Manifest

$ rpki-client -vvvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          NswJS3AJGHKYf/h6rgnzV/rN8g9/SouZ5Xjy4BG8lXk=
Subject key identifier:   2F:94:E1:0B:38:CC:D3:80:95:71:1C:AE:EF:A3:34:75:56:E5:E1:20
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       78E061C98A9B03C3CA00DBED1F3F104D72537091
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          0458
Signing time:             Sun 27 Sep 2026 10:22:47 +0000
Manifest this update:     Sun 27 Sep 2026 10:17:47 +0000
Manifest next update:     Mon 28 Sep 2026 13:46:47 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: FpmP7dXq+jMETabOgjWBN6amxfemjzyGRySE5KbEIN0=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e0:61:c9:8a:9b:03:c3:ca:00:db:ed:1f:3f:10:4d:72:53:70:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Sep 27 10:17:47 2026 GMT
            Not After : Sep 28 13:46:47 2026 GMT
        Subject: CN=2F94E10B38CCD38095711CAEEFA3347556E5E120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:36:5a:c1:6d:f1:22:5e:45:00:b0:e9:b1:
                    fe:61:e9:b9:f0:b2:64:36:10:a7:9c:d3:67:99:2d:
                    f7:01:d9:ce:0a:3c:f2:f1:5e:be:bd:4a:01:61:81:
                    d1:3e:b0:a8:16:0d:49:f0:6b:fe:71:70:d8:f5:bc:
                    26:f0:be:33:29:6e:7c:a7:d6:06:5e:dd:9d:61:c8:
                    a7:e3:47:e8:74:b7:40:f7:6c:fa:db:61:36:c1:ec:
                    23:c1:f7:8f:9c:cf:b8:05:93:73:a0:c7:d2:ec:53:
                    d6:c4:dd:60:6e:cc:c5:8e:42:a0:ef:83:b6:8f:e0:
                    49:e6:26:fb:41:db:5b:4b:34:65:b4:d6:f9:31:7c:
                    3b:d4:5d:60:1e:d6:6c:cf:8c:c6:9a:71:2c:1e:7b:
                    61:49:73:55:81:1c:9c:93:68:06:ce:30:66:b8:af:
                    da:40:2d:32:2e:b9:c8:0d:1c:6a:8d:b9:c1:5b:40:
                    55:21:08:27:40:6f:84:29:fd:19:7e:1e:92:b8:4b:
                    65:06:dc:e6:eb:98:a2:28:38:ba:70:5f:6b:e1:2f:
                    bb:ae:e4:bc:05:d4:31:dc:39:dd:98:9d:91:43:43:
                    60:84:55:30:a4:58:45:b2:fe:a7:83:2b:dc:7b:84:
                    04:21:8e:78:2a:83:70:94:2e:b1:1f:09:9e:63:f3:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:94:E1:0B:38:CC:D3:80:95:71:1C:AE:EF:A3:34:75:56:E5:E1:20
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:77:71:65:66:53:32:50:c0:71:34:0e:1d:10:12:59:71:
         14:a0:40:36:59:ea:8e:f1:9c:5b:b4:b9:65:5b:cd:ee:ac:13:
         e7:ed:29:c3:4d:d3:2d:28:bd:35:fa:d5:93:2f:ee:a9:24:16:
         c7:a0:a4:d8:8a:15:70:33:46:04:a2:04:51:7a:39:63:b6:5b:
         00:f4:2e:62:2a:e8:17:9d:b5:f8:40:b7:f2:53:9d:7b:2f:bc:
         6d:56:f7:63:3f:6a:13:67:fb:59:5b:76:8f:e7:9b:06:a6:1a:
         b2:c7:74:71:3a:c9:aa:e5:cd:6a:40:96:33:5e:71:ff:8a:0d:
         ad:ac:b2:eb:ce:18:5f:34:72:68:47:ea:a7:c3:3a:36:2e:77:
         0d:1b:b5:de:b6:f9:84:38:72:73:b2:b4:e5:19:b5:ac:28:9a:
         cf:78:48:16:2f:ca:ea:88:03:14:a5:cd:20:4a:4f:d7:a4:de:
         db:b7:7d:de:69:01:e9:6c:cf:9a:2a:34:64:da:e5:8e:01:90:
         02:85:1b:f8:27:30:61:bd:4b:89:84:f2:96:d5:26:6e:9d:e6:
         87:82:7e:67:64:ac:91:1a:d3:7a:ed:ae:e1:4a:ae:cf:20:b5:
         bc:fb:b7:65:d4:22:00:5a:13:cb:67:8c:d0:e3:4a:c6:6f:4e:
         43:61:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:42:20 2026 by rpki-client