Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          QCW4sIhAnpx4bnlIQsV/tjZTeuKuFU8ZgsuMbL7l5/w=
Subject key identifier:   9E:7F:EA:F1:AF:4F:43:75:44:5D:BF:AE:87:3D:A0:D2:B8:1A:95:DA
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       348B63632FE60BCCEC455FCE24339CF63ACF18DE
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          0401
Signing time:             Fri 24 Jul 2026 01:22:25 +0000
Manifest this update:     Fri 24 Jul 2026 01:17:25 +0000
Manifest next update:     Sat 25 Jul 2026 04:54:25 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: pbAdkvA+Nfm0iZuM/Z/og4HaGMaFUi1KZ9DsMbfvAqk=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8b:63:63:2f:e6:0b:cc:ec:45:5f:ce:24:33:9c:f6:3a:cf:18:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Jul 24 01:17:25 2026 GMT
            Not After : Jul 25 04:54:25 2026 GMT
        Subject: CN=9E7FEAF1AF4F4375445DBFAE873DA0D2B81A95DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:a4:ea:62:f0:87:66:c3:de:50:38:86:15:
                    b0:44:a0:ad:04:2a:c2:f0:35:8c:42:85:48:46:7b:
                    56:0c:6d:e5:74:03:53:40:32:bd:fe:9b:38:8f:9a:
                    9f:74:9f:74:71:a6:6a:0b:44:84:7c:42:81:70:0d:
                    f0:d0:ca:c6:c3:69:ec:ec:af:e8:53:24:5c:83:39:
                    11:00:b8:3a:aa:85:53:74:36:81:fe:17:6f:5a:e9:
                    52:7d:87:21:44:c8:78:09:de:a5:f5:99:86:a6:8f:
                    a1:10:7c:dc:58:65:a4:4f:df:5c:bb:3b:20:87:03:
                    26:f1:34:9c:65:86:4b:b6:4b:ee:07:2b:6d:08:57:
                    e2:9a:29:8e:b0:5f:aa:b4:60:90:66:07:d8:ac:d2:
                    b3:39:ba:e7:f5:69:93:ea:f6:9e:63:88:4b:ec:e6:
                    63:53:cf:98:fc:3a:47:00:76:46:7a:d4:70:f7:2e:
                    b8:ca:c9:75:43:cb:af:d0:2b:e6:ad:3e:87:b5:3d:
                    a5:46:88:66:30:8b:25:b4:23:b8:c8:41:e2:44:89:
                    1e:d9:4a:ac:29:89:65:8f:75:ad:15:ef:30:ce:a8:
                    43:47:ba:3e:2e:15:7a:03:32:3b:08:43:52:9b:cd:
                    d3:b2:e4:2c:e6:85:5c:52:fa:e8:c5:6c:98:60:e9:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:EA:F1:AF:4F:43:75:44:5D:BF:AE:87:3D:A0:D2:B8:1A:95:DA
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:47:51:cd:78:d8:3a:f2:97:e9:da:b0:93:12:92:2c:72:
         bc:c4:ab:4d:77:48:f4:5a:3d:d0:6b:98:15:bb:2e:ce:0c:46:
         3a:b4:74:7b:dc:48:da:26:e2:c3:3f:9a:4e:5b:8f:4e:8d:7a:
         04:7d:75:dc:7b:94:bb:19:b9:63:5f:9c:71:c7:7e:29:53:0c:
         62:1b:fd:8a:66:2d:ea:ee:eb:79:1a:84:e6:ac:5f:5b:3c:56:
         55:60:cb:a2:87:75:bd:c1:2d:eb:3f:67:ff:b0:ed:86:9d:45:
         64:ee:f3:85:da:f1:6d:45:8f:3f:d2:94:60:0d:c0:41:2a:87:
         a7:9a:0c:ef:04:59:39:74:6e:51:cf:ed:35:53:35:e6:9a:a4:
         36:10:15:ac:42:3a:06:95:d5:e1:b3:78:02:e4:9b:b9:c8:0b:
         54:e4:69:cf:d2:3b:a3:d3:c2:80:ed:8e:b4:d8:97:d6:e9:ba:
         42:3c:11:b4:35:de:8e:1d:e3:88:5c:1e:80:a3:5a:19:46:b6:
         86:e2:50:c5:f7:d4:08:3d:a4:b4:d2:ef:4b:9f:14:b6:75:44:
         6a:76:b8:e6:94:36:48:9c:ae:ff:4b:45:7a:18:a1:d1:6e:6c:
         57:bd:ff:99:03:5a:70:14:82:63:97:6f:75:79:d7:07:a6:1e:
         11:31:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:04:02 2026 by rpki-client