Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          Pg4G0LCUKakxEXDWd8P/8Dq9RgS0/pI3bsJ38Rcdv+0=
Subject key identifier:   40:94:3C:0B:39:38:9D:11:B5:6D:F8:79:1E:54:42:D1:0C:B0:73:4B
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       019FA7F4BEDAAE25F7CF239577988D3A5BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          0626
Signing time:             Tue 28 Jul 2026 09:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 09:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 09:01:02 +0000
Files and hashes:         1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
                          2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: UU4RqSNSqCC57i7wtjnsPmq8bm7cA9+SIUksfN4K/kg=)
                          3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
                          4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
                          5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:be:da:ae:25:f7:cf:23:95:77:98:8d:3a:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Jul 28 09:01:02 2026 GMT
            Not After : Jul 29 09:01:02 2026 GMT
        Subject: CN=40943c0b39389d11b56df8791e5442d10cb0734b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:4b:66:a3:00:4f:6e:b6:7d:44:ed:aa:bd:
                    a0:62:b0:98:58:e0:78:9c:b4:07:29:b3:ba:3c:a4:
                    89:5c:c5:f2:34:8d:bc:e9:b3:2c:58:ee:df:04:54:
                    a8:0d:ec:a7:29:cd:08:ae:c6:aa:0a:97:61:30:ff:
                    f8:ad:c1:d2:f4:46:b4:48:dc:55:c9:cc:74:09:d2:
                    7c:98:b6:84:dc:4f:3e:04:52:f5:5a:1e:bb:71:09:
                    62:a3:ac:a2:46:40:ef:d1:7c:07:35:11:b6:c4:18:
                    ea:73:07:28:4a:21:af:03:79:4b:ac:61:02:5f:d7:
                    02:8a:e6:cd:78:5d:60:42:fe:21:c1:b8:42:46:25:
                    39:24:b0:7a:2f:92:f2:15:b1:ed:e9:bd:7a:90:1c:
                    fb:b7:45:a5:4f:f6:63:41:79:da:82:f9:91:85:aa:
                    e1:30:ee:1a:14:ca:7c:05:ac:38:30:cf:8d:6a:74:
                    7a:3c:37:e8:84:f2:85:a9:41:a0:c8:97:fb:03:4a:
                    db:85:88:c1:26:af:77:af:7d:05:fa:6e:1f:dd:a7:
                    c0:a7:6d:a6:66:44:c8:c9:e9:7f:b1:9b:40:fe:bf:
                    0f:cf:2d:da:86:e3:1a:d7:57:0b:bf:3a:2e:f9:cb:
                    a1:93:2c:fb:bb:b4:f8:a8:df:b9:b6:1d:80:c1:62:
                    d5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:3C:0B:39:38:9D:11:B5:6D:F8:79:1E:54:42:D1:0C:B0:73:4B
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:c5:94:96:3c:4a:bf:17:99:74:a6:64:7e:3c:3c:46:ff:
         18:16:78:44:5b:fd:91:7f:6a:22:d0:f4:f8:b0:df:cf:24:cf:
         f2:dd:e9:a9:ee:89:74:44:8b:85:29:8c:a0:cb:8d:0d:38:a3:
         29:6f:01:b0:a2:45:55:95:b2:1f:ed:13:13:8f:06:5a:b5:6f:
         b7:f9:38:5b:dc:ec:28:4c:57:37:ac:65:e4:20:81:e3:2b:4c:
         32:be:a8:6f:1b:ef:31:86:c0:51:2f:9b:23:b8:4c:a4:00:a9:
         02:b7:8e:ec:0e:9c:5d:1a:91:8f:1b:42:c5:22:cb:ef:7e:02:
         d3:8f:e2:c7:16:7a:f8:26:a5:b3:b3:d8:1b:40:d7:2a:e8:f1:
         e9:5d:41:42:d3:d2:f8:b7:f5:9a:44:c3:7a:50:dc:c2:58:ef:
         39:62:0b:1a:29:6a:1a:06:cf:16:65:b1:c5:ca:70:bd:1c:f8:
         b6:d9:75:bd:4e:e4:ff:4b:6f:ee:48:f6:55:33:b0:4d:cc:d8:
         d3:14:79:fd:fa:7d:4c:33:90:9a:6d:65:2b:3d:c8:fc:12:a4:
         2c:64:c0:9e:5d:34:b9:b2:4e:dd:10:56:8b:85:94:88:bd:0b:
         a6:52:96:b6:71:d7:91:53:5a:df:c6:ac:b9:13:e5:e6:14:c0:
         5b:0f:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:50 2026 by rpki-client