Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          +IOGOk+mjw4m/Xn8KrbJjRvLhXE3mMMhkof/r3FDDq4=
Subject key identifier:   0F:C6:06:05:ED:61:26:F0:0F:EF:75:F1:41:85:98:3B:36:C8:13:6D
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       019D371C07D2EE927FB3D38D6C822EAF66C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 01:01:17 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:17 +0000
Manifest next update:     Mon 30 Mar 2026 01:01:17 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: /dti290CDVtxfFWvqETp7SypshCb5c4me28N0AbNyBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1c:07:d2:ee:92:7f:b3:d3:8d:6c:82:2e:af:66:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Mar 29 01:01:17 2026 GMT
            Not After : Mar 30 01:01:17 2026 GMT
        Subject: CN=0fc60605ed6126f00fef75f14185983b36c8136d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:3a:84:ca:17:d6:f3:66:d3:eb:d1:4a:9e:
                    82:22:f6:45:3b:62:a5:d8:4d:18:e9:f9:2b:41:9f:
                    88:fa:02:9c:fe:68:64:69:17:6d:26:f9:d3:60:fd:
                    b5:6e:fd:69:66:a0:90:27:2f:9d:46:91:ae:32:f5:
                    84:9b:53:b5:75:e1:c3:43:90:77:6a:a1:c6:97:75:
                    d8:7d:01:ed:7c:f4:c5:43:4c:23:1f:91:1d:ef:a9:
                    c7:b2:bc:08:74:e3:4a:7e:98:f4:d3:77:20:bf:e5:
                    70:53:14:b7:ae:7e:63:49:2f:c6:c6:12:28:4d:1a:
                    05:98:d1:66:b3:ee:da:dd:5b:11:83:b6:d4:ca:e0:
                    4b:1d:92:2f:ce:10:ae:4d:68:42:5e:bc:e9:77:77:
                    cb:44:f3:1d:49:7a:4e:af:e6:97:48:63:de:63:79:
                    9d:3e:fd:32:98:d2:18:5b:5d:f9:86:78:25:55:70:
                    63:25:50:c1:c1:90:e7:39:a6:0f:57:03:1d:16:e2:
                    30:06:27:99:e0:b4:c1:ac:ec:41:95:aa:c8:18:e9:
                    f9:8f:f0:60:55:a8:58:74:25:b0:15:f7:25:fb:a7:
                    02:e8:b0:b7:e3:6b:56:f7:c2:4f:ca:27:10:95:8b:
                    d6:79:a0:c2:c6:ea:54:68:24:92:6d:c7:a3:38:19:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C6:06:05:ED:61:26:F0:0F:EF:75:F1:41:85:98:3B:36:C8:13:6D
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:95:bd:61:cb:84:db:27:7f:35:5a:1e:34:ae:30:ee:2a:
         9f:ee:22:73:a8:21:b4:b1:5b:d3:80:6b:b8:ae:6e:ab:d6:f6:
         93:aa:0f:56:b8:21:10:ab:f9:57:2a:2c:a8:89:bd:a0:7c:1f:
         fb:f3:56:11:01:61:01:56:ef:25:06:f7:90:c1:23:ea:bc:53:
         e4:aa:46:91:07:69:ac:b3:24:91:36:86:81:b9:45:03:f9:75:
         12:8e:50:b4:dc:e7:ff:21:58:7e:81:12:be:2d:39:5b:ff:2d:
         e6:5d:79:8d:3f:9a:7d:9d:c1:f6:76:97:3c:e3:d5:d7:d1:19:
         25:f8:c6:7e:0b:06:f1:d5:59:85:51:02:06:a0:48:6f:d9:6a:
         2d:b8:22:be:27:37:b2:df:d8:2b:e1:92:23:f4:44:80:93:7a:
         a7:78:66:15:d7:21:92:cb:14:0b:1c:f9:10:d3:24:23:97:f0:
         c9:3a:01:7f:8b:94:bc:fc:c4:c2:a2:5f:9d:58:b8:e8:7a:b0:
         4f:b1:88:40:c4:07:46:df:ee:9d:05:f0:25:fe:f6:65:d4:79:
         e1:0b:99:ab:6d:88:47:b0:ce:8f:7b:b7:9e:4c:22:2f:1e:c8:
         99:55:bc:30:ca:26:03:86:48:ec:e4:b7:65:2d:7c:92:92:95:
         9d:04:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:45 2026 by rpki-client