Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          V6Ad6UrMvgm6gKSbcSEU/SKL2xg5HyidnBzYQcXrAFE=
Subject key identifier:   9A:5C:DF:2A:99:4C:DB:CF:D1:0D:5A:18:68:93:9E:DE:4D:7A:F2:CB
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       3DA9C97B3C12089CAA4727A896FCCD37E6B7DD6A
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          0243
Signing time:             Sat 23 Aug 2025 06:28:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:23:47 +0000
Manifest next update:     Sun 24 Aug 2025 07:03:47 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: kI6iVXRNR1HViAVZG5VGhigKw/3YoO/yc6snDxaay8A=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a9:c9:7b:3c:12:08:9c:aa:47:27:a8:96:fc:cd:37:e6:b7:dd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Aug 23 06:23:47 2025 GMT
            Not After : Aug 24 07:03:47 2025 GMT
        Subject: CN=9A5CDF2A994CDBCFD10D5A1868939EDE4D7AF2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:af:75:e9:f5:b7:12:a5:a1:90:67:6e:6f:
                    f7:b5:c1:34:8f:4a:d8:78:b0:f0:54:cf:f5:83:23:
                    be:41:a7:c9:c9:1e:19:a8:b1:fd:3e:f9:3c:e5:16:
                    43:91:4d:ad:a4:38:78:97:96:0f:ad:ee:f5:40:0a:
                    ed:17:09:f3:ae:ba:2e:48:6f:e7:de:ea:5b:6e:93:
                    8b:66:f7:2a:52:31:7e:21:4c:04:bb:74:69:4a:7d:
                    c1:f9:d3:a3:3c:0c:1b:92:6c:fb:3c:4d:86:75:b5:
                    c8:a9:09:ad:32:da:02:1e:63:da:b0:00:a8:9e:30:
                    a9:f2:5c:d7:5a:ba:33:e4:b3:2f:3b:a7:06:9d:80:
                    cb:33:28:57:73:dc:13:bf:a9:c5:38:a7:39:b7:37:
                    bc:a3:aa:1d:c5:a4:90:8e:db:0f:2a:d2:41:6a:95:
                    d4:ea:19:30:cd:da:94:5f:7d:82:b6:51:b5:8d:7b:
                    36:70:fc:5a:6f:fc:14:9e:50:48:9c:4d:9b:32:b4:
                    2f:8c:1f:1b:54:17:1a:99:3e:44:85:8a:63:1d:97:
                    73:2a:9c:f6:87:ab:b5:5d:d1:e6:53:7d:db:02:99:
                    2f:17:e0:2a:30:03:e6:58:e7:1a:15:7b:5e:8a:1e:
                    a1:1d:8f:b9:f2:c6:34:ad:d9:03:01:4a:cf:db:bd:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5C:DF:2A:99:4C:DB:CF:D1:0D:5A:18:68:93:9E:DE:4D:7A:F2:CB
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:92:fc:72:a0:7c:5b:d4:7b:22:6c:f3:51:9b:5c:6a:bf:5b:
         dc:cc:ec:6a:78:59:66:b7:71:0c:8d:6a:c0:a0:d9:b8:15:f9:
         c2:98:52:ba:ed:63:b5:b9:2e:a1:9c:c9:15:eb:ed:76:16:a2:
         41:52:31:89:00:42:41:01:13:3e:8b:eb:82:be:20:36:9d:23:
         39:35:e0:ef:15:e0:72:21:9b:d6:ed:20:8c:26:11:ee:3b:35:
         69:b9:22:48:d9:9b:43:29:87:f6:36:94:6b:e9:f7:8d:2a:62:
         ae:53:2c:a8:a3:d9:32:50:ed:81:95:e6:fc:76:87:ab:c4:6b:
         86:3e:04:f5:35:26:a0:4f:33:7f:d7:c9:34:fa:7f:bd:c8:06:
         9e:3a:cd:d1:3e:3d:9b:9d:e6:74:8d:f6:2d:62:7f:61:82:9e:
         1d:94:85:ef:cc:03:1c:39:b1:9d:d2:b8:0e:ba:6a:fd:03:d2:
         8f:59:8b:81:d9:89:c3:6b:01:2a:34:0b:ba:74:e0:e5:42:6e:
         27:1d:de:f0:1a:c0:5d:9a:0b:90:df:32:e0:39:66:35:e2:1c:
         b0:9b:ad:49:8f:94:88:b4:95:a5:14:c4:3f:c5:c7:4f:b4:68:
         66:32:75:a7:7f:8c:e8:66:2d:b6:78:1b:f8:7e:a4:75:8d:83:
         70:91:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:05 2025 by rpki-client