Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          rxpCK+che/aKuyasU7m9ExVpzciAmxril54lUxXHpXk=
Subject key identifier:   98:66:07:81:BC:1A:C6:66:62:DE:6C:96:13:34:EE:CB:FB:63:88:26
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       019E1F7F0424C2676DC31845663C34157033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 04:01:18 +0000
Manifest this update:     Wed 13 May 2026 04:01:18 +0000
Manifest next update:     Thu 14 May 2026 04:01:18 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: 1dqngMRWBuwdwhsPgDGm1ppBVoCDbOWKrtrWq0+eDG0=)
                          2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:04:24:c2:67:6d:c3:18:45:66:3c:34:15:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: May 13 04:01:18 2026 GMT
            Not After : May 14 04:01:18 2026 GMT
        Subject: CN=98660781bc1ac66662de6c961334eecbfb638826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:fa:80:6a:fa:f9:40:e4:51:d8:09:4b:91:
                    e3:d5:c2:82:01:db:d0:10:33:3f:ba:6c:45:72:aa:
                    39:ee:83:90:71:28:70:92:6c:be:51:56:70:eb:3a:
                    da:fd:bb:9b:4a:f3:28:b2:aa:31:b6:23:b4:0d:b7:
                    0a:cc:44:d3:7e:49:e0:4e:93:8b:17:db:b2:72:7c:
                    19:8d:32:21:c1:af:9b:be:0f:c6:96:e1:3a:eb:46:
                    ea:94:3a:97:0e:67:2b:44:34:b5:86:2c:bd:0b:b0:
                    40:2b:1b:e6:3c:f8:40:23:67:9f:c0:b6:1c:64:ae:
                    97:c3:b5:68:7b:b9:e2:40:24:1b:40:ee:06:3d:46:
                    2f:33:18:f5:47:06:d1:49:a6:08:c7:65:3c:4a:3f:
                    48:8d:3e:74:da:9c:ef:bb:d8:84:56:40:ff:c0:23:
                    97:7a:dd:e6:93:ff:f0:de:8a:07:fd:6d:dc:fe:a4:
                    53:60:e3:c1:1b:0d:68:53:52:66:aa:a0:25:d4:ba:
                    d7:56:c8:54:07:77:1d:a6:d0:83:61:ca:4e:36:9d:
                    82:6e:20:02:79:63:f7:4d:22:9f:80:69:95:be:25:
                    aa:34:4f:28:70:44:cf:60:90:ec:ee:37:05:5f:80:
                    9b:07:4d:51:76:99:f6:05:d5:f7:6b:8a:98:f0:cc:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:66:07:81:BC:1A:C6:66:62:DE:6C:96:13:34:EE:CB:FB:63:88:26
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:79:6f:2d:2f:0c:a7:9a:ee:d6:3c:89:ec:3c:b3:e3:c2:87:
         ba:17:a1:bf:cd:19:6a:d9:c9:f1:7b:dc:41:6b:c1:0c:b7:52:
         4a:28:12:76:08:b0:b6:08:b7:3a:37:bc:0c:19:57:c1:34:92:
         a1:59:24:c2:fd:4e:97:18:28:98:02:fc:16:96:b5:c8:f1:8d:
         d3:27:5d:9a:c0:68:ea:aa:11:36:de:b2:a3:50:da:ce:bc:01:
         ab:90:6a:03:14:42:f4:89:de:fc:73:85:50:4f:27:35:71:8f:
         f9:4c:23:af:94:b3:44:bc:25:ea:98:b5:6e:d8:e8:7c:b2:2b:
         ee:9a:0b:41:30:91:48:7f:b9:cd:96:75:fb:dd:c3:1a:67:29:
         77:92:53:b1:9e:3a:dd:99:fc:d9:96:3e:5d:86:83:e1:26:36:
         a9:8e:c0:25:1a:45:7d:cd:1d:23:44:a7:3a:c0:ad:d5:5f:7a:
         4a:3b:c2:d4:65:f5:fd:65:de:f3:6e:2a:12:07:35:94:db:2b:
         da:45:a9:a0:99:11:3b:4d:43:56:8c:11:12:e0:9e:99:ee:0a:
         03:0a:fb:11:0b:fd:64:d4:71:9b:c4:91:ec:cf:06:08:44:3a:
         7f:1f:3a:fe:71:b8:41:ed:2c:f2:56:8c:fe:54:83:46:c8:7a:
         21:8c:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:03 2026 by rpki-client