Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File:                     DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier:          NQTwRDkIwuFSORtaWq6R2xXNHxrWqWrd3uhGbJuKrfI=
Subject key identifier:   73:FD:10:19:E0:8E:BA:CF:84:F7:A7:52:D4:D7:F5:6A:1A:F3:8A:21
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer:       /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial:       019F8FB538A1C1386E0F5F2C8F02819CEF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number:          19C2
Signing time:             Thu 23 Jul 2026 16:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:46 +0000
Files and hashes:         1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: coo7Oe88uXGf1Elm2LxMqYKrtN1tJ4gRW3oTtXVuCdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:38:a1:c1:38:6e:0f:5f:2c:8f:02:81:9c:ef:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
        Validity
            Not Before: Jul 23 16:00:46 2026 GMT
            Not After : Jul 24 16:00:46 2026 GMT
        Subject: CN=73fd1019e08ebacf84f7a752d4d7f56a1af38a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:df:da:87:a1:63:2b:f6:2a:ab:25:5a:a7:
                    ae:ae:24:1e:49:81:36:61:3e:52:bd:7f:ac:f9:7d:
                    59:dd:8d:1a:9e:1a:63:4a:c4:46:51:42:33:ca:5b:
                    1c:f9:37:55:43:63:0b:eb:5a:0a:50:9f:43:4f:7e:
                    b9:87:2d:1f:a6:b9:5e:c6:6a:26:15:12:c9:fc:c5:
                    2e:ff:92:bf:75:a1:81:25:98:4b:03:1b:ac:33:56:
                    12:d6:36:2a:5b:10:b4:c9:2b:a7:61:af:2f:8e:97:
                    a7:8e:28:36:8b:1c:56:9e:82:9a:27:e8:e5:32:14:
                    15:91:bd:11:07:d4:73:99:9b:89:8f:fc:ec:d9:67:
                    02:ff:3f:c2:ad:b7:c2:83:1a:62:cb:b5:ec:5f:ef:
                    d6:0d:ad:f3:e0:e5:f5:c7:b0:c5:32:a8:c2:81:b4:
                    32:68:ea:7a:eb:c5:ae:7e:df:65:f0:fb:77:95:70:
                    0d:41:a8:a1:3c:5d:0b:5a:3f:93:0f:3e:1c:1e:18:
                    f8:15:a6:52:78:3b:b8:ef:3f:1a:01:b8:b1:c3:04:
                    35:9b:3e:d5:1a:08:c6:8d:65:a0:32:73:2a:52:d8:
                    e5:47:2f:f8:56:aa:c8:22:bc:27:37:7e:10:f9:4e:
                    aa:a8:b0:7e:54:45:db:9b:b4:5e:2f:da:c6:02:71:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:10:19:E0:8E:BA:CF:84:F7:A7:52:D4:D7:F5:6A:1A:F3:8A:21
            X509v3 Authority Key Identifier:
                keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:26:ca:ed:64:ec:1f:6c:c9:94:07:5b:2c:ed:03:89:1d:01:
         5f:f3:a5:94:5f:ac:40:91:bb:3e:c4:98:f3:8d:3d:17:94:6a:
         81:3d:2a:12:0b:b5:2e:c2:51:29:39:7d:bc:58:e8:aa:c6:ae:
         9f:eb:63:f3:f7:ac:fd:d1:1c:16:83:6e:f4:b0:bd:4a:8d:04:
         78:d2:38:6b:cf:5f:0b:3a:4b:07:de:f7:40:16:90:41:7c:92:
         ef:0a:53:30:84:02:39:2f:9a:fa:90:48:15:2a:04:e1:98:e9:
         94:50:25:e7:6f:8b:3f:7a:55:c8:d5:3a:7f:99:62:b7:3d:85:
         9f:d7:ed:0b:bf:f3:77:52:28:fc:05:55:5f:46:76:02:10:2f:
         4e:a1:2e:6b:d0:22:9f:76:24:a1:74:ae:11:28:bc:f5:e7:fb:
         c5:54:46:13:a9:95:41:91:df:c8:93:f3:8d:6b:31:ce:5d:46:
         ff:39:b8:d7:30:99:52:ac:8b:4e:c5:e2:b9:3f:75:35:90:f1:
         76:1d:fb:8b:f7:60:89:3a:98:3b:6e:2e:9a:fb:cb:cf:66:7c:
         6d:c3:b7:f1:30:9c:52:08:c9:79:59:6a:ae:18:a4:01:3f:c0:
         23:07:97:43:19:ae:1e:38:bf:f4:34:95:b1:d7:a2:c9:c6:3a:
         79:ba:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:27 2026 by rpki-client