Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          Hp+IVJGp9Hr4B50RbK3UJE29Rz3ay/SccI5g4WHersE=
Subject key identifier:   9F:17:AC:B7:24:A6:66:5C:14:5A:79:6D:A6:6B:0D:43:67:B6:07:0F
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       01A1404BC55DE1EAB44D016CCDEC0923BEF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 16:01:09 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:09 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:09 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: BIIpaNgyXmElyjP5pScGaFina/RtcCjbNFTCjY8/wEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4b:c5:5d:e1:ea:b4:4d:01:6c:cd:ec:09:23:be:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Oct 15 16:01:09 2026 GMT
            Not After : Oct 16 16:01:09 2026 GMT
        Subject: CN=9f17acb724a6665c145a796da66b0d4367b6070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:5b:8e:55:94:cb:aa:23:2d:cd:a5:e4:c5:
                    46:c3:10:d5:ac:e3:85:f2:db:57:0a:62:2a:a7:3c:
                    d8:47:b7:ca:a0:d3:be:d3:ce:74:cd:9d:6c:b8:d0:
                    e9:26:fc:9d:f5:75:c0:24:2b:c0:e5:dd:95:da:41:
                    e0:b3:30:68:bd:e6:7b:bf:ac:8d:5e:b0:29:05:73:
                    dc:2c:ab:1c:95:e3:10:61:9c:34:27:f9:4c:a5:6d:
                    28:cd:96:c6:91:37:f3:b1:17:16:5d:65:1e:3a:1d:
                    1d:e9:ca:af:fa:fd:11:b7:4c:2d:fe:88:f3:9f:5d:
                    d5:1f:9d:17:fa:2d:c4:c6:1c:4f:0b:8e:ee:04:52:
                    be:7d:b7:ef:1e:50:4e:10:a8:4e:ab:48:8e:68:94:
                    af:00:37:92:fe:e1:8b:6f:eb:55:70:dd:7c:df:a6:
                    c4:52:ca:73:22:31:d1:08:e3:b4:94:80:98:5e:8d:
                    84:7e:0b:b4:a0:66:92:d7:fe:28:cc:d7:68:c9:77:
                    f2:bf:df:f4:d7:b6:d1:85:52:f0:7b:1b:a4:8a:98:
                    f6:0e:55:0f:f3:1b:e5:55:0a:2e:b0:23:1b:97:09:
                    44:c2:36:84:22:97:ba:35:13:9b:7d:d7:57:60:99:
                    28:09:a6:fa:49:52:f2:ad:32:92:06:3d:fd:b9:d2:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:AC:B7:24:A6:66:5C:14:5A:79:6D:A6:6B:0D:43:67:B6:07:0F
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:3f:cd:08:2e:6c:33:94:22:cd:f7:a6:7f:2b:14:14:64:
         76:41:44:6a:92:4e:61:88:84:f5:fd:e3:b7:25:92:ca:41:f2:
         b2:37:7a:d1:aa:41:19:b2:4d:09:a5:38:b4:f9:3d:39:b7:10:
         15:0e:00:73:16:e9:6c:38:6a:14:4f:4b:10:fc:78:44:0e:90:
         37:c7:51:e5:bd:dd:a8:c4:af:d9:8b:f8:2e:61:56:12:2c:32:
         bd:64:5b:3b:b8:e0:40:77:79:8d:15:fb:20:1c:1c:3a:70:59:
         c3:cc:9b:31:07:2b:dc:7f:81:d1:25:c7:82:36:4f:5c:c7:92:
         6a:ed:55:21:08:0d:e1:b3:2d:7c:8c:c6:9a:84:cd:09:7d:a7:
         8b:68:76:e6:3a:7b:64:c8:42:45:08:6f:c5:a9:5f:10:48:83:
         a3:2e:37:fe:6d:a0:64:83:89:62:88:71:7f:8d:d4:77:7c:f7:
         d5:a4:8b:1d:f1:c3:e0:e8:0a:7f:4a:06:d7:91:d5:b2:ac:d0:
         48:08:dd:02:9e:f6:29:ea:c0:a2:fd:b1:6a:69:03:8e:34:24:
         c1:90:5b:76:cd:b2:86:eb:fc:0f:43:64:a6:b2:2b:46:01:b6:
         95:79:76:e1:5e:32:e1:4a:a4:92:1b:54:11:f8:97:fd:2e:0b:
         9a:39:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:35:00 2026 by rpki-client