Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          9SNlvAxYjvcrqsIyDLSWDQTddswQ5YmZ1WsxDmPc9DI=
Subject key identifier:   AB:2F:BE:0E:AE:64:C3:71:D1:61:16:5C:5F:A5:FC:D4:54:5F:5A:4D
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       019D39AEC2C6E5420CBEC6CCB526370A9FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 13:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:47 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: u3/z/yiZFPireepRhYJ+JiaWe+H2bsc/vj7ES9zYJL0=)
                          2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:c2:c6:e5:42:0c:be:c6:cc:b5:26:37:0a:9f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Mar 29 13:00:47 2026 GMT
            Not After : Mar 30 13:00:47 2026 GMT
        Subject: CN=ab2fbe0eae64c371d161165c5fa5fcd4545f5a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:94:d6:d2:15:6d:66:a7:14:6c:14:44:15:
                    bf:db:f1:9b:69:71:b9:ad:bd:c2:24:8b:4b:3c:be:
                    4c:9a:17:fb:3b:57:b3:e3:46:ad:cf:2a:92:61:d3:
                    72:96:73:5a:f6:f7:08:b9:71:d8:75:c0:5d:82:95:
                    db:87:ff:ed:c8:32:2c:63:34:3a:85:f4:2b:74:f4:
                    da:c0:20:47:50:89:c3:97:ba:de:bf:d6:38:77:05:
                    dd:f7:c2:c6:55:a3:e6:61:8d:d3:5e:a3:48:f2:66:
                    f8:c0:58:66:e3:5f:7e:ff:c6:25:3f:18:99:eb:fe:
                    b0:f9:3b:68:a0:3c:fe:76:72:85:28:bf:03:91:8a:
                    e5:73:41:67:52:52:df:7b:b1:a0:48:bf:6d:04:93:
                    7c:95:84:d9:51:58:0d:44:61:03:b3:16:64:26:52:
                    ae:cb:f9:cd:07:ed:b1:11:4a:79:6d:71:7b:95:03:
                    2d:d6:c9:6e:aa:9e:bb:5e:ae:8d:38:f8:66:63:55:
                    83:1a:62:b2:d1:26:05:c3:4b:40:bb:b3:6b:9a:de:
                    69:ea:5e:c6:7b:2d:2a:99:12:40:06:6e:64:40:eb:
                    e3:64:f3:37:7d:01:e7:ba:42:4d:08:5d:ee:05:45:
                    75:5a:97:e2:81:11:24:65:ae:a8:68:be:4f:01:ca:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:BE:0E:AE:64:C3:71:D1:61:16:5C:5F:A5:FC:D4:54:5F:5A:4D
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:c8:a8:d0:c6:65:dc:46:d3:7e:f2:db:e0:4a:36:36:5e:
         75:29:e7:b9:42:58:00:ec:4c:82:64:bd:8a:73:fc:58:b7:04:
         a6:82:e9:bd:1e:30:67:79:f9:89:ad:16:90:ea:62:53:ab:d0:
         42:11:a2:6d:e6:31:8b:bc:a4:4e:7b:10:ea:bc:d7:b3:a7:97:
         a5:91:39:22:11:5e:b4:c8:e6:3b:e4:93:df:d9:a3:57:14:ed:
         bd:08:3a:9b:1a:13:99:f0:b0:29:50:c8:e9:f5:6f:11:47:2e:
         48:53:5e:08:ae:a8:e8:0d:1b:07:34:ac:fa:6a:16:1e:7c:f0:
         39:9d:4d:02:b0:fc:83:ee:70:15:3e:db:1a:ed:17:7a:cb:b3:
         a6:71:a6:77:b9:80:a9:10:1f:61:af:31:bf:95:e1:6c:78:d2:
         2d:ac:85:f6:4f:cc:bb:c4:1d:dc:22:43:97:1e:f2:71:57:61:
         8b:fd:c3:36:5c:e0:7a:ad:fb:48:71:a5:ae:bc:6d:9f:a2:7d:
         30:90:95:2c:3a:36:42:b0:42:c5:a3:42:d9:f7:25:4a:33:65:
         0d:ba:33:0f:07:d4:17:9a:d7:66:ef:6d:22:f9:36:b4:34:50:
         5c:0a:d5:94:85:f7:fa:8e:ec:26:eb:94:a4:a9:24:d1:7e:62:
         61:35:ad:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsLG5UIMvsbMtSY3Cp+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MzM1ZWI2MzNmNzY5NDJiYmU5OWYxMjlhMWViODhhNGQ3
M2ZjN2MwHhcNMjYwMzI5MTMwMDQ3WhcNMjYwMzMwMTMwMDQ3WjAzMTEwLwYDVQQD
EyhhYjJmYmUwZWFlNjRjMzcxZDE2MTE2NWM1ZmE1ZmNkNDU0NWY1YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5SU1tIVbWanFGwURBW/2/GbaXG5
rb3CJItLPL5Mmhf7O1ez40atzyqSYdNylnNa9vcIuXHYdcBdgpXbh//tyDIsYzQ6
hfQrdPTawCBHUInDl7rev9Y4dwXd98LGVaPmYY3TXqNI8mb4wFhm419+/8YlPxiZ
6/6w+TtooDz+dnKFKL8DkYrlc0FnUlLfe7GgSL9tBJN8lYTZUVgNRGEDsxZkJlKu
y/nNB+2xEUp5bXF7lQMt1sluqp67Xq6NOPhmY1WDGmKy0SYFw0tAu7Nrmt5p6l7G
ey0qmRJABm5kQOvjZPM3fQHnukJNCF3uBUV1WpfigREkZa6oaL5PAcqPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsvvg6uZMNx0WEWXF+l/NRUX1pNMB8GA1UdIwQY
MBaAFHYzXrYz92lCu+mfEpoeuIpNc/x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUt
OWMyOTNmNzFhODBhLzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUtOWMyOTNmNzFhODBh
LzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCvIqNDG
ZdxG037y2+BKNjZedSnnuUJYAOxMgmS9inP8WLcEpoLpvR4wZ3n5ia0WkOpiU6vQ
QhGibeYxi7ykTnsQ6rzXs6eXpZE5IhFetMjmO+ST39mjVxTtvQg6mxoTmfCwKVDI
6fVvEUcuSFNeCK6o6A0bBzSs+moWHnzwOZ1NArD8g+5wFT7bGu0XesuzpnGmd7mA
qRAfYa8xv5XhbHjSLayF9k/Mu8Qd3CJDlx7ycVdhi/3DNlzgeq37SHGlrrxtn6J9
MJCVLDo2QrBCxaNC2fclSjNlDbozDwfUF5rXZu9tIvk2tDRQXArVlIX3+o7sJuuU
pKkk0X5iYTWttQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:10 2026 by rpki-client