Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          1sK6Yc5FzmBjVokclhi0SPm0Tcab0Jg2eQ0iUDlKYKU=
Subject key identifier:   04:A2:9B:AF:E1:49:98:16:CB:F2:7C:26:A4:EB:75:86:27:DE:11:08
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       0199FBEB2C76F1C232C05245B88FA0049963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:57 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: uke4lo/okfXoBea5Y6awa24EqDckCdFJj+/UqtyOinQ=)
                          2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2c:76:f1:c2:32:c0:52:45:b8:8f:a0:04:99:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Oct 19 10:01:57 2025 GMT
            Not After : Oct 20 10:01:57 2025 GMT
        Subject: CN=04a29bafe1499816cbf27c26a4eb758627de1108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:34:c1:c2:9b:ec:b3:d9:20:78:12:00:68:
                    63:26:77:aa:9c:d0:ef:ee:bb:f5:07:dd:9f:70:4a:
                    6b:e3:5e:aa:cd:28:ff:da:e3:2b:87:76:62:eb:1d:
                    0f:ae:7b:51:5c:bb:ff:73:df:24:8a:ec:87:97:c6:
                    a1:e9:0b:89:b1:83:35:3a:d8:0d:d1:8d:c6:40:9b:
                    dd:f7:48:06:46:e8:dc:5b:8e:cf:2d:98:df:b6:32:
                    2f:18:0e:8e:3c:62:fe:9b:37:ac:b9:32:84:17:88:
                    98:04:4b:a4:b6:33:88:09:6b:8e:bb:15:67:fb:57:
                    74:99:33:cd:bc:fd:2e:e7:e3:32:65:ca:7f:a3:f8:
                    62:34:f6:3b:ba:27:8e:ee:68:01:32:c9:d3:e6:2a:
                    c5:20:2f:c0:ba:a9:4a:1c:77:dd:a8:e5:54:fa:2e:
                    f5:b2:74:6d:45:c9:4f:ad:2d:48:ad:9a:cf:65:90:
                    df:1a:4e:31:d6:19:f9:e8:73:b7:45:0f:f7:87:cc:
                    62:70:84:5e:da:2b:bc:f3:8d:03:be:a9:b7:39:bb:
                    92:2f:a7:a8:26:eb:27:7e:07:b9:1d:32:e2:6e:c0:
                    4a:8a:17:70:5b:67:fd:24:e9:83:82:f8:89:09:44:
                    24:ec:d1:cc:67:dc:88:dd:19:15:9c:e0:04:9b:92:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A2:9B:AF:E1:49:98:16:CB:F2:7C:26:A4:EB:75:86:27:DE:11:08
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:90:be:16:44:77:3a:3b:a3:a8:38:94:8c:13:48:3d:d0:96:
         4f:ee:b9:15:f6:d1:5b:dd:8a:3f:de:05:7c:6b:41:17:59:04:
         b0:5e:00:4b:ac:0b:3d:70:3d:bb:b7:dd:3c:f3:76:5c:01:96:
         de:a8:51:59:11:5b:80:8e:37:4d:f9:4a:59:0b:0d:d9:b2:78:
         52:39:e4:ce:19:68:89:83:37:f7:f8:48:5d:e5:1a:e6:b3:68:
         8b:ff:d3:47:71:39:81:17:e4:9b:e1:9d:ef:62:ea:8e:83:32:
         03:ab:6a:1f:df:f7:5a:d0:06:84:09:18:7c:00:89:a6:f0:71:
         89:8f:2d:54:c4:cb:16:c1:0a:fe:3d:5f:74:7a:ec:c2:e2:33:
         62:08:bf:22:97:e2:ab:c1:5e:cb:ce:7e:73:2a:a3:41:6d:5a:
         b6:18:db:10:19:89:29:27:c6:2f:30:64:2e:27:e4:e9:bc:7d:
         af:61:84:15:28:4d:08:97:d5:47:34:fd:f3:db:ef:ae:24:c4:
         4a:79:34:6c:2a:0f:5b:81:ea:17:4a:4d:9f:6e:ac:5a:40:c2:
         eb:b7:73:d5:2a:43:62:f4:4b:fe:a9:3b:ad:ff:1c:c1:d5:04:
         61:fc:c1:57:3f:98:76:86:ae:06:df:62:a8:47:30:46:1e:11:
         ed:b3:86:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yx28cIywFJFuI+gBJljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MzM1ZWI2MzNmNzY5NDJiYmU5OWYxMjlhMWViODhhNGQ3
M2ZjN2MwHhcNMjUxMDE5MTAwMTU3WhcNMjUxMDIwMTAwMTU3WjAzMTEwLwYDVQQD
EygwNGEyOWJhZmUxNDk5ODE2Y2JmMjdjMjZhNGViNzU4NjI3ZGUxMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ40wcKb7LPZIHgSAGhjJneqnNDv
7rv1B92fcEpr416qzSj/2uMrh3Zi6x0PrntRXLv/c98kiuyHl8ah6QuJsYM1OtgN
0Y3GQJvd90gGRujcW47PLZjftjIvGA6OPGL+mzesuTKEF4iYBEuktjOICWuOuxVn
+1d0mTPNvP0u5+MyZcp/o/hiNPY7uieO7mgBMsnT5irFIC/AuqlKHHfdqOVU+i71
snRtRclPrS1IrZrPZZDfGk4x1hn56HO3RQ/3h8xicIRe2iu8840Dvqm3ObuSL6eo
Jusnfge5HTLibsBKihdwW2f9JOmDgviJCUQk7NHMZ9yI3RkVnOAEm5JIKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASim6/hSZgWy/J8JqTrdYYn3hEIMB8GA1UdIwQY
MBaAFHYzXrYz92lCu+mfEpoeuIpNc/x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUt
OWMyOTNmNzFhODBhLzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUtOWMyOTNmNzFhODBh
LzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5C+FkR3
OjujqDiUjBNIPdCWT+65FfbRW92KP94FfGtBF1kEsF4AS6wLPXA9u7fdPPN2XAGW
3qhRWRFbgI43TflKWQsN2bJ4UjnkzhloiYM39/hIXeUa5rNoi//TR3E5gRfkm+Gd
72LqjoMyA6tqH9/3WtAGhAkYfACJpvBxiY8tVMTLFsEK/j1fdHrswuIzYgi/Ipfi
q8Fey85+cyqjQW1athjbEBmJKSfGLzBkLifk6bx9r2GEFShNCJfVRzT989vvriTE
Snk0bCoPW4HqF0pNn26sWkDC67dz1SpDYvRL/qk7rf8cwdUEYfzBVz+YdoauBt9i
qEcwRh4R7bOG5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:03 2025 by rpki-client