Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File:                     pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier:          IVQsZg3XEXBaSOXDS6Py6UhNWRO6cJzb41GyVDd0s74=
Subject key identifier:   C5:BF:EF:EE:05:60:4C:BF:26:22:3D:B6:0B:53:76:12:5D:5A:57:04
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer:       /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial:       019E7C324C24857D37751347FDB15B8CF0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number:          193A
Signing time:             Sun 31 May 2026 04:02:11 +0000
Manifest this update:     Sun 31 May 2026 04:02:11 +0000
Manifest next update:     Mon 01 Jun 2026 04:02:11 +0000
Files and hashes:         1: 9xtV_Pla1WgMl3ubvegTPHITTAQ.roa (hash: AXS+nn2vCSazRZVNivUy+3jk/liVHM3b04sQJUOyc0U=)
                          2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: soOxXICKnG2+w+wAFxw+9VN30oBn0zxPi6zZhjWBNNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7c:32:4c:24:85:7d:37:75:13:47:fd:b1:5b:8c:f0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
        Validity
            Not Before: May 31 04:02:11 2026 GMT
            Not After : Jun  1 04:02:11 2026 GMT
        Subject: CN=c5bfefee05604cbf26223db60b5376125d5a5704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:7c:6f:ad:a8:ba:6f:50:fa:35:13:9e:f7:
                    0e:87:05:c6:cf:5d:75:83:e1:05:40:5a:80:91:15:
                    fe:71:d8:1b:53:b7:b2:6a:94:4f:b7:ba:ad:85:86:
                    e4:d6:16:bd:4f:4f:a8:c7:4a:20:d3:73:2e:7b:5d:
                    17:0b:b9:37:81:c2:0f:b0:25:bd:5c:67:32:48:90:
                    45:d0:cc:62:b9:80:84:dc:62:00:91:a2:24:94:f5:
                    1f:ee:80:a0:0f:8b:96:b8:0b:5e:e5:02:41:6e:31:
                    ae:5d:ce:41:c9:3e:74:4f:c4:9d:3d:4d:af:99:50:
                    18:00:f3:04:e8:2a:a3:36:56:17:da:f1:9b:be:a6:
                    da:4d:0c:cb:24:e7:3f:c5:4a:99:ba:36:ab:58:cd:
                    7a:82:a3:48:bd:7f:d7:c8:87:68:ca:09:8c:10:65:
                    6a:61:3d:e2:f3:fe:f7:6a:36:28:1f:96:45:7a:81:
                    00:4b:7f:6d:87:76:84:56:ea:4e:9d:b4:cd:99:3d:
                    c5:72:06:2f:c6:11:67:df:74:b7:04:8f:67:bf:51:
                    67:47:48:a8:65:7f:2d:3b:c0:b6:63:8d:8b:c2:6c:
                    7e:45:fd:00:de:ad:7c:4f:07:4f:b3:7c:6b:c6:5c:
                    67:d4:03:80:d8:d5:7c:39:e6:27:ad:8e:c3:24:7e:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:EF:EE:05:60:4C:BF:26:22:3D:B6:0B:53:76:12:5D:5A:57:04
            X509v3 Authority Key Identifier:
                keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:56:88:db:82:4c:fe:52:1c:e3:52:e7:02:b1:a4:ef:b0:f0:
         61:19:6b:a0:24:5e:ff:f6:0e:b4:f8:22:ca:34:f5:61:55:a4:
         c2:07:e3:e0:d1:c8:02:1d:cc:9e:4c:61:51:28:04:59:4c:f4:
         a2:64:d8:e1:de:7f:af:3e:0b:c7:2f:86:c5:3a:57:6d:7f:00:
         18:47:61:d6:09:4f:66:47:03:5f:d4:ea:97:26:bb:4d:ce:ff:
         c2:97:b9:b5:f2:3f:d6:ab:ec:a9:fc:d8:c0:72:31:21:d8:9a:
         d5:f7:f0:04:af:c8:0b:ba:37:d8:65:81:99:2e:ae:de:d2:c8:
         f4:1d:44:d4:19:af:b1:db:af:40:fb:31:30:52:2d:68:f1:2c:
         cd:98:9c:7a:88:5f:d2:df:15:7c:66:6f:21:c8:2a:0e:ef:33:
         63:d4:56:51:19:76:53:65:be:d7:e0:2a:1c:bf:6f:5f:bc:98:
         d5:ba:ef:22:11:cb:9a:8c:75:62:21:02:17:96:93:c6:b8:af:
         6b:f2:c3:dd:5e:f3:3f:1e:12:78:84:62:34:31:52:2b:bf:c9:
         1b:55:a7:72:03:b9:7c:66:25:27:3e:84:52:3e:9f:97:f3:09:
         58:95:ca:dd:21:fd:5a:de:1c:ca:ca:4b:1e:d7:4b:53:f0:be:
         15:a1:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:46:18 2026 by rpki-client