Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          6+msXHpQhi8GNbZcYlyEcdsIqfN2tdDR9TKHXSri9+A=
Subject key identifier:   32:38:B8:B9:94:A5:21:B7:28:1E:32:61:2F:B3:3D:15:2F:15:47:12
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       01A1DDCC529E35C10758F78CA93CDDE2611E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          074B
Signing time:             Sun 15 Nov 2026 06:01:57 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:57 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:57 +0000
Files and hashes:         1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
                          2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: WBencBwnBBDNurZDNAli0zr8/FDP/8wCQ8eJE3KrlkQ=)
                          3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
                          4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
                          5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:52:9e:35:c1:07:58:f7:8c:a9:3c:dd:e2:61:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Nov 15 06:01:57 2026 GMT
            Not After : Nov 16 06:01:57 2026 GMT
        Subject: CN=3238b8b994a521b7281e32612fb33d152f154712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:c3:f0:3d:00:11:d5:21:a5:04:44:f5:a5:
                    7a:11:0c:02:e5:39:fc:b5:82:2e:dd:7d:84:82:ea:
                    99:ef:6d:34:5c:2d:55:c7:ee:91:fe:b0:2d:44:90:
                    5c:f6:ba:f8:5b:7b:49:6f:8d:7e:ad:71:5c:c2:6d:
                    cf:bf:0c:99:2d:89:fa:3b:a6:15:90:17:f6:f7:27:
                    96:06:6a:90:95:29:23:80:5c:33:e3:a7:e6:f9:c6:
                    3e:6e:c4:3d:0f:36:71:0c:d6:fe:89:e5:94:70:40:
                    95:4b:7c:67:ec:01:ca:cf:b2:7f:0b:ea:98:7a:09:
                    98:9a:94:e0:94:4f:9d:6f:64:14:e0:e7:ce:63:2f:
                    a5:94:63:74:ab:af:a4:76:f6:e3:84:06:a9:b7:f5:
                    17:75:72:0f:09:6f:fe:b8:85:45:42:1a:8e:9c:a4:
                    9f:d4:6c:ef:fe:5a:67:3a:aa:51:bd:f0:ae:77:b8:
                    f2:80:29:63:32:cb:48:e6:d0:f5:71:48:bf:c0:c7:
                    7a:a6:64:f3:7c:6b:ca:2f:27:f5:9b:88:50:44:55:
                    e5:0e:83:45:46:1e:75:1f:6d:2f:3e:ce:74:0a:de:
                    96:ba:4f:1f:e0:cd:7b:ac:40:93:28:d2:5b:ae:d2:
                    4d:00:7d:40:77:c6:c8:54:6d:04:ac:de:26:64:e8:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:B8:B9:94:A5:21:B7:28:1E:32:61:2F:B3:3D:15:2F:15:47:12
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:aa:43:94:53:e6:1c:1d:69:7c:ff:67:94:5e:96:fa:43:bf:
         dd:31:69:0f:4c:c6:8d:6d:bb:06:cd:70:f2:06:90:c1:12:1a:
         52:82:fb:e3:a5:f5:7b:51:99:5c:61:5a:80:61:6d:50:97:ed:
         a8:49:79:33:6d:91:9b:65:ca:9c:58:65:16:d7:b9:5a:8e:b1:
         8b:82:10:27:d8:01:4d:ed:cd:8e:0d:12:90:8c:b8:bb:f0:f7:
         fd:3f:b4:95:bd:07:0e:05:f0:21:50:f5:7e:ec:e7:0a:af:64:
         ba:0c:ba:e5:8f:d2:77:e0:2d:71:b3:33:71:ac:16:a3:d1:86:
         43:ff:26:b5:ab:a7:ce:b1:56:93:6b:43:e6:c9:77:3a:0c:94:
         c2:12:78:bc:7d:95:a8:bc:68:91:6e:c4:31:ea:90:96:3c:c7:
         3a:3a:d6:cb:14:b5:f8:a0:5e:c1:b7:ad:fc:38:02:38:df:46:
         0f:39:20:6a:6a:cc:a1:43:19:ad:e4:1e:4c:23:d3:05:d3:8e:
         cf:dc:a8:2f:5a:93:b4:7f:0d:b6:02:e8:6c:80:91:57:47:33:
         07:c4:d6:cf:c4:d9:14:6f:35:d4:44:9b:31:fb:74:d4:cc:34:
         e7:b5:7a:78:83:82:17:c4:f6:13:89:dd:97:e0:5b:b6:1d:23:
         f3:c8:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:07 2026 by rpki-client