Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          YoDhKEYLKQgaEeaD3xPne0G47e1CCeJQW/jWpp5BPC0=
Subject key identifier:   DD:FC:59:2D:17:4F:39:23:B5:17:D3:69:EA:C5:93:4C:B8:F7:E8:47
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       6F96826F8570636550BC5CBC2746C535BBDA670D
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          037F
Signing time:             Fri 17 Apr 2026 06:11:53 +0000
Manifest this update:     Fri 17 Apr 2026 06:06:53 +0000
Manifest next update:     Sat 18 Apr 2026 08:06:53 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: OFOnq+cznq6z0ege38cQQDoCXVJXrsWXXJdX+Kcow40=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:96:82:6f:85:70:63:65:50:bc:5c:bc:27:46:c5:35:bb:da:67:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Apr 17 06:06:53 2026 GMT
            Not After : Apr 18 08:06:53 2026 GMT
        Subject: CN=DDFC592D174F3923B517D369EAC5934CB8F7E847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:91:89:21:b4:3f:0f:c7:55:7d:0b:b4:8a:
                    3b:89:29:18:65:a1:2f:03:b9:8e:b0:75:70:2a:d5:
                    b9:28:eb:7c:01:bb:e5:2f:66:5b:9f:a2:35:01:68:
                    14:eb:c6:a3:96:a7:65:4a:22:26:86:f4:1f:18:c7:
                    d7:dc:a8:4c:94:79:9e:dd:d1:01:89:b4:8c:85:ac:
                    87:72:eb:ad:76:2e:81:e7:f2:4f:85:b2:f0:f8:b8:
                    6f:95:95:2a:2f:2d:63:f3:f5:6c:c8:be:a9:ef:5a:
                    58:b9:86:6d:70:08:cf:68:1a:d3:c6:37:f5:0e:6e:
                    22:34:3f:36:90:14:b5:9c:17:1d:ae:d3:0d:1f:31:
                    8c:01:d0:ee:d6:2a:60:74:fc:e8:2a:1d:b9:b9:0b:
                    66:48:de:2a:10:ce:eb:ee:84:cf:6f:33:66:77:47:
                    98:47:ad:1e:03:58:18:b0:b6:6d:9c:05:00:c4:42:
                    71:a4:4b:b3:1a:d3:c5:3d:f1:6d:cd:f3:7c:a6:79:
                    6d:9f:c8:c9:99:84:90:79:f7:fe:d2:3f:5c:a0:8b:
                    9c:fe:a5:70:17:fe:e7:21:f4:c5:31:4e:b9:43:7a:
                    26:49:8c:04:92:bf:49:c2:cf:be:a1:7a:46:1b:0a:
                    d2:4b:7a:e8:8d:31:8f:69:f2:81:b7:54:6c:c6:4f:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FC:59:2D:17:4F:39:23:B5:17:D3:69:EA:C5:93:4C:B8:F7:E8:47
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3f:a8:b3:3e:96:c9:ec:c4:30:07:58:1f:d4:73:3a:7f:3b:
         95:82:eb:00:7a:06:13:9b:b8:bf:58:30:f2:00:b6:f6:33:43:
         7c:a9:20:99:cd:4b:ed:97:f8:5b:cd:c8:06:aa:c8:6c:72:74:
         c7:45:a9:d0:22:a9:6f:68:94:4c:24:62:ca:29:54:bd:c9:37:
         83:0c:72:50:7d:c7:3a:e7:f9:37:41:fe:2f:85:03:ed:d5:82:
         70:09:30:83:0e:f2:6e:58:07:fd:1c:91:0e:35:65:2c:89:78:
         0e:b2:68:02:0e:ba:5b:9a:dc:52:49:34:2e:ae:d1:8e:cd:04:
         63:d5:04:83:56:9a:93:12:90:5a:8b:de:e7:33:49:b2:3e:42:
         4e:05:10:9c:89:eb:c4:92:90:ea:e5:8b:28:1f:dd:05:e6:4c:
         7a:13:c4:4b:0a:5e:e5:50:2c:41:16:7c:20:32:87:77:ee:8f:
         5c:9a:77:d9:45:3d:08:ef:80:30:c0:e9:c3:44:e5:81:1f:bb:
         d3:d2:f4:1c:4f:e5:6d:a1:6e:74:2f:a7:bb:78:05:5c:e6:d2:
         84:ca:aa:ce:66:b2:9d:c9:69:50:d7:36:e2:64:30:f9:c6:8f:
         df:83:c0:b8:3c:98:c5:54:8e:e2:55:7f:46:00:6d:4f:44:73:
         ef:cb:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:07 2026 by rpki-client