Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          LyuHPQbnF0NjhyEHmI/1Dz5tIBNNQQVT6jl7Rig0oXA=
Subject key identifier:   E7:24:B4:4F:6C:4D:50:D5:A2:7D:83:23:E0:AB:D7:90:F9:49:17:07
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       0198D51635062239DF870AEA0D403B0E77C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 04:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:58 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: YGcwQDJuuNgs8C+LoRlSVI9OZhAc1QZhD1TX9ABErg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:35:06:22:39:df:87:0a:ea:0d:40:3b:0e:77:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Aug 23 04:00:58 2025 GMT
            Not After : Aug 24 04:00:58 2025 GMT
        Subject: CN=e724b44f6c4d50d5a27d8323e0abd790f9491707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:93:0d:77:ca:25:76:a2:99:32:a8:94:e9:
                    5c:36:32:3c:ac:93:64:c8:a0:ea:c3:08:d9:9a:1f:
                    20:74:53:10:42:40:06:e7:1e:fb:48:3a:77:78:02:
                    11:b7:57:ef:bf:57:9c:10:25:b6:57:e9:a9:b7:a1:
                    df:ea:e3:77:7d:35:21:bd:d2:f8:2f:79:c0:7e:21:
                    60:bc:ee:35:4e:20:3e:73:b2:56:2b:a5:39:a9:5e:
                    03:3f:19:e2:67:88:12:8b:46:8e:7a:c9:74:e1:a2:
                    29:90:8c:0c:f4:1e:58:09:81:d1:00:f3:42:e7:3a:
                    5a:f2:9d:47:db:bc:42:75:c6:6e:da:b7:4d:fa:03:
                    ec:78:e9:f0:e5:90:25:c7:e0:00:39:76:36:b3:32:
                    1c:26:a1:5b:12:99:98:d5:32:9d:d9:a3:93:8e:88:
                    1b:8f:ac:f7:40:b2:3e:8d:ce:2a:97:62:b1:c9:8d:
                    ca:3b:c1:c7:cf:e4:dc:04:e2:ef:43:6c:eb:69:2f:
                    55:39:10:b0:d2:9b:04:6b:94:35:98:67:da:15:f4:
                    69:a4:04:c9:74:1f:0f:b0:c5:ea:36:88:ed:9a:5b:
                    96:af:d5:21:b2:c1:0c:f2:74:70:72:56:04:63:06:
                    04:8e:71:88:a5:49:99:cf:59:89:46:3e:35:56:39:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:B4:4F:6C:4D:50:D5:A2:7D:83:23:E0:AB:D7:90:F9:49:17:07
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:14:47:27:27:ae:41:5f:7f:33:08:4a:2b:5f:f7:d8:51:
         27:55:1d:de:89:87:67:83:31:5a:d9:65:36:83:9f:af:6f:71:
         fc:6e:21:2b:03:bb:90:01:52:94:49:af:4d:d5:d2:57:e3:e8:
         73:bb:5f:3d:ce:0e:3c:4f:4f:87:e9:62:e5:f4:c9:b5:b2:65:
         79:3d:c8:b4:5f:c9:f1:b8:be:c2:c7:7f:50:16:b8:f1:97:c6:
         19:e5:22:ac:22:6e:8d:98:5c:61:d9:9a:25:2c:89:15:0a:04:
         04:84:8d:60:04:08:5f:4c:87:f5:29:ef:36:a2:10:ea:cc:ae:
         f1:d0:bb:85:d5:fd:61:56:8e:84:c6:06:ee:be:7c:e7:9a:b5:
         bd:c9:10:c4:da:ae:ba:5f:3e:27:0a:1b:a6:70:bd:8c:c2:cd:
         fb:51:78:67:6b:93:0f:d8:35:02:d1:a6:9f:4b:ca:f3:b7:43:
         3d:ec:ee:83:50:2e:93:12:94:3d:84:d7:1f:d0:84:03:4a:e5:
         50:4b:79:a4:03:d5:34:da:cc:f8:48:e3:f3:4f:be:d0:05:a2:
         22:73:f4:be:37:08:e3:c9:56:92:cc:bb:30:6e:4a:ce:a1:29:
         02:c3:d3:cd:61:2d:52:45:83:3d:58:c3:22:3b:0a:35:20:00:
         75:7a:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:53 2025 by rpki-client