Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          CRoSvP1pnsPBmY/aeqk5lXc7KHkvBnZJTzAtTTIMA7M=
Subject key identifier:   71:8E:AD:6F:7B:55:5F:C2:93:BE:58:3A:F2:66:A6:25:23:7B:17:E9
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       019E1DFE48EAB858342EE24B3D4403A5E7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          055A
Signing time:             Tue 12 May 2026 21:01:04 +0000
Manifest this update:     Tue 12 May 2026 21:01:04 +0000
Manifest next update:     Wed 13 May 2026 21:01:04 +0000
Files and hashes:         1: HaWtTdrWNQ-t6zZT5H1gUiuvM20.roa (hash: 0sFtW/YmMWQlHvSbwsZ/uJJjwIq+PFyrE/S9UMa92io=)
                          2: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: mZTyKFMHl0bLAKvry+bpVeaMoHfzkctbBqLL8eHrACg=)
                          3: lnjlGqeSJRjiZXGR9UWwM1AXf_Q.roa (hash: aNa57xkBvP6KhWbTSSYB2DdXOWY3tvwB5/a1u/Dvisw=)
                          4: v8LWp32qq67uplk0Xqd0ZZoljJ4.roa (hash: zYG0YI6w/6VMAP0TQxIzvMtmh1Zr4RP+zGoFbX+CKtQ=)
                          5: wQ__3mS7AnuqJ-EruyFAAIOStfU.roa (hash: bg7mzla/XbjHEcTtbDSzPbOrSMtA7vkNn21Gj+YjuwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:48:ea:b8:58:34:2e:e2:4b:3d:44:03:a5:e7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: May 12 21:01:04 2026 GMT
            Not After : May 13 21:01:04 2026 GMT
        Subject: CN=718ead6f7b555fc293be583af266a625237b17e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:07:b6:f7:a9:e1:2d:7f:62:e4:fa:b1:8c:
                    8f:99:97:be:e8:f2:81:59:45:13:50:a4:52:ef:89:
                    fb:55:77:35:ff:8f:c6:2d:fd:54:55:55:bc:47:6d:
                    e4:ed:81:0f:63:bb:36:6b:e9:f6:be:2b:cd:af:5a:
                    54:63:2c:86:8d:49:57:57:93:7c:46:f4:35:50:8e:
                    ed:9f:44:40:45:6f:38:d5:f3:6b:4f:46:de:cb:6b:
                    29:12:c1:4c:ec:ae:4c:56:af:33:a6:bc:e7:2d:27:
                    b7:ae:70:dd:83:04:be:00:c8:13:ee:4d:c4:89:7a:
                    32:dc:cd:7f:de:d9:67:b3:43:57:79:2a:20:02:7e:
                    94:d0:8b:52:c9:e5:28:b3:fb:60:97:3c:2a:b3:3c:
                    0f:31:75:55:13:16:fd:73:12:fa:49:99:d7:45:06:
                    54:21:83:4a:78:69:2a:ea:3f:4d:ac:cd:ea:10:6f:
                    81:11:a8:15:ae:22:de:0c:5e:0d:12:86:2b:f7:a4:
                    b7:17:eb:2c:06:ad:98:3b:9f:bb:dc:86:c0:20:af:
                    38:25:ce:b2:e7:dc:50:17:37:35:ef:a8:45:27:63:
                    78:21:c9:53:2e:d1:45:c9:65:a2:03:af:20:82:87:
                    79:3e:c8:07:d2:56:39:6b:24:70:05:82:7e:9e:bd:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8E:AD:6F:7B:55:5F:C2:93:BE:58:3A:F2:66:A6:25:23:7B:17:E9
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:f9:88:71:4f:24:57:65:21:df:03:99:58:6f:ef:a4:c7:
         bb:9f:55:44:68:94:2f:e5:51:99:df:ff:c3:18:68:0d:64:83:
         0d:8a:d2:ac:fb:d7:e2:4c:76:d5:ec:7a:51:8b:c2:2a:00:04:
         30:8d:cb:11:dd:3a:58:76:30:29:13:84:de:56:48:22:62:e6:
         a9:a3:e4:96:5d:41:a9:5b:b0:82:dc:e9:d6:a2:e5:12:09:24:
         52:8a:ce:47:80:cd:44:ed:7b:44:0a:e4:7d:cf:98:c4:0c:50:
         8e:87:eb:6e:68:2d:c4:94:9e:82:ae:88:28:93:1d:0f:31:e3:
         15:d9:7a:0b:65:8c:ff:ff:ba:b7:7a:f9:80:ea:1f:c1:9f:00:
         9a:85:67:64:e7:7d:14:2c:08:67:50:a5:b1:7d:4f:83:31:38:
         3a:53:cf:1a:6e:68:7a:ea:e2:3b:3b:d3:a8:08:b3:95:87:86:
         2f:5c:f5:0c:81:07:d3:41:78:f0:bd:59:dd:c4:55:01:40:75:
         ea:27:90:b4:25:35:59:fb:70:37:0f:3a:80:9f:df:a0:5d:e4:
         ae:8a:6c:b5:fe:a1:52:dc:a7:71:72:d4:07:2f:39:17:71:99:
         ce:94:89:75:db:3c:f3:29:02:a8:18:53:6f:ff:26:db:f0:7b:
         43:c4:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:46 2026 by rpki-client