Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          iFlZZmGH3ZhOQyI6Nv967nO/4yNRVlYmw3uF+aKP67A=
Subject key identifier:   C2:77:AA:E8:A1:A8:1D:56:ED:50:11:06:A4:ED:0A:9A:54:9E:B5:68
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       56198AF5D1BC511CEB66DDD33471FD4F0E0D6479
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          0292
Signing time:             Tue 21 Oct 2025 08:44:38 +0000
Manifest this update:     Tue 21 Oct 2025 08:39:38 +0000
Manifest next update:     Wed 22 Oct 2025 12:31:38 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: A1lykw98pFoTOlDSvBaqtu2okG6KwPVV6C/11LLxf7E=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 04:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:19:8a:f5:d1:bc:51:1c:eb:66:dd:d3:34:71:fd:4f:0e:0d:64:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Oct 21 08:39:38 2025 GMT
            Not After : Oct 22 12:31:38 2025 GMT
        Subject: CN=C277AAE8A1A81D56ED501106A4ED0A9A549EB568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:6b:6a:85:16:63:07:51:fe:1d:36:ad:ac:
                    09:1f:92:c9:06:c1:2e:b9:67:6b:cb:ca:07:2c:1a:
                    bb:09:10:d6:4a:4e:e6:df:d1:68:be:54:c9:59:10:
                    3f:6a:48:a8:4f:43:8b:12:8c:c1:44:78:24:d4:00:
                    b0:83:ee:65:de:0a:b2:46:90:6c:2c:5b:2e:2a:5b:
                    af:72:68:3b:01:ff:43:f7:e3:53:92:c0:41:40:07:
                    94:34:41:2e:8b:90:e0:3b:83:a5:8d:e7:4c:a0:17:
                    39:b5:be:73:ed:e0:83:20:83:04:bc:02:18:b1:9c:
                    29:5f:15:17:5e:4c:29:67:17:15:4c:48:43:96:29:
                    fa:fd:ff:64:71:4c:d6:24:8d:01:6d:b5:d8:a1:01:
                    3a:73:1b:b3:f7:26:f1:e8:60:9a:51:91:24:cd:8b:
                    df:6f:f2:2c:a6:79:0d:ea:49:67:48:eb:47:94:67:
                    99:0a:0a:50:c5:40:18:6d:73:40:d0:a6:0b:1e:bc:
                    90:00:0a:db:03:57:1d:87:97:c9:69:75:46:91:aa:
                    0a:f9:f5:44:4a:e0:57:c3:6b:a8:4a:31:34:a7:3c:
                    b4:24:cb:58:e9:d2:3d:b0:50:dd:ea:78:45:91:fb:
                    c9:ab:75:e2:0c:ee:d0:01:5a:5e:ae:ce:33:4e:39:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:AA:E8:A1:A8:1D:56:ED:50:11:06:A4:ED:0A:9A:54:9E:B5:68
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:bd:6f:3c:d7:dc:62:66:9a:cb:0e:cb:20:56:e9:b3:d2:96:
         2e:b6:e6:a3:a9:f2:50:1f:6b:0c:cb:bf:75:d3:22:93:a7:23:
         f5:a6:5c:6a:42:ec:19:ca:c3:ef:a6:cc:34:1e:fd:c9:a1:a0:
         db:07:b2:9e:2b:47:5c:be:cd:03:9c:3a:9e:dc:ea:94:f6:91:
         5c:a1:91:b6:ee:9f:c3:e6:cf:07:2a:3f:5d:13:2f:c0:26:c8:
         bd:29:ee:7a:2d:16:8d:1a:5b:b1:60:37:ed:a7:c0:a8:02:89:
         91:d4:05:7e:d6:c8:de:13:89:5f:0d:c2:7e:96:7e:59:6b:17:
         cd:98:d8:06:c4:cd:e8:5e:21:6a:71:80:a2:24:91:94:e2:3b:
         7a:5f:60:60:af:60:a9:88:c8:13:d4:e1:3b:38:e1:1d:87:18:
         8c:d4:d1:ab:9c:77:b8:3e:eb:17:b1:df:cb:0d:81:63:c6:41:
         c5:ce:48:d4:b7:a7:5a:15:3c:29:dc:02:32:02:de:23:a7:e1:
         d5:3b:33:8e:41:a2:85:11:c5:84:1e:43:fc:44:0a:2c:69:47:
         92:56:0c:d4:01:ad:8b:c6:e3:ff:83:2a:e1:81:be:17:7d:39:
         28:81:95:3c:54:f1:4e:0b:c4:eb:ab:51:81:56:9a:5f:fc:26:
         28:cc:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:13:44 2025 by rpki-client