Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          lmDnch7ipefcUj7QMMeoyB4SRIDFCjEFB/PgjSbOen0=
Subject key identifier:   16:9A:FF:1C:A9:A8:E8:79:57:5F:BE:91:94:32:3D:69:34:85:48:C7
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       01A08979B488BDD069FCC7ADE9C994432116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 04:00:49 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:49 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:49 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: 9PubSYcCRQBGdo1eOlAmlYsSa+TpLi0JwICDW609o60=)
                          2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:b4:88:bd:d0:69:fc:c7:ad:e9:c9:94:43:21:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Sep 10 04:00:49 2026 GMT
            Not After : Sep 11 04:00:49 2026 GMT
        Subject: CN=169aff1ca9a8e879575fbe9194323d69348548c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:16:b1:32:19:be:33:b9:e5:0a:2b:dc:85:
                    3d:f1:50:d5:d8:b4:ac:9e:83:46:49:82:ae:3a:70:
                    9d:ee:5c:ca:66:6b:df:e8:6a:cb:b4:89:35:ec:e8:
                    5f:b5:8e:9e:b6:bb:25:99:9f:e3:35:3e:4d:af:96:
                    39:a1:00:87:dc:73:89:36:8a:16:2b:d7:92:13:a3:
                    39:05:1e:18:cc:63:24:59:63:d4:21:71:3f:d5:a2:
                    59:47:2e:f4:15:cb:e0:83:e4:42:ea:3e:33:e1:9a:
                    5c:79:6a:a7:26:ae:76:53:16:ab:5f:e8:62:d9:81:
                    1c:47:62:a4:87:5a:02:fb:43:4b:ed:c4:d8:13:1d:
                    2d:68:71:30:c2:73:5e:96:5c:60:b3:89:e2:75:37:
                    48:e4:ba:49:40:91:76:6a:fd:56:d1:0b:b9:b8:9d:
                    6f:f3:e8:29:1e:89:be:6e:16:4c:cc:7b:96:0c:e6:
                    19:32:5e:45:1d:34:8d:79:36:99:1d:6b:bf:2d:bb:
                    0a:2c:a7:98:72:7c:d4:c1:14:47:c5:0d:46:05:6b:
                    dd:26:a9:cf:7d:e1:9e:97:e1:3b:36:c6:e2:8e:31:
                    c4:62:ef:64:c4:28:43:5c:4a:41:d9:87:9e:1f:74:
                    cb:9d:9b:c7:ef:10:cb:0b:0b:e9:97:69:ee:13:a9:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:FF:1C:A9:A8:E8:79:57:5F:BE:91:94:32:3D:69:34:85:48:C7
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:81:f3:a0:4d:19:10:32:a6:a3:dc:e5:f6:b6:67:29:0a:54:
         8f:e4:d3:29:bf:5d:e6:b6:1e:13:ea:85:45:54:6c:53:f3:42:
         2d:be:11:6b:3b:bd:f3:15:f7:6f:86:c9:d5:67:15:79:63:d6:
         20:6b:b7:62:a4:36:08:06:e1:ff:d8:46:ce:1c:f0:ad:3a:10:
         0b:fd:19:69:b9:4a:1f:4f:66:6c:2a:22:bb:96:ca:2a:19:f1:
         35:6c:7a:f2:05:60:51:62:22:2d:1b:42:50:ef:30:8f:b9:af:
         d8:65:ae:1a:3c:7d:cb:e8:c1:ba:cf:54:a1:0d:25:3c:7f:c7:
         ab:2a:f5:34:6a:c9:05:1e:68:af:c3:23:f1:50:5f:03:22:16:
         a2:42:69:27:2e:7f:53:47:25:7e:29:78:92:17:55:4b:ff:ce:
         7a:bd:21:dc:30:d6:3f:16:45:e2:61:52:24:51:0b:41:81:cc:
         d3:5f:a8:f8:8a:5b:dd:70:b6:45:22:81:7e:d7:36:01:dd:bf:
         91:36:a1:3d:66:1a:ea:d1:1b:09:08:7c:36:ea:76:a6:7f:17:
         63:60:5c:b1:25:8e:85:ba:a7:b3:20:3a:94:02:88:4e:05:59:
         89:24:42:a4:e3:04:5e:34:e9:29:5e:8a:c8:5c:86:37:3d:d8:
         86:ed:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:32 2026 by rpki-client