Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File:                     dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier:          ffge6vf7N+icQnzFaB6An/uAonqAM6RIyXt6RdBQZWw=
Subject key identifier:   C1:11:32:5D:A7:8B:C7:27:88:5A:A7:E3:08:C3:65:3C:3B:4C:CB:7E
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer:       /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial:       019CABD9606471D097147A3701B35FEBDEBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number:          1843
Signing time:             Mon 02 Mar 2026 00:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:15 +0000
Files and hashes:         1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: rxPJVrKNGVOfonFgR0lZjrhJJ0IyU4tCxKuub9Lhr+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:60:64:71:d0:97:14:7a:37:01:b3:5f:eb:de:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
        Validity
            Not Before: Mar  2 00:01:15 2026 GMT
            Not After : Mar  3 00:01:15 2026 GMT
        Subject: CN=c111325da78bc727885aa7e308c3653c3b4ccb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:08:6d:6a:a0:72:ee:f4:0c:c0:d3:ab:9c:
                    ca:8a:66:a6:94:c8:45:d7:0a:65:4e:4e:93:bd:6f:
                    a3:e3:e9:f3:3b:da:c5:2d:6a:30:00:f3:7e:b0:80:
                    48:34:a2:b7:30:39:05:d6:ff:ca:28:54:ed:33:02:
                    ec:9b:c5:45:06:a0:2f:13:ce:88:2b:83:20:85:b9:
                    a6:ef:fe:38:0c:c1:bb:b6:1d:64:3e:ce:7d:ab:62:
                    44:5e:2f:db:1b:fa:9c:34:83:39:db:fc:4b:56:cf:
                    b0:50:dd:05:77:76:c7:38:82:e0:67:71:24:61:0b:
                    db:46:67:5b:20:5a:cd:db:38:b0:5d:17:80:13:a4:
                    20:19:e3:9d:91:06:aa:21:07:88:e3:dd:32:95:9f:
                    c3:20:f2:68:61:c4:a5:37:21:b2:21:97:38:da:37:
                    90:4f:42:ba:e7:b9:02:b5:02:e0:43:69:3a:cd:a0:
                    1a:31:e3:03:3c:12:70:d1:09:1a:be:05:e1:73:64:
                    63:1b:af:3e:df:8e:30:cf:48:2b:32:11:9c:c6:5b:
                    9c:38:ee:8a:f2:68:4f:25:30:6c:84:f3:ae:d6:a3:
                    77:e7:35:cf:15:2d:3e:b3:ae:53:9b:3d:25:da:11:
                    60:91:01:39:55:14:c6:a1:78:73:8f:aa:a9:3f:bf:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:32:5D:A7:8B:C7:27:88:5A:A7:E3:08:C3:65:3C:3B:4C:CB:7E
            X509v3 Authority Key Identifier:
                keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:5b:5c:7b:bd:9a:67:f9:79:93:b5:dd:86:4e:be:03:f2:
         19:e8:bc:c7:f4:96:00:25:51:15:a0:3c:9e:45:e8:87:c2:80:
         ec:c7:8a:cc:24:ad:be:65:58:70:66:79:7f:3f:64:f9:0e:92:
         67:1d:3b:af:2d:7e:b8:31:a8:6e:a7:71:36:38:62:aa:8f:07:
         df:48:54:0d:a8:de:4d:3a:70:ad:0b:b5:70:97:d7:1d:4d:11:
         05:57:61:bd:86:14:5f:b5:28:dc:4b:7d:72:6e:59:60:01:4f:
         40:62:2d:59:fc:6d:5f:10:90:c1:f5:26:28:cf:0c:99:6e:b8:
         95:6d:9b:ae:ec:4e:c0:73:3f:78:fa:e3:8f:f4:2b:e8:45:fb:
         63:f6:1d:86:fa:fb:b1:c2:cd:70:2d:16:53:d4:c8:12:e8:db:
         31:7b:70:92:c8:9c:c0:89:bf:7e:ef:6f:ba:f5:6a:46:43:7e:
         04:f8:29:a9:b2:e5:b9:26:81:fc:53:3e:60:e4:e9:fb:c4:9e:
         98:5c:d8:80:a2:45:23:08:6c:5d:9d:18:3a:86:61:f7:32:96:
         cd:a2:53:17:76:f2:d8:d2:a6:dc:ed:ed:d4:b0:e2:a1:25:f1:
         66:92:b5:76:b9:d3:bb:a7:b8:1b:57:c7:7a:17:9f:47:ac:1a:
         b2:50:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:48 2026 by rpki-client