Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File:                     dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier:          FNaq3jzu9O6iOc3L2JqFQjGMXvz/ZA3CgZxEGrJjTl0=
Subject key identifier:   19:4A:32:CA:1A:5F:6D:D9:72:F1:FD:F6:00:88:1F:72:5B:A4:2A:E4
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer:       /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial:       01A1212EAF2A741FA32BF81B760C1E1B679C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number:          010F
Signing time:             Fri 09 Oct 2026 15:01:09 +0000
Manifest this update:     Fri 09 Oct 2026 15:01:09 +0000
Manifest next update:     Sat 10 Oct 2026 15:01:09 +0000
Files and hashes:         1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: RcQQvtzqVCwei3KWkP6Cq3ikfq2umEMEGgJxHTmNF5A=)
                          2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2e:af:2a:74:1f:a3:2b:f8:1b:76:0c:1e:1b:67:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
        Validity
            Not Before: Oct  9 15:01:09 2026 GMT
            Not After : Oct 10 15:01:09 2026 GMT
        Subject: CN=194a32ca1a5f6dd972f1fdf600881f725ba42ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:06:a4:83:14:6c:09:45:2f:a9:f4:10:d3:
                    86:b5:38:7a:5c:c6:7d:03:df:d5:30:9b:21:d3:2f:
                    32:9e:24:c0:bf:23:c1:21:72:2a:33:81:c7:82:03:
                    31:cd:2d:a8:cf:47:3e:e3:10:e5:ad:2b:07:cd:66:
                    a2:a9:7c:48:e8:91:37:e5:ff:f3:34:93:aa:8b:b6:
                    11:a2:af:ab:b9:cb:1b:38:5b:5f:a1:2d:29:54:24:
                    c5:68:ee:81:59:d6:e0:19:c7:c4:35:21:83:fd:51:
                    d3:78:f7:4c:26:31:ba:ea:d2:14:50:dc:8e:78:07:
                    25:0a:20:7c:ea:5b:c1:bf:49:40:71:75:7c:f7:9e:
                    89:9b:34:ed:d2:1c:fe:86:58:ab:12:b4:84:fb:42:
                    1a:00:bc:ab:f7:ec:af:e8:b8:cc:b1:67:33:43:c0:
                    5e:01:f3:62:bb:f9:37:9b:74:ca:8b:96:9c:17:35:
                    f3:ba:61:b0:29:9c:59:af:c3:3b:05:01:49:ff:df:
                    6d:23:50:d6:50:04:df:8e:d1:fa:e0:d5:aa:72:ee:
                    8e:6f:dc:e3:b4:68:74:e9:5b:d3:bb:96:48:57:c3:
                    5a:fc:38:4d:eb:f6:24:f5:0b:6a:a5:22:91:a1:53:
                    ad:ea:e4:f8:17:c9:5b:68:e4:d6:96:a9:4b:0e:ed:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4A:32:CA:1A:5F:6D:D9:72:F1:FD:F6:00:88:1F:72:5B:A4:2A:E4
            X509v3 Authority Key Identifier:
                keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:09:1d:b6:8c:bb:c8:e7:ee:01:ad:3b:78:5a:ae:cc:1f:
         df:07:07:ac:4a:5e:d5:e1:a7:b2:6f:92:af:1a:7a:a9:76:cc:
         bf:24:9f:6b:c9:8f:7a:06:3a:c5:05:b4:39:ec:28:0a:a5:b4:
         5f:a2:e6:51:d9:5e:34:70:86:84:56:a3:5a:bc:42:17:23:49:
         be:76:b0:df:7f:e4:4c:7c:04:a2:b1:89:16:56:00:58:ab:3f:
         fd:dd:04:41:8e:eb:f8:21:74:13:82:93:dd:b1:61:42:7c:5e:
         ab:df:b5:0e:60:d0:d8:d0:3d:0d:1b:cf:ed:cd:fe:f3:c5:cf:
         21:58:31:63:a1:24:17:63:9d:fe:f3:f0:b5:4c:66:28:ea:a7:
         fc:e1:a5:0e:35:fa:76:50:d3:de:1d:3f:27:36:ab:6c:ea:7d:
         3f:19:34:33:51:96:6d:4c:34:f4:71:92:d5:1f:56:72:71:34:
         57:95:38:bc:94:1b:1e:1c:5d:e4:f5:4a:4b:b7:68:24:ba:fa:
         95:f8:0e:a2:01:85:13:93:53:a3:00:28:e0:3f:04:c9:13:74:
         52:36:c6:f9:9b:7e:1c:3f:71:76:3e:19:96:af:29:a9:43:5a:
         f9:9f:86:f2:42:44:a9:f7:24:c9:f8:92:43:78:4c:f6:f1:8c:
         5c:b5:11:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:10:52 2026 by rpki-client