Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File:                     LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier:          RZRE2WjsF/ajMukU3KcRxWSCExFpiJwJdm7V7+6mfdA=
Subject key identifier:   6D:3D:65:A1:C5:52:C1:0D:CC:42:8E:1D:78:36:BB:F8:C7:72:FE:41
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       019D296145C413751B5E0752B843EA356092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number:          076A
Signing time:             Thu 26 Mar 2026 09:02:13 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:13 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:13 +0000
Files and hashes:         1: LG48CU30hLk1-D_XATLf7bX_3Rg.roa (hash: NhPTPuk8Ihcqm9NrmrwypD1GGOXWhTlQ/Ic9+eI1nzU=)
                          2: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: cun+LK+PntpCF9Pmdq8EpD3X8PnbnDg2oesa3R0R+S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:45:c4:13:75:1b:5e:07:52:b8:43:ea:35:60:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: Mar 26 09:02:13 2026 GMT
            Not After : Mar 27 09:02:13 2026 GMT
        Subject: CN=6d3d65a1c552c10dcc428e1d7836bbf8c772fe41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:01:72:98:a8:90:d2:8f:82:1d:10:e2:a6:
                    25:6c:5d:83:4c:4f:a6:59:cb:d0:a9:cc:f1:f3:3a:
                    d1:f8:a9:b8:72:a8:34:ef:0e:3b:52:b5:86:02:76:
                    37:86:ab:26:3a:c1:24:44:5e:9c:7c:e4:cb:90:cd:
                    00:e2:9c:f1:9f:d1:24:48:17:cc:3c:03:ca:86:fa:
                    26:af:a5:18:60:07:80:69:26:bb:b6:51:72:44:90:
                    40:f2:ba:42:35:d3:0f:21:47:91:ab:e2:fa:da:cd:
                    93:55:ba:82:47:32:87:ba:fc:7c:26:62:f0:a5:af:
                    fd:13:76:4f:79:9f:d7:fa:04:9d:46:2a:33:e2:8b:
                    cc:0e:ad:2a:6d:cc:42:29:35:d5:67:2f:5e:31:81:
                    ee:ae:92:82:ad:dd:c0:86:0d:b7:16:03:f7:24:44:
                    0c:9f:a0:49:33:5a:99:ff:9e:d4:5f:95:0e:29:b5:
                    56:6c:34:d2:0a:57:43:3f:bb:06:f7:10:01:24:39:
                    4a:08:2e:2c:bf:8a:c0:10:f6:86:a4:bb:d1:40:ba:
                    62:9c:7f:8f:1e:70:c5:95:05:12:62:e6:24:f1:0a:
                    53:a9:9f:12:88:b7:13:f9:13:e0:4b:13:9a:cc:43:
                    b5:b5:cc:49:2c:b9:c5:3c:92:ff:ad:f7:30:17:a2:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:65:A1:C5:52:C1:0D:CC:42:8E:1D:78:36:BB:F8:C7:72:FE:41
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:81:4a:91:dc:55:ef:19:a0:44:60:b5:71:41:30:2d:1e:
         cb:6c:d2:dd:cc:f0:3e:24:36:9b:09:a8:6f:1b:51:8b:b5:29:
         54:6e:44:97:ee:fd:3b:77:69:64:fc:a4:7e:02:58:0c:cd:5e:
         7d:9f:9c:03:e0:97:8d:60:99:47:22:89:ec:5c:ba:d1:ac:7c:
         31:41:41:5b:3e:2d:b3:36:8b:0b:82:0e:43:07:03:5e:47:e6:
         38:f4:89:4f:95:b6:20:59:82:1d:60:67:65:35:fb:8e:54:c8:
         dd:47:1a:a0:b0:0a:65:ea:a2:4f:25:d5:ca:52:c0:eb:14:e7:
         17:b9:2c:91:92:99:10:bc:1a:cd:b0:d6:82:08:2d:b0:3e:53:
         9f:88:5a:91:9f:e1:3d:36:9f:31:18:3b:9c:42:d6:2e:57:9b:
         a6:63:9c:fb:c9:5e:ec:fc:e9:f4:89:ba:4b:6f:60:c9:ee:fd:
         c0:68:ea:99:31:95:d6:df:06:73:48:d9:36:f0:e1:90:f2:94:
         1a:13:3f:60:c0:19:9e:ee:8d:69:26:4f:8b:44:59:d9:96:1e:
         3a:c2:4b:5f:29:cf:e4:35:51:4a:dc:a0:10:de:47:85:c4:3d:
         75:a9:50:8d:34:de:b1:9f:49:33:03:0b:ae:65:be:28:6f:6d:
         c1:9b:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:31 2026 by rpki-client