Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          4vtrLbVyJ/Zt8XeeL90XvOzwk8DIG0SyV9gS2nJGRlw=
Subject key identifier:   F9:B1:3A:64:6B:50:61:5F:70:13:95:91:EA:3C:44:09:26:D2:47:31
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       019CAD22593B050682E7A220119B79E4492E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          049B
Signing time:             Mon 02 Mar 2026 06:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:35 +0000
Files and hashes:         1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
                          2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: 9JlZaEK4XcaIopvMLRYjRsG5dx8+6OD6k4uQ17m7Rck=)
                          3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
                          4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
                          5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:59:3b:05:06:82:e7:a2:20:11:9b:79:e4:49:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Mar  2 06:00:35 2026 GMT
            Not After : Mar  3 06:00:35 2026 GMT
        Subject: CN=f9b13a646b50615f70139591ea3c440926d24731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:7d:fd:d3:aa:c1:97:1b:cd:b1:d8:97:ad:
                    63:14:b6:5b:f4:2a:49:28:6b:39:10:c4:f2:05:ed:
                    bb:5e:de:fc:99:8a:a8:c9:8b:f2:15:84:f6:c1:1e:
                    42:aa:f0:c8:ba:d6:56:b7:6f:47:06:06:9e:a9:ca:
                    f3:0d:cf:94:2c:19:02:ab:3d:65:2c:22:5b:fd:6f:
                    ad:de:37:19:44:8d:a5:c7:11:cd:55:91:8d:9a:5c:
                    b5:2d:bd:9e:cc:6a:9c:98:28:44:fd:5c:12:d3:65:
                    51:77:c0:d1:c6:c2:22:08:6f:04:c4:ee:5c:4b:fc:
                    21:6b:75:11:13:22:27:64:75:b8:d6:44:d3:12:33:
                    77:76:37:c5:1a:04:ac:11:b3:5a:db:7f:93:54:2f:
                    c3:94:96:c1:93:f6:63:24:3c:21:dc:0f:40:cd:a8:
                    5a:d7:1a:92:5d:b2:37:64:d3:77:3c:0d:7c:4f:1c:
                    4b:f8:6f:e2:72:f1:91:1b:0f:50:cb:70:ce:eb:71:
                    b3:61:27:67:c7:8b:de:82:96:ea:74:3c:40:fb:e5:
                    9b:47:07:5d:ae:1b:cb:5c:4d:7b:2d:4c:89:c2:2f:
                    5c:26:f5:83:c6:ce:ca:07:47:a0:59:2d:84:a6:35:
                    b9:ca:38:0f:04:a8:8e:71:7a:5a:d7:ee:27:c5:cc:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:3A:64:6B:50:61:5F:70:13:95:91:EA:3C:44:09:26:D2:47:31
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:6e:bf:71:95:28:cc:10:54:18:c1:65:a1:4f:74:67:9d:
         b1:19:82:d1:ef:ab:91:57:a1:aa:f1:13:46:79:2b:21:12:6e:
         c7:71:bc:c9:94:fe:0b:e6:04:dd:8f:67:0b:8b:25:71:ac:59:
         4b:07:9c:7c:c8:de:df:c1:b0:03:8d:5d:69:98:82:3a:b7:5f:
         5c:79:0a:95:97:c9:9a:bb:72:d5:99:c4:51:75:d9:6b:29:37:
         bb:8a:98:66:06:11:ec:81:45:fa:bd:ef:c0:06:06:11:93:08:
         a8:dd:21:e9:cd:20:85:b7:43:50:1a:9e:de:fb:89:90:4c:35:
         de:d9:00:f0:02:9b:7e:9e:f4:ca:8c:25:07:d0:92:48:6d:47:
         f0:51:24:17:f7:31:7e:36:26:1d:61:0a:05:9b:c1:0f:72:ab:
         85:c5:06:e8:b0:fa:8b:51:e1:31:be:8c:7c:a8:3e:47:ab:88:
         9a:c4:1a:cf:98:ce:50:09:a3:72:69:cf:67:ce:f0:34:8e:0b:
         e2:a0:e2:ae:98:80:6e:29:4e:7f:21:6c:6e:a5:55:fa:9b:cb:
         0d:76:c2:21:1c:22:d8:e7:08:e4:8e:86:7b:45:4c:f5:dd:e5:
         5e:8d:a1:db:61:8d:0e:7e:94:92:d8:53:cb:b0:47:3a:13:94:
         55:54:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:54 2026 by rpki-client