Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          yJ7WxLOTZRdKMDDLD5SYvpEd23Lv0PHFzkJ5Bvl6UCw=
Subject key identifier:   E6:BF:40:62:71:A8:C9:08:01:2B:6B:61:DF:4C:48:08:A2:46:4C:A0
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       019F94375DE3B1A195FC72E5608E67144824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 13:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:24 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: SRZJG5RgFMZfbG9q5WxDZFKzOysIJznhx9ZQD1jEmT4=)
                          2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:5d:e3:b1:a1:95:fc:72:e5:60:8e:67:14:48:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Jul 24 13:01:24 2026 GMT
            Not After : Jul 25 13:01:24 2026 GMT
        Subject: CN=e6bf406271a8c908012b6b61df4c4808a2464ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:4a:66:db:bb:88:bd:fa:bb:b5:55:c7:0b:
                    b0:3e:b7:83:63:66:f8:f4:0b:b2:d6:4e:29:22:e3:
                    06:c9:63:17:08:d6:f2:84:4f:37:dd:db:14:d8:e2:
                    89:7c:81:77:1e:ba:05:9c:be:ca:8d:58:1d:5d:48:
                    c5:c2:30:fb:9d:fc:9c:7b:1a:a7:22:69:75:4b:87:
                    6d:3c:58:40:df:5a:95:bd:97:25:9b:d9:1f:f3:5c:
                    3f:ea:e0:e3:50:a5:55:44:0b:74:70:f1:8f:fe:e0:
                    b3:b5:d3:54:de:39:e7:a3:0d:55:f2:93:84:ea:03:
                    61:f8:ae:61:ce:5b:31:28:61:91:62:8e:6f:b0:7f:
                    8a:cc:5a:b8:a8:59:de:7e:11:93:5b:17:4c:82:64:
                    a5:f8:5b:7a:e6:dd:f2:61:ab:3c:1d:1e:4b:2e:a6:
                    bb:f7:a1:ae:e8:0d:3d:e4:c8:06:71:e1:1e:e2:af:
                    55:c4:6b:0a:d9:9b:21:40:4e:2b:01:68:14:aa:d7:
                    d2:4f:24:5f:ec:2b:4f:94:b5:40:18:95:de:c2:c5:
                    e7:03:23:1c:85:48:ae:19:26:5d:0f:85:ae:a2:44:
                    f3:ef:b6:af:5b:ec:c8:03:6b:77:bb:85:32:0e:e9:
                    0c:5b:b0:eb:f7:ff:95:7b:37:c2:0e:14:ba:5a:db:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BF:40:62:71:A8:C9:08:01:2B:6B:61:DF:4C:48:08:A2:46:4C:A0
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:3b:b0:af:cf:37:bb:04:cb:09:9a:73:c0:e3:5f:90:41:
         ff:d5:50:71:74:a3:98:b8:7a:3e:6e:2b:79:6b:73:5f:93:82:
         f4:83:a9:10:38:af:3f:c1:4e:38:da:79:14:b4:2f:dd:ba:36:
         80:b9:53:da:9e:89:9c:00:10:3e:52:ca:d0:a0:33:22:97:07:
         cd:ee:08:0e:6e:a3:27:a4:95:f0:56:2d:91:9e:4c:3e:05:17:
         75:d8:6d:96:28:31:e7:a2:c1:1a:d0:8c:0b:e0:42:fb:72:54:
         bc:64:04:c6:0e:a7:f5:d8:4b:0c:35:ed:73:bf:bd:b8:48:5c:
         0c:dc:f5:15:2b:5c:3c:b5:9f:a7:3b:37:25:59:df:41:e0:52:
         a4:12:b8:11:d5:79:31:e6:b5:83:f6:8f:cf:9d:03:66:4d:70:
         e5:3d:00:ba:17:e8:a1:cc:80:25:09:dc:f3:ac:22:5b:ec:40:
         22:5b:20:20:99:7e:48:13:f8:1c:28:00:de:89:37:46:74:88:
         d0:18:a8:56:8b:53:45:e3:c8:03:9b:65:af:fd:a2:50:91:2f:
         1b:8d:64:3a:76:19:c5:35:7b:1f:b7:5e:39:4e:58:e4:3c:c8:
         0b:6b:14:ba:33:a3:41:86:b3:52:34:55:18:95:16:2c:8b:4e:
         69:7e:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:53 2026 by rpki-client