Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File:                     dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier:          XbG/M7qZsKGzJqHZOTbT/C6T7CfHHP9oYNmO3WdjXG4=
Subject key identifier:   00:0E:50:62:7F:A2:56:91:C8:44:73:FD:D1:7C:C5:83:65:37:F4:D4
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer:       /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial:       019A50E2A7729BAA6E4F346EBD7BF890F050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number:          0F2C
Signing time:             Tue 04 Nov 2025 22:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:22 +0000
Files and hashes:         1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: LLqMxIbO9nlnbVIy//H90/dpA/NLHv24u6SC6CGhmfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:a7:72:9b:aa:6e:4f:34:6e:bd:7b:f8:90:f0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
        Validity
            Not Before: Nov  4 22:00:22 2025 GMT
            Not After : Nov  5 22:00:22 2025 GMT
        Subject: CN=000e50627fa25691c84473fdd17cc5836537f4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:00:d4:f7:aa:d3:26:2b:b5:e4:a7:32:a3:
                    56:02:d1:fe:bd:12:b8:6a:24:c0:7f:58:8a:3b:c3:
                    09:df:2c:03:ba:9d:da:a0:ec:a8:cf:e8:14:73:a4:
                    b2:64:14:93:a8:a2:0c:a4:08:ca:aa:ec:51:26:a4:
                    d2:e8:cf:f2:de:05:e6:80:bc:28:51:d8:7e:69:46:
                    a1:44:21:de:c5:d9:30:27:13:6f:5f:77:34:60:48:
                    ea:ca:e0:2c:3c:47:79:cc:86:b9:94:22:f8:20:46:
                    1d:18:15:dd:db:fb:50:19:1c:21:e4:6e:05:2e:8c:
                    88:20:7d:f8:45:ad:f9:7b:93:b1:3c:00:07:88:72:
                    b9:1e:f3:a8:64:5b:bd:c3:73:35:96:14:cd:1d:55:
                    17:ac:a4:21:cc:4f:7a:34:0f:e7:32:9a:e1:69:16:
                    73:03:fb:80:83:0e:9e:36:ec:d5:70:2e:d4:41:65:
                    61:9c:95:f9:94:d9:b1:0a:b3:83:65:b9:58:53:92:
                    8a:d9:55:01:a5:8c:f4:0a:be:89:99:49:b2:70:83:
                    e1:f2:22:92:30:70:84:2e:b3:1c:90:7f:65:0e:b4:
                    e4:a1:8a:b7:f2:41:3d:bc:91:b8:ad:28:7a:b7:61:
                    60:0d:c0:f6:e5:99:a7:9d:b0:0f:75:77:d0:a2:d7:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:50:62:7F:A2:56:91:C8:44:73:FD:D1:7C:C5:83:65:37:F4:D4
            X509v3 Authority Key Identifier:
                keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:6b:13:be:cc:d6:b3:09:a0:22:fc:32:f7:40:2a:03:23:
         e9:9f:ff:09:b6:d5:b4:0a:57:13:7d:36:ad:c5:99:04:e2:53:
         5f:89:65:20:45:f4:1f:06:b3:7b:43:90:a8:0d:eb:38:93:5f:
         55:85:1d:a6:d3:e9:3d:f8:c8:75:57:34:bb:60:4f:9b:81:2f:
         e5:14:8a:11:88:8f:75:e4:46:6e:70:45:15:13:74:b7:28:9b:
         77:c3:6c:49:b1:b4:0e:14:1b:23:12:00:ce:b0:3e:5b:03:38:
         eb:f6:cb:d6:96:cc:3b:fb:52:74:d3:ee:30:fe:0d:9b:25:b8:
         d2:ac:8a:3b:51:07:e7:17:b2:ac:a4:35:73:6a:61:87:13:72:
         52:78:87:56:69:87:d1:e3:1c:c0:8b:70:0d:38:7c:e0:9a:d8:
         47:77:fa:ad:08:6a:67:3c:d1:55:47:2b:81:39:c6:2e:4f:71:
         70:3a:9f:99:9c:5f:e3:c4:62:ef:4b:28:48:7c:e6:48:99:49:
         fe:68:85:b2:0f:b2:99:2b:a7:34:b5:bc:95:ff:f1:37:70:a9:
         46:bb:dc:dd:94:82:2e:2a:dd:b1:87:29:70:1c:9d:76:10:b9:
         71:aa:c5:58:26:80:7e:f3:26:6e:e5:40:1a:19:a6:19:ca:3f:
         dc:6d:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:25 2025 by rpki-client