Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          hkrhk3fo+jspSSn+Eh0W370B/D2iTn5o7LuLVkedZAg=
Subject key identifier:   51:1A:D8:EB:E7:74:F9:33:85:EA:63:68:E9:32:A6:37:EA:CE:DA:EE
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       019D27A891A111C64997281BD2DDA397AA2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 01:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:51 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: hALtBy/Sd5Fgw5kZNMNRifpVXomBQSw2BwPM3gkLRwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:91:a1:11:c6:49:97:28:1b:d2:dd:a3:97:aa:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Mar 26 01:00:51 2026 GMT
            Not After : Mar 27 01:00:51 2026 GMT
        Subject: CN=511ad8ebe774f93385ea6368e932a637eacedaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:84:e6:0c:75:ba:b9:d8:18:46:fe:3e:b7:
                    b2:3a:6b:36:49:5d:e7:e7:05:5a:12:d2:6e:4d:49:
                    7d:1c:37:4c:53:dd:e9:cb:9e:c1:cb:48:09:58:fd:
                    e7:38:4d:f1:ce:29:07:01:64:e1:88:52:cc:49:4b:
                    53:5b:b8:ab:24:1f:be:2f:e6:64:b0:55:be:4e:c5:
                    b8:de:48:42:44:c7:40:f7:32:15:0e:04:fc:f8:ef:
                    af:fc:51:2d:01:88:f1:51:24:2d:26:26:4c:c3:64:
                    46:6b:a3:8f:ab:32:8a:89:68:ca:f3:e5:71:4c:47:
                    bd:e3:98:6c:cb:6f:74:b0:47:34:8a:4a:3c:f2:ac:
                    1b:57:90:54:a3:4b:84:2b:41:41:f1:2d:13:27:e3:
                    75:43:3d:11:4d:48:c7:dd:52:c8:12:c2:a7:ba:73:
                    42:f3:0f:e3:ce:08:17:7d:2b:8b:80:32:a8:79:2a:
                    75:fb:50:da:d0:2d:c6:24:5b:66:ef:46:26:03:c0:
                    c1:9b:f7:df:41:32:0a:bc:60:f8:a7:69:39:d1:34:
                    b9:8d:de:f9:e9:d9:74:ca:97:01:8e:7e:f4:0b:03:
                    48:e3:eb:5c:b8:22:68:4d:7a:7d:a1:73:a6:3d:f8:
                    1d:54:10:e9:88:98:a0:cf:75:03:8b:2e:45:41:16:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:D8:EB:E7:74:F9:33:85:EA:63:68:E9:32:A6:37:EA:CE:DA:EE
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:df:8e:f2:5e:23:df:5a:99:0a:49:7c:66:96:de:5e:12:89:
         7f:67:d4:4a:61:15:f0:2b:dc:fe:cd:e8:94:35:75:d9:98:af:
         a0:f7:4c:dc:9f:79:49:fc:33:fe:53:8b:cc:e0:40:cf:d5:2b:
         5a:1b:f3:1f:70:0a:ce:c9:65:22:cd:d0:f0:8c:4e:18:1a:88:
         71:b4:9c:28:08:11:d1:ff:8c:ca:6e:a8:1c:42:5c:8a:b2:a8:
         e1:65:be:7f:42:02:f6:a8:64:36:a2:85:b7:4f:e1:db:d1:3b:
         5a:89:56:06:2f:08:fc:f7:0d:c3:4f:d4:e9:5d:96:67:cb:3a:
         07:47:97:9b:1d:c2:59:7a:65:86:af:a0:3d:19:b6:7f:0d:63:
         67:30:d1:47:7f:52:fc:6d:ac:a2:a3:b0:f9:cd:fd:71:12:d4:
         df:be:be:fa:39:bc:87:3e:fc:ad:b9:e1:7c:7c:e7:bd:f0:7b:
         c7:9d:2e:9e:ab:bd:94:79:28:90:5f:34:96:cc:6a:13:96:b5:
         4c:2e:7a:7d:d7:62:ca:33:28:bd:ef:df:2b:97:0a:d6:6c:35:
         13:c3:2b:e0:6f:17:01:26:a5:2f:4d:ad:eb:97:94:de:4f:b1:
         1b:0d:f6:ea:6c:1a:77:f0:f6:fe:18:0f:b0:fe:04:26:62:6f:
         a4:b2:ef:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJGhEcZJlygb0t2jl6ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjA4YjE5ZDhjYjU4NjU3NjY2YmJjOWU3OTJiNjM0Yzdj
ZjMxYTUwHhcNMjYwMzI2MDEwMDUxWhcNMjYwMzI3MDEwMDUxWjAzMTEwLwYDVQQD
Eyg1MTFhZDhlYmU3NzRmOTMzODVlYTYzNjhlOTMyYTYzN2VhY2VkYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fOE5gx1urnYGEb+PreyOms2SV3n
5wVaEtJuTUl9HDdMU93py57By0gJWP3nOE3xzikHAWThiFLMSUtTW7irJB++L+Zk
sFW+TsW43khCRMdA9zIVDgT8+O+v/FEtAYjxUSQtJiZMw2RGa6OPqzKKiWjK8+Vx
TEe945hsy290sEc0iko88qwbV5BUo0uEK0FB8S0TJ+N1Qz0RTUjH3VLIEsKnunNC
8w/jzggXfSuLgDKoeSp1+1Da0C3GJFtm70YmA8DBm/ffQTIKvGD4p2k50TS5jd75
6dl0ypcBjn70CwNI4+tcuCJoTXp9oXOmPfgdVBDpiJigz3UDiy5FQRb4WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEa2OvndPkzhepjaOkypjfqztruMB8GA1UdIwQY
MBaAFAwgixnYy1hldma7yeeStjTHzzGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9kOTUzMDgtNTI0NS00YWM2LWE5Mzct
NGEzNjk5ZTQzYmY3LzEvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9kOTUzMDgtNTI0NS00YWM2LWE5MzctNGEzNjk5ZTQzYmY3
LzEvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhN+O8l4j
31qZCkl8ZpbeXhKJf2fUSmEV8Cvc/s3olDV12ZivoPdM3J95Sfwz/lOLzOBAz9Ur
WhvzH3AKzsllIs3Q8IxOGBqIcbScKAgR0f+Mym6oHEJcirKo4WW+f0IC9qhkNqKF
t0/h29E7WolWBi8I/PcNw0/U6V2WZ8s6B0eXmx3CWXplhq+gPRm2fw1jZzDRR39S
/G2soqOw+c39cRLU376++jm8hz78rbnhfHznvfB7x50unqu9lHkokF80lsxqE5a1
TC56fddiyjMove/fK5cK1mw1E8Mr4G8XASalL02t65eU3k+xGw326mwad/D2/hgP
sP4EJmJvpLLv6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:55 2026 by rpki-client