Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          S/z7LDwfe61b/1YlV85P376zn6d1zvnXbHcLReevlrs=
Subject key identifier:   57:EC:64:60:F0:90:FF:D2:B3:F7:B3:47:CB:07:42:00:15:E6:01:C3
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       01A107016F565541D5E66607655C328ED740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          1A89
Signing time:             Sun 04 Oct 2026 13:01:36 +0000
Manifest this update:     Sun 04 Oct 2026 13:01:36 +0000
Manifest next update:     Mon 05 Oct 2026 13:01:36 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: pEPsLwKwJfojWwPtpJ36aQkCjPLFhmxNlncgssvJfQ4=)
                          2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:01:6f:56:55:41:d5:e6:66:07:65:5c:32:8e:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Oct  4 13:01:36 2026 GMT
            Not After : Oct  5 13:01:36 2026 GMT
        Subject: CN=57ec6460f090ffd2b3f7b347cb07420015e601c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:8d:15:f6:e1:b5:b3:1c:5c:94:31:5e:5e:
                    92:1c:6f:f9:c9:62:4b:3d:ce:34:d8:ca:2b:b4:9b:
                    8c:7c:76:e6:15:f0:c5:47:f2:f5:c6:2f:43:2f:8f:
                    03:2f:8b:df:78:47:89:d7:31:0b:48:d4:07:73:d9:
                    a0:fb:92:fe:c3:6a:d9:b2:42:36:e7:ac:f4:64:b5:
                    0c:f6:11:8e:23:0b:9c:fd:d3:3c:c7:d4:23:7d:65:
                    3e:80:82:94:5a:39:99:81:35:43:7b:3f:75:9d:33:
                    91:8d:1b:21:e0:15:18:63:34:d4:85:83:6a:ed:de:
                    23:e5:4a:ea:5a:4d:a9:f7:31:14:03:46:7c:1e:bd:
                    f7:57:60:2e:d0:7b:1a:18:17:8e:e7:51:f6:e9:69:
                    b2:aa:9b:18:2b:bc:f8:77:98:b0:60:f9:9f:63:5a:
                    90:c3:aa:e5:49:23:35:79:29:f4:1f:01:fe:26:ce:
                    8d:1b:40:19:3c:a0:7a:83:57:94:dc:ef:71:65:9d:
                    e7:f8:63:bb:14:fc:cc:3c:5f:d5:9c:53:ed:24:40:
                    4a:7d:9c:0c:85:e5:9e:dd:62:7a:f8:7f:57:f2:8a:
                    02:10:64:63:d1:f1:64:4e:7d:08:7d:99:c1:ab:90:
                    db:39:65:1d:0f:d1:68:bb:b4:85:f2:91:cc:bf:4a:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:64:60:F0:90:FF:D2:B3:F7:B3:47:CB:07:42:00:15:E6:01:C3
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:4c:31:25:5a:41:3f:f0:a0:2b:94:2a:95:f5:52:fa:b6:
         81:39:cb:6b:ed:3e:84:e9:c3:fc:85:da:47:6c:79:f1:63:b3:
         8e:7c:ab:79:32:94:8c:07:71:50:fe:2b:3f:cf:dd:3f:f0:e7:
         65:f9:b6:74:93:52:2b:38:b6:95:01:65:35:a6:27:83:fd:2e:
         c5:46:d5:1e:2b:2b:c6:f7:54:f6:ac:9c:59:29:8c:6d:05:7b:
         85:24:5e:37:12:d4:eb:2a:48:a9:1e:ad:25:4d:4a:a3:16:e5:
         02:a4:17:5b:f4:0d:6d:f3:71:61:8f:08:16:c0:16:01:a4:d2:
         78:13:1c:77:74:c4:61:55:d5:b8:28:ad:17:a1:0f:c3:00:2c:
         82:cd:5e:8d:89:cc:bc:73:18:20:08:f2:2a:fa:63:34:8f:99:
         ae:9a:e8:8d:de:65:42:28:42:b2:23:f6:bd:c7:e2:61:ed:12:
         a8:ba:98:84:43:2e:ca:3b:1f:86:46:13:39:fd:7b:f5:1f:94:
         83:ab:1b:c3:c7:7f:f4:c3:72:66:82:68:b5:7a:28:cb:6d:a2:
         0d:c1:77:5b:e4:32:62:86:47:62:ce:03:17:ef:36:0e:14:bd:
         e1:62:1e:c3:75:e4:ba:a7:29:2e:d7:3f:c5:72:d2:1f:27:a3:
         72:94:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:30 2026 by rpki-client