$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: ZEqo4qCNX7SEM8+ieLfnl/0/EsqHqX20TteSGCvIhV0= Subject key identifier: F3:A4:9B:22:34:B9:CD:AB:9D:B5:B3:39:42:25:F4:EE:3D:09:93:33 Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 16C19A7AA58BE0EE238AC96ACD9B41C0B23CC55E Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 0407 Signing time: Tue 28 Jul 2026 15:57:26 +0000 Manifest this update: Tue 28 Jul 2026 15:52:26 +0000 Manifest next update: Wed 29 Jul 2026 18:20:26 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: Ex8nMipHeJTfJ1NLRyqTTB/3fIGz+pj/Te+seJLPqeE=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 18:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c1:9a:7a:a5:8b:e0:ee:23:8a:c9:6a:cd:9b:41:c0:b2:3c:c5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Jul 28 15:52:26 2026 GMT Not After : Jul 29 18:20:26 2026 GMT Subject: CN=F3A49B2234B9CDAB9DB5B3394225F4EE3D099333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:04:99:6f:1e:fd:9c:5b:78:27:c9:a7:9c: 3f:d6:ee:31:a4:9d:d6:03:ff:38:89:ff:74:10:c4: 61:6a:7f:3c:f0:7b:23:8b:ff:82:ce:cc:0e:a6:64: 10:61:19:80:d5:54:54:ba:59:4a:fd:a8:ee:70:03: cb:a3:09:01:9a:a1:23:28:f2:89:e6:7b:51:a9:2c: 44:90:0a:5f:57:74:7e:eb:3f:ab:0e:3d:e5:26:a3: b7:9f:e3:93:9d:e3:45:2b:1d:ea:22:59:02:78:de: 7b:82:5e:59:28:22:8c:c5:1d:3b:52:c8:a7:32:d2: 4e:a6:80:2f:df:06:59:58:cf:33:d4:44:90:e9:e5: 48:91:e1:44:3e:26:bc:a7:40:9c:57:31:a4:c6:fc: 5a:09:c8:74:c5:4d:fb:6f:93:0f:a4:ae:77:7d:61: b3:e9:c9:0a:ad:21:10:41:2d:01:1f:4e:00:2f:c4: 52:4b:b2:be:af:0f:da:0b:fb:6e:6e:38:b0:32:58: 1a:8f:1e:03:4a:db:8e:a0:cc:92:13:1b:1f:99:c9: 16:2d:21:29:aa:d3:f3:bc:3b:ae:af:68:da:20:67: a0:40:ef:dd:f9:2d:72:89:6f:3e:48:50:ff:1c:da: 55:2a:20:f9:1b:50:d1:b7:70:49:7e:ce:19:e3:8e: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:9B:22:34:B9:CD:AB:9D:B5:B3:39:42:25:F4:EE:3D:09:93:33 X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:54:39:0a:2d:6b:66:30:66:76:81:59:f9:38:40:a5:10: bb:1b:de:48:a6:71:20:ce:09:39:cf:46:15:ba:3c:f9:0a:90: 3d:e1:cb:7e:e7:ad:b9:fc:9e:5c:b3:67:28:c6:9a:94:f6:2b: 27:5c:4d:29:17:fe:44:f6:3a:29:9a:f9:7a:fd:6e:e8:35:5a: 57:b2:91:78:28:c1:3a:92:e4:7a:58:2b:ad:b4:d2:c4:d7:a5: 3f:46:1f:c1:87:12:9f:1a:b1:40:eb:36:be:fb:88:e0:b5:bf: eb:8b:49:1d:62:77:3e:19:5a:49:df:b3:fa:d5:9b:58:e9:e1: 98:5b:54:e7:57:7e:d6:bf:b0:3e:44:45:57:8d:74:da:f6:49: db:1c:c4:bd:63:b1:9c:8d:b8:bc:f1:c2:a8:03:7b:d7:79:c5: 95:16:ed:67:f1:5a:e2:01:68:59:ed:a0:fd:74:ac:e5:97:cb: 27:ab:da:db:89:dc:e7:50:f7:e0:69:a4:74:0e:b1:f7:7d:42: 34:8d:df:ed:99:25:51:a0:85:43:31:10:af:87:cd:47:f8:db: b8:78:36:83:e2:b5:6b:54:6d:9f:d1:a4:11:9d:45:98:e0:28: 63:7d:1c:72:dd:06:ff:bf:37:30:1d:fd:11:29:ad:2a:f5:16: cb:71:ae:37 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUFsGaeqWL4O4jislqzZtBwLI8xV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2 MEU1MjM4OTAeFw0yNjA3MjgxNTUyMjZaFw0yNjA3MjkxODIwMjZaMDMxMTAvBgNV BAMTKEYzQTQ5QjIyMzRCOUNEQUI5REI1QjMzOTQyMjVGNEVFM0QwOTkzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vwSZbx79nFt4J8mnnD/W7jGk ndYD/ziJ/3QQxGFqfzzweyOL/4LOzA6mZBBhGYDVVFS6WUr9qO5wA8ujCQGaoSMo 8onme1GpLESQCl9XdH7rP6sOPeUmo7ef45Od40UrHeoiWQJ43nuCXlkoIozFHTtS yKcy0k6mgC/fBllYzzPURJDp5UiR4UQ+JrynQJxXMaTG/FoJyHTFTftvkw+krnd9 YbPpyQqtIRBBLQEfTgAvxFJLsr6vD9oL+25uOLAyWBqPHgNK246gzJITGx+ZyRYt ISmq0/O8O66vaNogZ6BA7935LXKJbz5IUP8c2lUqIPkbUNG3cEl+zhnjjuBrAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU86SbIjS5zaudtbM5QiX07j0JkzMwHwYDVR0j BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0 MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5 LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAXHpUOQota2YwZnaBWfk4QKUQuxveSKZxIM4JOc9GFbo8+QqQPeHLfuet ufyeXLNnKMaalPYrJ1xNKRf+RPY6KZr5ev1u6DVaV7KReCjBOpLkelgrrbTSxNel P0YfwYcSnxqxQOs2vvuI4LW/64tJHWJ3PhlaSd+z+tWbWOnhmFtU51d+1r+wPkRF V4102vZJ2xzEvWOxnI24vPHCqAN713nFlRbtZ/Fa4gFoWe2g/XSs5ZfLJ6va24nc 51D34GmkdA6x931CNI3f7ZklUaCFQzEQr4fNR/jbuHg2g+K1a1Rtn9GkEZ1FmOAo Y30cct0G/783MB39ESmtKvUWy3GuNw== -----END CERTIFICATE-----Generated at Wed Jul 29 10:35:16 2026 by rpki-client