Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          mKo3Lr8Fayauuy/9aZGmMqN/331svSQh+HYyV3RwVuk=
Subject key identifier:   A1:B1:A5:5A:B0:58:B8:74:BE:96:17:4F:2D:4B:98:8C:DD:DB:85:8E
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       019A4FCFF554F911CBDED1C27B803EADAB85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          0361
Signing time:             Tue 04 Nov 2025 17:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:20 +0000
Files and hashes:         1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: hbimo1ZcA3UGyTpqEnDuujNZPQaNQe/A+jAC/ZhPqFM=)
                          2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
                          3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
                          4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
                          5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:cf:f5:54:f9:11:cb:de:d1:c2:7b:80:3e:ad:ab:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Nov  4 17:00:20 2025 GMT
            Not After : Nov  5 17:00:20 2025 GMT
        Subject: CN=a1b1a55ab058b874be96174f2d4b988cdddb858e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:39:cb:16:6d:4e:8c:b1:62:4a:27:ce:ee:
                    c0:a8:b4:8a:47:19:5b:26:0d:a4:51:e9:b1:d3:c9:
                    d3:c2:fb:02:8c:3c:f4:85:5c:70:a9:52:22:29:6b:
                    ce:fb:e9:0c:9a:6a:b6:bc:cc:9a:2c:09:fb:bb:f4:
                    ea:09:55:ed:38:18:b9:6e:43:3e:3e:37:f5:9b:89:
                    40:1e:a7:97:49:e2:fb:9e:a6:24:4b:58:00:9e:50:
                    e4:99:64:cb:75:7a:73:ac:2d:c9:70:44:eb:6c:9e:
                    f4:96:02:a1:2f:43:2e:e4:80:3b:e5:cd:3f:a0:45:
                    01:cc:11:43:35:ac:87:73:a5:45:a9:b5:3e:a1:8f:
                    d2:ac:37:1d:84:3b:a6:14:28:9b:4d:a5:12:b7:53:
                    d5:c1:ba:13:d4:61:db:c2:08:fa:51:2d:2b:38:88:
                    16:3d:39:5f:65:ad:a6:cf:b7:57:f1:9d:e1:42:c8:
                    92:01:b5:3e:34:8d:87:fe:cf:7b:7c:69:2f:62:ad:
                    e6:f4:a7:9f:5f:cc:7c:d1:1b:f8:93:c0:c2:6a:43:
                    e2:f0:62:3b:2d:ae:94:ec:27:28:a1:6e:7e:32:0e:
                    fd:0e:f8:17:ed:f8:27:91:0e:57:73:97:b9:a7:ff:
                    1f:c0:17:00:e5:aa:80:cb:95:1c:89:dd:15:ed:e1:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B1:A5:5A:B0:58:B8:74:BE:96:17:4F:2D:4B:98:8C:DD:DB:85:8E
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:60:67:f5:ab:ef:d7:30:30:7b:20:f4:cd:32:72:ef:b9:c1:
         63:de:bb:6b:0e:f5:cf:a2:31:bb:2c:05:dc:62:cd:5d:1a:f7:
         e4:52:6a:c5:41:7f:aa:0e:51:c4:36:e0:bf:6a:9d:e6:5b:98:
         63:45:b5:62:10:ef:54:b5:87:24:26:18:51:43:d0:e3:24:2d:
         50:0e:fa:a2:98:88:da:ca:4e:7d:d9:75:41:f3:10:86:0f:49:
         b2:d3:8f:cf:e7:4d:8c:25:5b:bf:ef:4d:0f:a1:81:7b:26:56:
         f9:7a:2b:ff:f6:d8:11:71:e5:0b:3c:e9:00:3b:a9:3b:36:44:
         f6:17:38:37:b2:d3:42:81:9d:1f:b5:f2:25:60:c5:11:bb:67:
         19:fc:c1:4b:45:c5:6a:56:ae:4c:3b:ef:1a:59:7e:3c:60:0d:
         e8:d8:50:db:9a:d0:ee:f5:df:b5:c9:c7:8e:40:d6:ce:3b:77:
         cf:52:39:8b:e2:64:2b:1b:86:bb:39:46:7c:60:ff:d5:be:9c:
         e3:eb:33:c2:7d:a9:f8:35:b4:09:33:80:2b:ea:0e:4b:7b:2e:
         cd:7a:77:23:ba:a0:da:00:32:2e:c3:3f:a6:f0:32:eb:36:43:
         8f:fb:b8:6f:70:48:29:87:4e:28:71:29:03:cf:b4:40:c4:2b:
         0e:ae:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:05 2025 by rpki-client