Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          WZBaH4c5zuXAwzhb8lxn2fi6Ed6p2rqvnvseRnMcqxY=
Subject key identifier:   4B:C9:15:52:4F:BA:E5:FD:6B:13:77:75:E6:9E:0A:FB:3D:57:B0:FC
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       0197B7457CBC5C8C407FA6F87EC2F23CEB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 16:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:13 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: bYWcMiOXnqtmtPDd8lYQ6yBSTrZ5T1mxcq82jhcjHdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:7c:bc:5c:8c:40:7f:a6:f8:7e:c2:f2:3c:eb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Jun 28 16:01:13 2025 GMT
            Not After : Jun 29 16:01:13 2025 GMT
        Subject: CN=4bc915524fbae5fd6b137775e69e0afb3d57b0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0d:1e:75:36:f4:93:6e:80:d7:cc:69:9e:ae:
                    05:26:38:88:12:f7:62:ec:22:bb:1a:34:1d:20:7f:
                    64:d4:f7:ac:6c:19:7c:1b:c3:65:e1:01:0d:7b:5b:
                    9f:ae:42:1a:98:f9:f8:fe:bd:62:e1:f7:2f:4e:fb:
                    2f:14:f8:bc:39:31:be:b1:6d:dc:09:30:97:d0:1d:
                    a9:39:5f:99:20:ae:15:5b:0d:c4:87:c8:eb:be:40:
                    8f:59:e1:1b:90:f8:e9:65:f5:c3:5f:ac:68:ce:ba:
                    bd:16:d2:b4:a3:39:d6:7d:e5:06:57:ad:01:71:06:
                    e4:2b:b6:d9:7c:ef:19:16:36:61:4e:41:e5:3a:4d:
                    30:1b:b3:1e:c6:79:fd:fc:2f:4f:14:b2:af:f0:58:
                    20:02:93:df:4e:47:3d:9a:ee:96:9b:89:52:4e:88:
                    8b:5d:84:3f:45:1d:95:d7:14:0b:76:29:c4:a4:f1:
                    89:ea:80:d3:61:23:f5:a0:0f:bd:a0:f9:f8:41:b7:
                    b6:7c:b5:df:d3:40:c9:83:56:fd:eb:a7:21:97:ac:
                    3e:26:3c:77:24:bf:d9:89:f8:6a:69:a7:bc:19:d3:
                    a0:d6:87:4d:3a:ad:f0:6c:63:36:0c:25:88:28:79:
                    7e:42:36:81:f8:64:7f:84:d0:66:a4:d6:a4:1b:b0:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C9:15:52:4F:BA:E5:FD:6B:13:77:75:E6:9E:0A:FB:3D:57:B0:FC
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:48:7e:7a:53:e8:bc:10:fa:a1:3a:57:f0:a6:e2:c8:54:
         2b:33:b2:c1:6e:b2:48:ed:17:cf:b9:97:77:f8:b3:8c:51:11:
         0b:fc:bd:9e:11:93:5f:ef:09:cc:c6:22:a3:cf:94:d7:9f:d2:
         50:d3:52:a7:24:68:bf:3a:66:10:4a:d6:b9:42:c2:25:e9:1d:
         ca:23:f7:ca:ad:a9:d6:09:15:c3:cd:10:e9:10:ce:7d:a5:0c:
         29:a2:d1:29:42:25:b2:ec:36:52:b2:01:7d:b4:23:af:bb:5b:
         bf:cf:8a:e9:d4:67:ed:9d:24:e9:a4:83:a5:25:00:e4:cb:97:
         96:9b:0b:b4:be:ce:af:ff:2b:f3:98:eb:3f:c4:fd:03:9c:f4:
         4a:40:54:f7:fa:fa:3f:25:ab:67:cd:b8:0f:b5:b2:26:10:39:
         81:26:f0:66:ce:f1:61:df:81:d5:a0:9d:5c:85:5c:19:2d:f3:
         d9:4e:70:61:8e:ae:65:71:00:7e:97:7d:3a:c9:28:66:5d:47:
         65:94:92:ff:41:04:cb:4d:44:bb:7b:c4:e4:64:7f:3f:fc:9c:
         5d:72:36:21:53:b3:d6:ae:2b:94:d7:61:f2:c4:c2:b8:56:f6:
         5f:01:c8:8e:23:d6:33:99:84:c1:77:90:f0:35:c2:ac:28:64:
         b0:12:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:00 2025 by rpki-client