Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          5uN2YOhhivnHAusS5KqWb7fdPgWrNIoGJNRCw5pri0Q=
Subject key identifier:   1F:E7:FF:68:7B:F1:1D:CB:C3:F4:60:B3:F0:91:33:B6:BE:AE:13:09
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       019FDA2B407011A20EDC828B6A6357A1305A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          0640
Signing time:             Fri 07 Aug 2026 03:01:35 +0000
Manifest this update:     Fri 07 Aug 2026 03:01:35 +0000
Manifest next update:     Sat 08 Aug 2026 03:01:35 +0000
Files and hashes:         1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
                          2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: ORhBmt7VDXLMrk8j1Y8i+YoaZ+w6zleiA2uM66l9l2o=)
                          3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
                          4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
                          5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:da:2b:40:70:11:a2:0e:dc:82:8b:6a:63:57:a1:30:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Aug  7 03:01:35 2026 GMT
            Not After : Aug  8 03:01:35 2026 GMT
        Subject: CN=1fe7ff687bf11dcbc3f460b3f09133b6beae1309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:4d:fd:ab:7c:34:85:7f:84:36:b0:61:81:
                    3d:84:b7:67:b6:ec:b8:3c:77:dd:da:64:3a:63:6b:
                    bf:47:2c:b2:b6:62:8e:a6:7c:c0:35:9b:e6:bd:da:
                    fe:fb:a3:80:b0:49:87:f2:d3:d8:15:4a:a4:fa:ee:
                    dd:b1:96:73:f8:6b:b4:13:78:36:db:42:bf:83:07:
                    77:3b:08:16:41:13:60:a5:48:ba:b7:50:3d:da:ac:
                    f9:03:8f:8e:2a:92:26:70:c2:c0:67:cd:cb:ff:71:
                    b6:5c:b7:0d:60:09:f6:0f:29:36:97:c6:50:09:f9:
                    1f:5d:67:e7:94:df:6f:fe:82:73:a1:e0:92:fa:c3:
                    31:67:60:e7:9b:e0:ee:2f:89:fb:86:ad:ad:f4:23:
                    03:d8:70:ae:dd:b4:f8:c4:df:2e:56:03:95:59:43:
                    d0:0f:a3:21:15:69:dc:87:ba:b0:1a:7c:04:52:14:
                    a7:0f:c6:e6:12:ba:aa:70:69:3c:37:bf:29:1e:96:
                    41:cd:e5:52:20:16:b1:4b:fe:16:5a:41:96:8a:d2:
                    32:19:91:fb:19:75:df:08:9a:f5:8a:36:41:e8:43:
                    4a:5e:40:e6:d6:e4:b9:ec:21:e0:6c:0f:42:c6:ac:
                    0a:0c:bf:d3:99:48:85:1c:76:ce:44:43:8f:ff:14:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:FF:68:7B:F1:1D:CB:C3:F4:60:B3:F0:91:33:B6:BE:AE:13:09
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:9f:70:32:48:f8:2c:e7:20:5c:e0:cb:3a:68:c1:e9:c8:
         52:0f:4b:84:32:e4:b4:59:a4:c3:a1:86:5d:c8:1e:5c:46:f9:
         ed:60:e3:80:a4:f7:af:58:92:34:5a:5d:b2:98:64:f2:79:6b:
         ac:31:84:7a:dd:93:0f:ee:06:ea:14:42:f3:de:db:0f:87:5f:
         51:0e:f0:a1:dd:09:35:4a:83:af:45:d8:99:f2:27:71:aa:3c:
         7e:61:76:c0:61:df:39:82:b3:52:21:75:05:fc:e6:47:76:e6:
         29:49:03:cd:47:bc:a8:1f:7b:f7:1c:0c:c0:90:d4:94:1f:54:
         dd:bd:43:d1:dd:ef:29:42:8a:06:1b:12:fc:e3:88:78:a3:d8:
         50:1d:c9:bc:b4:cb:a5:1c:82:2d:20:61:6a:1c:79:c2:64:10:
         8f:8e:ea:12:5e:d9:fd:71:e3:bb:a3:9b:92:68:61:cf:7a:8c:
         ce:2e:56:8c:04:68:9c:2d:55:9e:07:5d:0f:1b:e2:8e:54:be:
         01:11:71:7e:d4:34:4f:e5:22:e2:81:bd:72:e4:f3:2c:39:72:
         c6:70:66:66:e8:bb:22:22:86:6c:a2:da:8a:2f:ac:e2:70:a2:
         a1:1c:d4:18:e4:0a:c6:53:c6:2a:54:a0:ea:e5:49:3d:7c:f3:
         0e:a0:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 06:27:39 2026 by rpki-client