Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          9dYZPgjTDumV7jGtZpfV/fUFQ+eryeWKUnqBNxj0z0U=
Subject key identifier:   82:85:21:43:27:4B:43:31:66:63:82:38:48:0B:A0:29:6A:FE:99:CF
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       0199FC8FA4ECEB15F2A14837B74920BEC8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 13:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:36 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: JUIrl8DdqfsNqMvusXUGNhW5W9Z5DCmHMVtfsG8NsQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a4:ec:eb:15:f2:a1:48:37:b7:49:20:be:c8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Oct 19 13:01:36 2025 GMT
            Not After : Oct 20 13:01:36 2025 GMT
        Subject: CN=82852143274b433166638238480ba0296afe99cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:ed:20:6d:fb:48:95:04:55:6d:d7:07:ec:
                    16:06:ca:69:8c:7c:08:d0:a9:2a:0a:f1:44:18:a4:
                    b6:20:fb:59:0e:da:b2:00:37:04:cf:ae:d0:61:f5:
                    b6:6d:87:9a:2e:d5:4b:35:d5:8c:b2:3e:cd:77:d1:
                    c4:73:39:6b:92:dd:89:f2:7b:33:ed:8c:0a:f4:96:
                    93:06:e3:99:08:3f:e8:ac:19:2b:83:f0:61:fe:f1:
                    d4:ac:7b:5e:0a:12:12:06:b9:60:b1:59:39:32:e5:
                    5d:4e:9a:b9:b0:18:1d:34:62:ca:4c:d3:8f:54:6a:
                    72:f0:a6:b1:dd:46:a9:95:a4:66:ea:86:0c:46:28:
                    5d:17:e7:7e:25:25:1c:fd:94:87:ca:6d:9d:30:32:
                    7f:cb:ab:c6:3d:10:f8:e5:27:8b:a7:79:57:ad:21:
                    ca:16:85:c4:57:cb:b5:9a:ea:ba:91:7a:1a:dc:c2:
                    69:7d:a1:9f:6d:75:1c:ad:d9:d5:03:3b:91:55:1a:
                    40:b7:f4:b2:7f:ef:51:1f:21:5d:c1:ab:49:5c:0a:
                    14:2e:81:b0:e7:3e:d3:78:75:48:7e:d8:6a:9d:fe:
                    12:d7:4c:cc:3c:d7:05:38:9b:2d:e5:bc:74:64:51:
                    e8:a2:d7:64:94:04:48:3b:a5:57:eb:81:87:95:f8:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:21:43:27:4B:43:31:66:63:82:38:48:0B:A0:29:6A:FE:99:CF
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:38:fb:e6:57:3d:f3:ec:8f:da:dd:9a:58:20:8f:e9:24:
         ec:2e:74:a2:81:1b:16:08:28:bd:e2:71:7f:ab:62:f8:a4:bf:
         7d:aa:6b:0e:87:9d:82:f9:21:b2:64:fa:0a:13:d0:3c:87:16:
         b2:8d:ef:80:c6:8b:6b:de:cb:30:4c:4e:1c:52:ce:30:56:dd:
         8e:e7:97:3c:4e:d3:a4:2a:3e:5c:cd:5a:8e:0f:15:65:33:2f:
         ff:28:3f:10:b2:82:1c:b4:71:00:2a:bd:75:76:95:a9:c2:d7:
         43:57:14:33:6b:03:a7:09:ff:7b:77:ce:e3:16:14:b6:ce:c7:
         89:7d:10:e4:cc:00:83:bb:ca:cf:56:f3:20:0a:b1:33:df:fe:
         3c:65:ae:73:09:be:02:62:9b:cc:14:01:3e:30:fa:6d:1e:08:
         1a:e9:80:63:42:3e:ab:ab:40:ec:6b:94:d4:30:f3:f3:65:76:
         6b:c6:71:14:c5:08:15:4d:96:80:7e:15:76:d7:4a:e4:7d:a2:
         1a:a0:ad:05:90:23:dc:d0:6a:d4:25:ca:1b:d3:3d:20:52:3f:
         6f:0f:07:e4:81:1b:3a:61:1a:0c:b3:77:97:0f:bf:e3:4c:cf:
         e6:0a:3f:27:4f:7b:e8:01:67:a7:ba:ee:d0:ae:00:87:9a:64:
         0e:a1:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:53 2025 by rpki-client