Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          7gcBAjaq6emaO0VW+uxSsqzU4ctJ9fO9CKC0Lzns79A=
Subject key identifier:   2F:78:DD:97:83:FB:96:B6:FB:BB:2E:DD:30:BC:4F:D9:47:5B:3C:31
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       019E1EDA15D0F7D35246CE378A5502D0A6D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          1903
Signing time:             Wed 13 May 2026 01:01:09 +0000
Manifest this update:     Wed 13 May 2026 01:01:09 +0000
Manifest next update:     Thu 14 May 2026 01:01:09 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: 3zHWsdFJYXjyQO7dn5N4+iPcWa9K0jvlrJFMGSoQHbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:15:d0:f7:d3:52:46:ce:37:8a:55:02:d0:a6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: May 13 01:01:09 2026 GMT
            Not After : May 14 01:01:09 2026 GMT
        Subject: CN=2f78dd9783fb96b6fbbb2edd30bc4fd9475b3c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:a9:06:33:c3:0f:24:ba:f6:72:6c:7f:3e:
                    b6:e1:79:3d:b9:f9:24:9c:04:1b:d3:47:7b:f2:c3:
                    66:c5:5d:d5:7a:5c:bd:2c:e5:12:1d:4a:70:17:cb:
                    f9:16:b9:e4:4d:01:dd:11:22:74:52:53:02:02:20:
                    d0:17:12:80:a8:7c:03:4f:ac:b9:20:14:39:6f:8c:
                    2b:9f:99:f9:d0:fd:9d:1a:f2:a1:9c:d2:93:d2:da:
                    e7:ef:f4:82:4a:3f:6a:3a:5c:d3:01:eb:99:93:be:
                    97:b5:0f:04:3d:86:84:0c:52:7d:1c:aa:1b:43:db:
                    48:d8:00:2d:7f:ef:bc:1a:47:f0:ef:69:93:2c:a3:
                    48:c1:c6:57:11:39:96:6e:92:9e:64:db:5e:a5:b9:
                    fd:ea:bc:19:9d:b5:78:2e:78:37:d9:50:01:2a:02:
                    51:d8:fa:5c:b3:0d:7e:b9:4d:9d:ea:b5:c7:bd:2d:
                    a9:e7:ff:c5:34:b6:c6:bd:67:f8:f1:14:78:83:75:
                    ff:10:60:b9:fb:6c:77:e2:ec:c3:e8:0c:cd:8c:25:
                    02:68:ee:fe:97:34:f8:88:dc:66:41:a1:29:60:a7:
                    81:c8:01:bc:de:0f:b5:28:e8:47:f4:ea:02:7f:f1:
                    42:c0:8e:eb:28:eb:3e:43:9d:71:33:25:26:03:e1:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:78:DD:97:83:FB:96:B6:FB:BB:2E:DD:30:BC:4F:D9:47:5B:3C:31
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:85:65:b9:7d:06:4e:7f:25:83:ca:35:35:a6:2f:43:7e:
         b2:43:61:bf:05:17:39:b7:92:65:be:a8:96:e8:8f:05:42:d9:
         4a:cc:3d:03:21:e7:8e:36:94:db:37:3d:84:07:d7:cc:0b:0e:
         1c:6a:32:b8:5e:1a:d7:25:b6:ee:56:f5:4c:98:64:fc:82:5d:
         be:c4:b3:66:f2:2f:88:6e:1f:34:35:16:85:4d:f9:01:8a:f8:
         b1:a5:4d:18:2f:cb:df:ba:0a:9e:8c:2a:19:9f:5e:26:53:cd:
         de:96:ef:e6:55:ae:7b:9e:0d:03:ed:71:62:73:45:6a:c2:4a:
         18:6b:f2:23:81:dc:f6:74:dd:63:cc:eb:92:94:a9:a4:f7:bc:
         f5:f7:b0:a5:ac:79:70:ec:80:79:42:40:91:36:9a:96:61:46:
         0f:fa:b3:2e:65:73:48:4d:b8:73:ad:76:5b:3d:58:f5:d0:00:
         49:11:19:3f:0d:79:62:4e:8a:7a:0b:8e:07:fa:4a:db:90:9c:
         cd:17:77:30:de:da:a7:06:4e:25:e8:ed:19:41:73:7b:6d:67:
         27:bb:88:57:e7:81:80:d3:51:d9:d6:80:73:e3:51:3c:32:61:
         c1:af:de:5f:85:d9:1d:16:5e:6e:d9:b5:49:07:87:03:1f:60:
         44:15:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:30 2026 by rpki-client