Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          9TGCX4b6DZwaoRHDtge7ITpgmTA+zPKCIT5izUDMso4=
Subject key identifier:   73:82:88:73:51:AD:47:39:16:50:CA:5C:04:49:DA:0C:5D:00:3B:CE
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       031DA11619A0E6D7DEA849A4C3F0AA7426EAC39B
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          03A1
Signing time:             Tue 12 May 2026 13:46:58 +0000
Manifest this update:     Tue 12 May 2026 13:41:58 +0000
Manifest next update:     Wed 13 May 2026 16:14:58 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: Ze1gkcsShF93PZUjpdI+wPZkZBrvXjVrSD1a+/Mt5yQ=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1d:a1:16:19:a0:e6:d7:de:a8:49:a4:c3:f0:aa:74:26:ea:c3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: May 12 13:41:58 2026 GMT
            Not After : May 13 16:14:58 2026 GMT
        Subject: CN=7382887351AD47391650CA5C0449DA0C5D003BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:2c:28:6c:39:6c:d4:e3:8e:c2:3d:f0:a8:
                    95:cb:c1:b9:0c:36:6a:06:5a:80:dd:83:0f:63:7e:
                    1d:73:1c:90:e2:a7:d2:4b:58:cf:3c:b4:74:c8:bb:
                    2d:fc:a9:2f:9a:ce:a8:78:88:18:21:f6:8f:0b:13:
                    b0:67:84:14:22:46:48:bc:0f:0c:81:cd:1a:51:f5:
                    43:18:6e:6b:ea:b5:54:d9:0d:1b:29:19:94:86:a7:
                    50:fe:4f:07:05:26:06:c1:3c:b1:a2:80:44:b6:88:
                    e2:38:ca:82:e7:45:95:6e:35:b3:bb:26:f3:44:fb:
                    a7:13:8b:31:c5:74:a9:d2:c0:46:47:d2:a9:99:6b:
                    4c:33:fe:35:74:f5:66:ce:8c:5e:fd:ef:6f:d3:19:
                    b7:f2:20:13:52:fc:cf:1e:3a:ad:01:61:b5:d0:6b:
                    f6:35:b3:83:b5:0b:2e:ad:8f:7b:3a:6e:04:6b:39:
                    0e:f8:84:9b:fd:b5:bb:92:0d:27:61:1f:bf:24:d4:
                    21:e6:66:69:09:d4:13:cc:86:34:f3:a9:ad:76:41:
                    f3:91:80:49:8e:48:55:76:4a:5c:d4:dc:14:82:bf:
                    59:57:43:58:72:52:ca:81:64:90:27:6c:03:bc:3f:
                    ec:b3:68:f6:ed:58:b5:53:45:a8:d2:aa:8a:b8:6c:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:88:73:51:AD:47:39:16:50:CA:5C:04:49:DA:0C:5D:00:3B:CE
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:a0:6c:17:64:86:8c:d8:7a:8c:70:aa:40:ed:89:d8:ab:
         9b:77:58:98:33:66:09:e1:73:19:31:0f:b5:af:a3:99:92:8f:
         f7:8b:cb:19:5b:8d:eb:43:80:6a:db:66:69:1d:cf:0c:b0:ff:
         49:3d:39:2e:66:e8:54:fe:b0:8f:f3:39:e4:a1:3f:9f:7e:33:
         c6:56:03:fe:f2:00:1f:23:b7:e6:0e:23:f3:e6:09:d5:23:99:
         05:7d:d1:8b:2d:43:4f:6b:df:00:dd:01:eb:d9:cd:c5:1f:4d:
         02:3b:08:18:fa:51:5b:ce:fa:a8:eb:76:14:16:46:38:be:ec:
         2c:ad:b8:ae:b3:28:9f:db:ff:98:94:b0:f6:14:d6:57:22:30:
         34:0b:c0:c5:6d:20:b1:d0:6e:e5:fe:2b:44:d0:9e:b0:94:6d:
         ef:2a:64:27:75:b7:57:76:73:72:8b:6c:88:cb:03:ab:d3:d4:
         3d:a1:f5:27:05:b1:0a:de:09:9b:25:4d:fe:94:f6:79:39:8a:
         f1:69:eb:95:07:27:da:19:82:cf:76:5e:0b:f9:39:41:32:e3:
         a9:bc:62:af:ca:c9:d3:33:b3:d0:93:cd:c7:20:88:74:5d:55:
         ab:8d:b0:b6:59:82:b7:ab:21:37:09:fd:6c:f7:6e:de:e3:29:
         08:59:95:06
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUAx2hFhmg5tfeqEmkw/CqdCbqw5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2
MEU1MjM4OTAeFw0yNjA1MTIxMzQxNThaFw0yNjA1MTMxNjE0NThaMDMxMTAvBgNV
BAMTKDczODI4ODczNTFBRDQ3MzkxNjUwQ0E1QzA0NDlEQTBDNUQwMDNCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTywobDls1OOOwj3wqJXLwbkM
NmoGWoDdgw9jfh1zHJDip9JLWM88tHTIuy38qS+azqh4iBgh9o8LE7BnhBQiRki8
DwyBzRpR9UMYbmvqtVTZDRspGZSGp1D+TwcFJgbBPLGigES2iOI4yoLnRZVuNbO7
JvNE+6cTizHFdKnSwEZH0qmZa0wz/jV09WbOjF7972/TGbfyIBNS/M8eOq0BYbXQ
a/Y1s4O1Cy6tj3s6bgRrOQ74hJv9tbuSDSdhH78k1CHmZmkJ1BPMhjTzqa12QfOR
gEmOSFV2SlzU3BSCv1lXQ1hyUsqBZJAnbAO8P+yzaPbtWLVTRajSqoq4bKPtAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUc4KIc1GtRzkWUMpcBEnaDF0AO84wHwYDVR0j
BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud
HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu
bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0
MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF
BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l
dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5
LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t
ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv
My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAlcKgbBdkhozYeoxwqkDtidirm3dYmDNmCeFzGTEPta+jmZKP94vLGVuN
60OAattmaR3PDLD/ST05LmboVP6wj/M55KE/n34zxlYD/vIAHyO35g4j8+YJ1SOZ
BX3Riy1DT2vfAN0B69nNxR9NAjsIGPpRW876qOt2FBZGOL7sLK24rrMon9v/mJSw
9hTWVyIwNAvAxW0gsdBu5f4rRNCesJRt7ypkJ3W3V3ZzcotsiMsDq9PUPaH1JwWx
Ct4JmyVN/pT2eTmK8WnrlQcn2hmCz3ZeC/k5QTLjqbxir8rJ0zOz0JPNxyCIdF1V
q42wtlmCt6shNwn9bPdu3uMpCFmVBg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:04:37 2026 by rpki-client