:47:57 +0000
Manifest next update:     Sat 10 Oct 2026 04:25:57 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: ei2AeRZmSFt6vv5tll+PSCGx7rh+4oXvNsAj/xNrffM=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:e5:c9:11:69:81:c8:bc:b5:91:16:5d:ac:12:89:d8:51:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Oct  9 03:47:57 2026 GMT
            Not After : Oct 10 04:25:57 2026 GMT
        Subject: CN=AE1C6A98AA3D9A24B7C7A0F1C58C15666981425B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:2a:e1:e8:a9:54:43:43:ee:b0:d5:fd:8d:
                    d5:e3:3e:a0:5c:00:c7:a1:45:1f:e8:bd:ee:ab:ab:
                    65:9a:0d:b0:08:e1:12:21:54:52:6e:3b:c2:48:98:
                    52:2a:0b:29:c6:ac:27:2a:8a:3d:7c:d6:9a:bf:bb:
                    ef:bf:98:c9:2d:61:13:ad:29:22:ab:c9:6b:3b:79:
                    7e:df:da:8e:12:73:50:ef:cf:3c:49:bd:8b:d1:7e:
                    f8:04:ac:76:ea:6c:de:04:3c:7e:98:bc:9f:bc:4c:
                    2c:ba:3c:cf:63:d5:c1:51:fa:c1:43:a1:1c:37:10:
                    ca:b2:59:70:2a:31:7d:b6:82:30:a6:53:eb:0f:2b:
                    34:f9:f4:16:e2:4d:50:75:60:36:e6:30:b4:5b:67:
                    60:b0:b1:12:49:74:cf:bc:10:65:3a:c8:24:41:af:
                    fc:17:eb:c1:e1:ef:2b:8e:e9:c2:fa:01:53:14:9a:
                    cb:a9:ab:95:97:34:a6:bd:81:ae:3c:5d:e4:d1:c8:
                    97:b6:ae:ff:4b:30:eb:a5:9d:75:77:71:90:01:fe:
                    00:3f:fc:a2:24:ed:4f:0e:58:8d:f2:7e:ed:01:d7:
                    2e:13:45:76:30:e8:90:52:03:40:5a:3d:56:5b:0d:
                    68:c2:60:b7:34:e1:c3:cd:18:0a:cd:85:b3:4d:44:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1C:6A:98:AA:3D:9A:24:B7:C7:A0:F1:C5:8C:15:66:69:81:42:5B
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:b8:5e:26:94:1b:72:7a:1c:a0:1e:90:0d:3d:ff:99:a1:
         2d:66:a0:02:1f:5e:2b:09:07:17:98:6f:fa:ed:8a:62:17:c1:
         31:4c:97:fb:e5:e3:8c:03:32:00:30:28:1a:85:86:b9:a6:08:
         78:fc:45:a3:be:c4:3d:f6:9e:6b:31:8f:bd:93:71:e3:a8:3c:
         d7:89:a1:0f:cf:2a:e6:09:71:ff:ae:77:31:3c:96:07:ed:c5:
         cf:1a:96:56:ed:b9:0b:54:a1:d3:03:ac:a7:6f:ed:d7:fe:fc:
         74:7a:a4:9f:18:d1:d6:30:00:f5:f0:a7:78:ea:09:41:ea:ee:
         27:7e:6c:f9:42:2e:83:bf:b6:8e:d2:62:33:1b:ee:6a:1b:55:
         21:7e:6d:d2:01:af:e6:d7:da:77:8d:15:bc:4c:5f:e0:9f:72:
         b1:2a:fe:85:de:ff:03:a2:bb:cf:ef:93:b8:ec:19:fd:52:18:
         bb:80:ed:31:8f:4e:8d:63:ac:d9:cc:da:c6:ad:5d:2b:d1:7a:
         06:56:a4:ef:ab:7a:08:8a:bb:8b:5d:68:a0:0d:08:d9:5a:49:
         fb:24:cd:6a:1b:5a:b7:f7:72:b2:4b:5a:e0:a1:b9:ae:ae:fa:
         f2:47:b9:22:ca:d0:be:6d:3e:c2:76:82:86:06:05:db:ec:4b:
         9b:e5:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:47:14 2026 by rpki-client