Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File:                     dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier:          f/itfk5B671Cfx6Ifw+P4+03pnlhNFO7ZPxPrzdUADc=
Subject key identifier:   F1:6D:88:06:50:B3:CA:8F:06:22:EE:F5:FB:46:9C:5F:CA:30:49:60
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer:       /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial:       01A02054F8E88C177A12042DE3BCC89CF15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number:          8A
Signing time:             Thu 20 Aug 2026 18:00:34 +0000
Manifest this update:     Thu 20 Aug 2026 18:00:34 +0000
Manifest next update:     Fri 21 Aug 2026 18:00:34 +0000
Files and hashes:         1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: iZ8xRtfAnyi715pHQAkHXN6XYLCnUP62N0TTPAj2b7o=)
                          2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:54:f8:e8:8c:17:7a:12:04:2d:e3:bc:c8:9c:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
        Validity
            Not Before: Aug 20 18:00:34 2026 GMT
            Not After : Aug 21 18:00:34 2026 GMT
        Subject: CN=f16d880650b3ca8f0622eef5fb469c5fca304960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:c6:47:03:6f:77:f1:46:40:a8:98:5f:4e:
                    64:05:d1:e4:86:d5:09:27:47:53:74:55:96:b7:9e:
                    ac:96:34:9b:ec:66:d2:20:bf:b2:b0:e0:38:01:3f:
                    0d:49:72:42:77:b1:ab:8e:c1:62:7b:d0:94:2f:7a:
                    d2:f9:0f:af:d8:79:20:f6:75:6f:9b:7f:0a:86:80:
                    6c:91:ee:d4:3e:70:52:06:f7:30:0b:cf:25:ac:f6:
                    5d:5e:19:01:2f:9f:5e:ce:74:03:5a:22:79:b5:ce:
                    a6:db:6e:6f:d7:9a:89:f7:ac:1e:40:57:1f:e2:b1:
                    47:fe:12:c3:d1:11:87:bc:3b:33:04:bd:9e:24:a1:
                    d5:f5:43:31:66:50:05:4d:b4:8c:cd:4f:e0:ff:f1:
                    e5:87:37:a1:51:f7:da:f1:a2:1c:f7:d4:8b:18:9c:
                    15:23:b9:18:da:55:6b:f0:17:18:94:2b:8b:a3:78:
                    c0:bc:36:ec:1c:67:c1:6e:c7:a3:1f:ce:a3:d7:04:
                    18:33:8d:52:f2:4a:5c:89:ea:b0:bd:c3:09:44:dd:
                    f8:5b:b2:36:d3:e3:c8:b9:0e:82:6d:c4:a7:fe:dd:
                    37:f8:06:83:e9:0c:92:2d:14:28:ea:1a:03:ef:09:
                    ae:30:fb:a6:a9:f2:dd:5b:a8:3d:e0:ad:4a:12:bd:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6D:88:06:50:B3:CA:8F:06:22:EE:F5:FB:46:9C:5F:CA:30:49:60
            X509v3 Authority Key Identifier:
                keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d6:13:41:31:ab:01:33:84:ef:38:07:29:2b:56:bc:57:a4:
         6d:a7:61:39:e1:8a:e5:4a:6f:1b:34:48:fa:4f:dc:c2:80:9b:
         49:d4:46:9e:dc:69:eb:e8:9d:98:09:61:bd:ff:92:00:73:59:
         0b:fe:6d:ae:44:b8:0a:e6:a4:f7:2a:4a:94:a0:6a:c4:7a:95:
         33:a8:70:0f:a4:58:ad:be:3b:54:ae:bd:ac:f6:bc:1b:8e:b1:
         54:d0:b0:fd:dc:93:06:04:cb:81:1a:e6:4b:a9:60:32:2b:09:
         64:47:19:1a:da:36:34:18:49:d3:c2:7d:67:70:59:29:95:4c:
         4a:0d:20:70:8c:63:5a:57:ad:76:04:65:69:90:92:e0:c4:2d:
         4f:c2:b9:39:d3:85:4b:cb:f9:23:a7:ec:d2:5c:80:47:a7:63:
         7e:69:ba:d9:e3:39:9e:9f:e4:56:95:73:a5:8a:ae:61:1a:f5:
         d3:47:76:f9:4a:0b:ee:a6:30:2c:a8:f6:41:9e:3b:09:cf:c2:
         0e:a0:29:f2:2d:e8:6e:28:ad:d1:73:fc:dd:c8:7b:f7:1f:0d:
         a8:a8:5c:d0:ea:53:cd:1b:74:56:5a:55:0c:62:c2:05:5f:6d:
         e0:29:e3:28:58:56:c3:db:bc:bd:5e:6b:40:8f:35:60:f0:59:
         6e:6a:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:05 2026 by rpki-client