Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          O2ysagAyecSHT6idAwo8qvU8vk3xh6BEMHgz6GANbXg=
Subject key identifier:   C6:CC:12:CD:E3:5D:AD:75:8A:82:9B:0C:F0:31:61:74:7A:F2:3E:5E
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       019DDE440E01F9C2344A3B24179BF4240DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          0539
Signing time:             Thu 30 Apr 2026 12:01:35 +0000
Manifest this update:     Thu 30 Apr 2026 12:01:35 +0000
Manifest next update:     Fri 01 May 2026 12:01:35 +0000
Files and hashes:         1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
                          2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: ZYnqvqMoKD6xB0T6VWiFKhjRM+mux781BZobqICuMH4=)
                          3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
                          4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
                          5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:de:44:0e:01:f9:c2:34:4a:3b:24:17:9b:f4:24:0d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Apr 30 12:01:35 2026 GMT
            Not After : May  1 12:01:35 2026 GMT
        Subject: CN=c6cc12cde35dad758a829b0cf03161747af23e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:4a:4c:74:7b:3d:8d:62:ba:69:52:ff:80:
                    ef:db:f3:88:71:6f:51:4c:48:d2:06:40:e9:47:22:
                    ad:f7:80:25:7a:1c:4b:84:3a:86:a5:0a:87:57:98:
                    94:76:1b:5f:ea:bd:7f:c2:ed:69:cb:4d:04:bf:89:
                    84:09:ac:fb:a9:07:01:94:52:7f:52:55:19:3e:f3:
                    40:b0:1c:dd:07:70:35:a7:9d:2a:c1:7a:4c:bd:91:
                    3c:df:3b:54:94:c7:b5:0e:08:ec:1f:af:51:80:14:
                    66:23:8a:41:71:ea:99:aa:9f:f9:af:06:d8:d3:c7:
                    1f:53:71:00:e0:ca:99:62:f8:27:f3:f0:b9:61:ec:
                    35:b6:c9:ec:47:46:a9:96:fb:23:56:5a:df:29:4d:
                    65:a9:76:d4:95:3f:17:1b:c5:99:50:35:86:01:f4:
                    62:0e:a4:76:57:ae:12:fa:85:12:95:fb:d9:da:42:
                    55:67:15:2b:64:85:ee:4c:2d:d1:54:f3:3e:2e:5a:
                    68:d3:bd:8d:ba:dd:23:90:93:cc:76:32:85:6c:01:
                    0b:55:f1:47:29:66:c8:d8:d9:a7:5c:3c:ef:9e:40:
                    e3:45:d5:51:be:50:f9:70:fe:81:43:ad:b8:b5:73:
                    13:a6:81:38:8f:e9:5e:f0:a2:d5:21:ff:20:9f:58:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:12:CD:E3:5D:AD:75:8A:82:9B:0C:F0:31:61:74:7A:F2:3E:5E
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:bd:41:d6:72:2b:63:36:f6:06:44:68:67:2f:93:35:b8:
         7b:06:c9:ad:dc:e8:6b:1d:47:f1:40:5d:75:5d:8c:b3:4c:39:
         f6:8b:78:74:26:80:7e:d6:d5:d0:54:9e:9e:b5:16:82:d6:0b:
         15:aa:b2:ff:d9:8d:25:ba:ba:3b:95:d9:0a:d4:3a:56:aa:d7:
         cc:d3:c6:7a:2a:d8:84:86:45:82:42:0a:22:ef:c0:51:fe:bd:
         44:eb:a5:58:ba:44:1b:47:7c:5e:d9:bb:58:e1:56:6d:eb:da:
         95:a2:0f:42:91:25:5d:5d:57:06:4b:33:2c:9f:4f:eb:b6:ee:
         a1:96:48:23:50:24:49:52:03:61:34:18:82:74:8b:e3:16:3a:
         fa:26:76:40:05:f0:fb:e9:9d:81:aa:42:74:33:34:d1:73:d6:
         59:de:65:a3:26:2e:7c:fb:42:a0:cf:89:4c:98:03:e0:e8:b4:
         f8:f2:7f:d0:d2:56:6d:22:69:96:c3:b3:cd:2f:9b:c0:12:88:
         b7:03:b1:c2:47:0d:47:5a:0a:60:b9:a6:cd:d3:b9:df:92:00:
         f7:60:3b:40:81:5d:d5:65:5e:92:54:36:30:2f:90:e4:2b:f9:
         8e:52:9b:c0:5b:9e:8c:e2:51:3b:7a:46:bc:3b:3d:03:92:36:
         ee:98:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:47 2026 by rpki-client