Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File:                     DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier:          ywmdq1e0N+Z3wYbtx1xA5y54Rg2MzlrGdQSa++7dWxg=
Subject key identifier:   82:44:E5:10:98:A6:77:09:40:0D:69:FC:88:F5:2A:9A:19:CF:D6:4A
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer:       /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial:       0198D7A8FEEADA65A4407C062E6299D4AE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number:          01BC
Signing time:             Sat 23 Aug 2025 16:00:33 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:33 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:33 +0000
Files and hashes:         1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: F4KbBLqFM0Y9j1od920S3wXx4Ojo/ylRi3gh0Wj/PRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:fe:ea:da:65:a4:40:7c:06:2e:62:99:d4:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
        Validity
            Not Before: Aug 23 16:00:33 2025 GMT
            Not After : Aug 24 16:00:33 2025 GMT
        Subject: CN=8244e51098a67709400d69fc88f52a9a19cfd64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:b0:2c:15:31:84:0e:89:d9:93:a0:f5:91:
                    fd:4b:fa:15:1e:a0:23:e5:41:2b:f0:b9:b8:da:ff:
                    aa:d3:f5:39:56:70:45:37:be:51:ab:1f:3f:55:af:
                    55:97:0c:86:63:6d:61:16:7c:ec:b1:0e:ce:16:86:
                    95:0b:a2:dc:db:30:d0:eb:4b:2d:81:d6:73:25:b1:
                    43:ff:fe:86:4a:1c:c1:0b:9e:93:5b:2c:40:f5:fc:
                    a6:74:3a:6a:7b:b6:48:58:ef:b4:b1:92:0b:26:24:
                    32:3b:0e:13:f2:56:7b:a1:c9:c0:60:4b:7a:f4:b8:
                    4c:10:0a:28:70:b0:a0:f4:63:73:55:b1:c2:02:36:
                    84:64:3b:cf:82:42:20:70:51:f2:2d:50:67:db:3d:
                    0f:0f:dc:34:e1:df:76:d8:20:c2:96:22:f6:bf:8e:
                    a7:11:c5:ae:76:63:56:f5:a0:67:8e:e9:06:1c:18:
                    4c:7e:da:e6:e3:9f:28:cc:d2:91:94:52:8b:4a:bc:
                    6c:70:e3:d8:05:7c:dd:eb:0a:3f:05:79:3d:48:4e:
                    3f:ef:af:a7:d6:8e:e7:5e:70:ae:83:5a:96:fc:87:
                    d4:df:a8:c5:7e:06:c9:85:cb:ac:cc:40:ec:d7:f1:
                    5c:23:eb:12:8b:74:03:19:0e:43:f1:07:89:1b:b2:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:44:E5:10:98:A6:77:09:40:0D:69:FC:88:F5:2A:9A:19:CF:D6:4A
            X509v3 Authority Key Identifier:
                keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:c1:70:6e:33:ff:09:23:e2:7b:fe:00:d4:a0:b5:f8:f5:
         de:3e:e4:77:39:a7:b6:0b:9b:db:81:b6:9a:ce:9f:0c:54:52:
         4c:fb:b2:5e:89:ae:a7:8b:3c:42:0b:b8:42:3b:c3:05:e2:6e:
         58:c5:9c:5a:de:a3:84:1b:99:d5:c2:f0:f9:35:f0:53:3f:a6:
         a6:43:b4:0b:6c:a8:d1:31:13:9e:0c:45:c1:09:2e:7c:20:27:
         81:b2:e4:70:04:2d:3e:2c:02:e2:d0:69:d2:d7:60:68:40:d3:
         66:98:69:7c:b6:13:d5:e4:7b:96:dd:fe:5d:64:89:2d:a0:e5:
         29:72:f2:23:02:59:81:d6:f4:46:9e:90:81:31:f5:ff:f4:b3:
         f1:f8:f9:c0:2d:58:54:03:ab:05:c9:a7:a6:d9:4b:93:e9:9a:
         c8:ed:00:78:50:13:f8:d6:47:0d:c7:3e:de:ef:e0:e5:9a:80:
         b2:e2:a7:2b:ba:9c:8f:50:0d:1a:12:56:e4:15:22:bd:f7:2c:
         60:d8:2b:be:02:a4:5b:b8:2b:3d:52:7a:53:38:e9:63:29:28:
         31:42:5f:10:23:9d:c0:19:cc:43:05:20:34:3f:6e:fa:23:56:
         7f:50:e8:ae:0a:bf:a1:13:50:1c:35:d0:9d:f4:04:de:18:3e:
         26:f2:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:02 2025 by rpki-client