$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: GhcvxgaI3AA9lWHCdclpXp93ubPe1SP1j3o0HkYiYkQ= Subject key identifier: 5E:6D:0B:17:32:6B:A2:A9:0E:00:04:1A:C2:0D:B7:BD:E5:3B:5D:60 Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 7CF79BA9B6437C536E711BC13738871F05C26651 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 0362 Signing time: Thu 26 Mar 2026 04:36:39 +0000 Manifest this update: Thu 26 Mar 2026 04:31:39 +0000 Manifest next update: Fri 27 Mar 2026 06:53:39 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: kWQxyPigr9WF7P3AQy3sX2ikw2qI3BF7sh0S9VNmj8A=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f7:9b:a9:b6:43:7c:53:6e:71:1b:c1:37:38:87:1f:05:c2:66:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Mar 26 04:31:39 2026 GMT Not After : Mar 27 06:53:39 2026 GMT Subject: CN=5E6D0B17326BA2A90E00041AC20DB7BDE53B5D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:3e:1c:47:67:b2:b6:4c:d2:0f:57:39:52: e7:6f:d2:db:48:1d:71:a6:a9:d2:b0:a6:84:88:22: 10:c9:87:70:7e:39:5b:65:14:78:2a:8e:12:d6:62: 2c:85:42:10:28:c1:e3:24:c1:24:27:45:95:3a:4b: 37:36:39:b9:b1:0c:a0:11:7d:13:d7:db:e9:a3:98: 4b:26:41:a3:bc:da:f9:4b:c7:91:44:04:29:e8:2f: bb:67:37:46:73:5c:4e:d0:a6:b4:c7:a6:59:66:b9: c2:20:7d:ae:66:4e:1c:c9:df:94:6f:41:16:e7:c1: 51:33:fd:fc:18:f0:b1:7d:4f:94:65:e3:02:b8:c3: 3d:19:89:dd:4f:21:c9:32:19:c6:ee:c3:7e:5b:40: b7:9e:b1:44:de:86:28:b0:ba:40:bb:67:c2:22:ca: fa:13:93:c3:71:d2:30:97:66:ea:35:20:af:1c:5b: 5b:3f:42:fa:f5:75:fc:7b:c0:34:c4:b8:f1:6f:87: f4:79:18:77:01:0b:d4:99:5d:5a:0c:53:56:a3:9e: 0a:5b:e5:14:a9:ad:f4:f9:79:58:62:ce:e3:47:4e: 79:1e:f4:08:08:51:a1:b2:86:c6:17:fc:6f:de:75: 4d:3b:03:fa:6f:02:dc:3f:4b:6c:c5:5d:64:39:f0: ec:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6D:0B:17:32:6B:A2:A9:0E:00:04:1A:C2:0D:B7:BD:E5:3B:5D:60 X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:14:66:b5:dd:5b:70:c4:ad:43:2a:a0:b1:36:06:36:50:92: 08:71:7e:ce:c9:79:be:f9:fb:3f:18:09:1a:75:24:72:1e:0c: 85:ef:ef:7a:86:7e:08:1e:88:4d:52:88:f1:71:fc:49:27:ae: e0:3e:e3:a9:07:69:0e:ab:06:47:de:b1:f1:03:f7:6b:de:19: 75:59:3c:b9:9c:e8:0e:c9:f1:81:d8:88:f3:8e:1b:37:10:c4: 9b:94:8a:1a:0e:31:28:2b:d8:27:1b:c0:9f:8b:40:31:0a:ce: 20:1a:97:2f:8b:47:6b:42:66:3b:f3:e7:be:be:89:b1:4b:44: 51:8d:44:ed:c9:21:0a:ed:56:7e:b9:8d:78:57:ec:ee:39:63: 88:d0:1a:58:ba:7c:96:5e:aa:74:59:89:09:66:88:73:ef:35: 9b:9c:19:59:e6:bf:14:ce:d6:cd:9e:14:83:74:ee:73:05:b8: a8:3b:97:1f:24:98:19:6d:70:e0:74:77:fe:10:04:c4:6e:fa: 2a:e2:b8:2e:cf:18:94:56:a3:97:c4:94:d9:33:9a:eb:2a:c3: 32:b5:fa:c0:db:0b:17:74:59:4e:50:ce:7c:dd:38:98:5a:af: 22:26:87:fa:f5:68:62:89:ca:97:dc:06:27:1f:46:dd:08:1b: 47:d1:f3:50 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUfPebqbZDfFNucRvBNziHHwXCZlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNjAzMjYwNDMxMzlaFw0yNjAzMjcwNjUzMzlaMDMxMTAvBgNV BAMTKDVFNkQwQjE3MzI2QkEyQTkwRTAwMDQxQUMyMERCN0JERTUzQjVENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2D4cR2eytkzSD1c5Uudv0ttI HXGmqdKwpoSIIhDJh3B+OVtlFHgqjhLWYiyFQhAoweMkwSQnRZU6Szc2ObmxDKAR fRPX2+mjmEsmQaO82vlLx5FEBCnoL7tnN0ZzXE7QprTHpllmucIgfa5mThzJ35Rv QRbnwVEz/fwY8LF9T5Rl4wK4wz0Zid1PIckyGcbuw35bQLeesUTehiiwukC7Z8Ii yvoTk8Nx0jCXZuo1IK8cW1s/Qvr1dfx7wDTEuPFvh/R5GHcBC9SZXVoMU1ajngpb 5RSprfT5eVhizuNHTnke9AgIUaGyhsYX/G/edU07A/pvAtw/S2zFXWQ58OylAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUXm0LFzJroqkOAAQawg23veU7XWAwHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEA1hRmtd1bcMStQyqgsTYGNlCSCHF+zsl5vvn7PxgJGnUkch4Mhe/veoZ+ CB6ITVKI8XH8SSeu4D7jqQdpDqsGR96x8QP3a94ZdVk8uZzoDsnxgdiI844bNxDE m5SKGg4xKCvYJxvAn4tAMQrOIBqXL4tHa0JmO/Pnvr6JsUtEUY1E7ckhCu1WfrmN eFfs7jljiNAaWLp8ll6qdFmJCWaIc+81m5wZWea/FM7WzZ4Ug3TucwW4qDuXHySY GW1w4HR3/hAExG76KuK4Ls8YlFajl8SU2TOa6yrDMrX6wNsLF3RZTlDOfN04mFqv IiaH+vVoYonKl9wGJx9G3QgbR9HzUA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:55:02 2026 by rpki-client