$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: MHlsh+qaSwpSbsNMevZ/7Q6g0t3kUIqmMCWr/k6FJAA= Subject key identifier: 14:C6:83:08:35:C4:2F:BA:79:DD:25:34:40:70:B0:A1:71:9B:80:EA Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 3040FA79B89934953C9E7B0A6B5513D4373045A8 Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 0341 Signing time: Sun 01 Mar 2026 17:21:37 +0000 Manifest this update: Sun 01 Mar 2026 17:16:37 +0000 Manifest next update: Mon 02 Mar 2026 19:53:37 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: ovGBrsjs2xD7CfiKhJM9LK77my1qNq+AEZ9sqE3rJrc=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:40:fa:79:b8:99:34:95:3c:9e:7b:0a:6b:55:13:d4:37:30:45:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Mar 1 17:16:37 2026 GMT Not After : Mar 2 19:53:37 2026 GMT Subject: CN=14C6830835C42FBA79DD25344070B0A1719B80EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:36:d2:55:3e:41:af:c9:5e:b3:8b:f4:a1: 78:89:a4:33:b8:3f:da:e1:74:d9:a4:65:78:90:0c: 0b:c5:98:5a:b3:10:3e:b6:4b:22:81:f9:d5:c9:4e: 1f:b2:f4:12:4d:7e:e6:48:10:ed:59:8e:b6:d9:86: a0:08:e9:2e:49:8f:2f:6e:38:82:cc:59:2b:99:ee: 21:51:1f:c8:54:fe:3a:c0:ce:63:95:93:8d:2b:28: 65:32:8a:29:d2:6e:51:79:e4:dd:28:cf:be:28:bb: 11:c1:3f:a3:42:0b:bd:67:28:df:95:a2:0b:01:d1: 2c:d6:7e:f5:31:58:0a:ca:87:6e:e6:97:9f:24:50: 61:2d:b2:cd:f7:d0:db:3b:a0:8d:5e:ee:25:84:d4: 03:c3:5d:d1:63:a0:11:2f:6c:dc:b8:ec:75:4e:11: fc:1f:df:ba:14:67:65:0f:01:79:1e:6a:e7:c0:d7: 1e:4d:a3:0a:ff:51:8f:4c:7c:e3:ff:f1:5e:d2:2b: 84:a6:51:44:ab:d3:f8:ab:41:f6:b0:ca:80:7b:d5: 6d:dc:21:c0:b8:90:67:52:49:2e:69:f4:04:52:95: bf:92:f8:dc:b4:ab:21:e1:ae:42:a7:c1:c2:9e:f2: d3:ef:12:aa:d8:e2:89:36:b0:50:5a:0b:6b:f2:9a: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C6:83:08:35:C4:2F:BA:79:DD:25:34:40:70:B0:A1:71:9B:80:EA X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d1:46:39:89:60:45:86:01:3c:fe:27:32:b2:62:f2:e8:3f: 80:a5:8b:80:69:05:88:a8:20:1b:27:d6:0b:b2:32:c5:52:43: 1f:df:01:b8:a9:8f:a0:84:a9:10:13:50:71:1c:f5:32:f8:df: fc:d3:0b:8b:f4:de:bf:d6:25:63:98:89:f5:d1:72:3a:db:5f: 10:35:93:0e:63:51:90:61:a5:7e:bb:7f:c4:b4:d7:0c:45:fd: 64:7a:e6:88:bd:47:6c:d1:e6:16:db:27:56:99:78:4d:a6:0e: 0b:15:b7:1b:d6:c0:f7:4b:42:ba:d9:bc:aa:9c:cf:76:8a:1f: 60:1c:ba:59:a1:f6:76:46:c3:49:cb:10:2c:26:25:84:6a:43: cf:a5:28:7b:5f:1b:27:f9:36:0c:ee:9e:d1:1f:9a:9e:a5:28: b8:04:c9:6c:92:79:52:c1:96:8c:2d:98:7c:5a:73:c1:e6:ed: 7c:e8:52:1c:2c:c8:bd:3a:90:38:68:17:a4:d0:66:5b:fc:4c: 25:06:e6:77:f5:3c:11:e2:e0:c7:5e:5f:80:94:61:09:cd:04: cf:d1:a6:4e:a0:7b:8f:a0:49:65:03:90:16:93:46:cf:48:fa: ba:4c:29:e9:04:05:0a:f6:e9:3e:70:b3:09:32:d9:e6:be:0b: 48:19:ec:68 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUMED6ebiZNJU8nnsKa1UT1DcwRagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNjAzMDExNzE2MzdaFw0yNjAzMDIxOTUzMzdaMDMxMTAvBgNV BAMTKDE0QzY4MzA4MzVDNDJGQkE3OUREMjUzNDQwNzBCMEExNzE5QjgwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cjbSVT5Br8les4v0oXiJpDO4 P9rhdNmkZXiQDAvFmFqzED62SyKB+dXJTh+y9BJNfuZIEO1ZjrbZhqAI6S5Jjy9u OILMWSuZ7iFRH8hU/jrAzmOVk40rKGUyiinSblF55N0oz74ouxHBP6NCC71nKN+V ogsB0SzWfvUxWArKh27ml58kUGEtss330Ns7oI1e7iWE1APDXdFjoBEvbNy47HVO Efwf37oUZ2UPAXkeaufA1x5Nowr/UY9MfOP/8V7SK4SmUUSr0/irQfawyoB71W3c IcC4kGdSSS5p9ARSlb+S+Ny0qyHhrkKnwcKe8tPvEqrY4ok2sFBaC2vymtKJAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUFMaDCDXEL7p53SU0QHCwoXGbgOowHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAedFGOYlgRYYBPP4nMrJi8ug/gKWLgGkFiKggGyfWC7IyxVJDH98BuKmP oISpEBNQcRz1Mvjf/NMLi/Tev9YlY5iJ9dFyOttfEDWTDmNRkGGlfrt/xLTXDEX9 ZHrmiL1HbNHmFtsnVpl4TaYOCxW3G9bA90tCutm8qpzPdoofYBy6WaH2dkbDScsQ LCYlhGpDz6Uoe18bJ/k2DO6e0R+anqUouATJbJJ5UsGWjC2YfFpzwebtfOhSHCzI vTqQOGgXpNBmW/xMJQbmd/U8EeLgx15fgJRhCc0Ez9GmTqB7j6BJZQOQFpNGz0j6 ukwp6QQFCvbpPnCzCTLZ5r4LSBnsaA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:39 2026 by rpki-client