Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File:                     pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier:          IS2x4WZbB69ak1iYrvmBgA3gypP/mkM1BwZ3SuETh6U=
Subject key identifier:   18:DB:6C:24:DB:B6:7C:63:52:7E:F1:59:E8:CE:E7:6B:5E:11:36:BF
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer:       /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial:       019F65DDB35969F86326644FCE4EC2BCB2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number:          19B3
Signing time:             Wed 15 Jul 2026 13:00:55 +0000
Manifest this update:     Wed 15 Jul 2026 13:00:55 +0000
Manifest next update:     Thu 16 Jul 2026 13:00:55 +0000
Files and hashes:         1: 9xtV_Pla1WgMl3ubvegTPHITTAQ.roa (hash: AXS+nn2vCSazRZVNivUy+3jk/liVHM3b04sQJUOyc0U=)
                          2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: pn5pv4gkenw7po74dYEAvBZPqCA5Lf31ysfxGYqaTYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:dd:b3:59:69:f8:63:26:64:4f:ce:4e:c2:bc:b2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
        Validity
            Not Before: Jul 15 13:00:55 2026 GMT
            Not After : Jul 16 13:00:55 2026 GMT
        Subject: CN=18db6c24dbb67c63527ef159e8cee76b5e1136bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:3a:ac:26:4d:91:ad:01:9f:43:e8:ea:c1:
                    b7:5e:58:67:b7:23:68:33:b2:45:4a:a5:6c:7d:30:
                    60:d4:ce:1d:eb:4d:02:19:7d:93:97:e1:93:3e:29:
                    21:49:fd:e9:da:21:97:03:56:f6:ef:47:9c:17:86:
                    da:4d:20:80:83:22:ef:cd:37:41:9b:95:f0:37:db:
                    8b:44:f9:6d:ca:b6:cb:08:2a:0e:98:f0:55:78:c1:
                    76:bc:0c:29:19:55:f7:49:56:bb:dd:81:64:41:45:
                    99:0f:94:cc:5b:31:a7:d0:dc:93:d7:2d:dd:8a:20:
                    1e:c7:76:db:a4:dc:9d:3c:47:81:83:1f:82:ec:81:
                    dd:55:31:d3:df:8c:e1:68:da:42:37:2d:18:b3:33:
                    2b:ed:eb:8e:12:f5:f3:8f:51:a1:66:f4:f3:76:a8:
                    a1:11:6f:d8:f1:3c:bd:27:c3:ab:90:d8:ce:91:a6:
                    b7:90:9f:5d:71:23:01:f9:2b:50:5f:78:a6:f0:37:
                    ee:31:40:1e:74:31:d1:f8:a4:43:13:ce:4f:ea:c7:
                    62:a3:b8:d1:46:3a:a7:81:c1:e3:8b:c7:3c:ee:24:
                    79:cc:79:d2:60:13:93:e2:aa:56:17:db:b9:47:79:
                    db:65:13:b6:8e:37:16:8c:70:86:bb:5b:f0:5d:9e:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:6C:24:DB:B6:7C:63:52:7E:F1:59:E8:CE:E7:6B:5E:11:36:BF
            X509v3 Authority Key Identifier:
                keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:69:92:13:ee:0f:40:89:1e:8c:2f:67:09:fa:c4:dc:20:
         95:17:c9:5d:cf:39:ff:2c:33:5f:9d:58:0f:4c:b3:11:78:38:
         26:39:d6:12:81:47:3c:8b:6c:cd:b7:61:c3:f7:b3:29:8e:fb:
         44:ab:47:44:6c:d3:d7:d4:ef:23:4b:78:f7:40:ca:55:61:8e:
         53:24:16:0b:9f:02:90:64:63:7f:a1:83:6e:62:f4:74:a1:c1:
         57:01:a8:6c:6f:52:cc:be:3e:53:94:3b:aa:c3:37:e3:94:43:
         21:a2:71:75:61:c8:6e:d1:69:01:96:2a:8a:0a:e9:1a:ad:2b:
         b7:d5:3f:a2:9f:56:63:4f:1e:98:e0:f4:82:0b:d7:98:6b:5b:
         97:34:39:44:c3:c3:c6:64:63:4c:9f:74:60:19:c9:3c:34:05:
         1a:61:ab:73:78:23:2d:c1:33:6a:bd:26:57:09:a3:58:cb:c9:
         57:4b:5f:ed:df:a9:a5:ba:35:0a:1e:2a:b8:7f:f6:83:93:51:
         6e:c0:ea:20:4e:fa:68:bd:eb:cd:cf:51:d8:6d:e2:fb:80:7e:
         7a:b5:34:f6:21:a8:87:e5:c3:6d:f8:08:00:29:38:ad:cf:56:
         73:40:5a:0e:ca:ce:0b:8d:01:1d:11:3b:a0:c1:48:fb:ce:bd:
         ec:86:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 15:01:23 2026 by rpki-client