Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          /l1nt+tqm9E3Dud8TlclDIWicI5tMlxszTvZl00g6lg=
Subject key identifier:   92:D0:B1:A1:46:75:74:6F:F6:DA:EA:F3:34:6A:2D:26:8F:E7:B6:B5
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       019CAB6AD5322051789061D276CAD5F210FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          11B3
Signing time:             Sun 01 Mar 2026 22:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:31 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: aU93e+ks3tS3lKYbyRbS5iCMAhj4KAkgKPZtsX17UX4=)
                          2: hdFvkjtKs9CqOAP8HlCjhA-rfX8.roa (hash: /9qat8m93Fb2TGLTVIMfphjY74FEi4sF9t0aEqwTOUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:d5:32:20:51:78:90:61:d2:76:ca:d5:f2:10:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Mar  1 22:00:31 2026 GMT
            Not After : Mar  2 22:00:31 2026 GMT
        Subject: CN=92d0b1a14675746ff6daeaf3346a2d268fe7b6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:2d:ce:f3:3e:67:0e:ce:1b:ef:7e:b9:1e:
                    32:c2:45:71:69:0a:f2:53:23:e0:99:c6:08:55:34:
                    7c:e2:e7:81:fe:4a:b9:07:b6:11:e8:4a:6a:e8:5f:
                    3f:30:19:78:ee:87:5e:41:1a:fd:44:08:e8:8f:a3:
                    bb:a0:91:50:c3:30:f8:84:95:7d:d0:ca:79:f8:f5:
                    9f:97:0b:43:75:0f:87:4f:b6:ea:55:e6:05:03:fe:
                    1e:b8:0b:9d:43:ed:a3:f6:2c:db:c7:aa:b8:d8:74:
                    94:20:0f:2a:2a:d8:65:17:ec:6f:58:9b:34:1d:cc:
                    3e:ef:f6:36:3f:47:e5:63:c2:5c:87:6c:13:5c:99:
                    79:93:02:17:d2:15:e6:48:74:bc:5d:cc:32:4d:42:
                    a9:59:ae:a8:c2:c1:e9:14:9c:45:26:e2:cc:45:51:
                    2c:dc:d4:ac:fe:50:d3:ec:c1:e8:3d:99:11:46:2d:
                    d3:31:e4:27:79:78:4a:43:6e:2d:28:7f:cf:fd:c5:
                    92:b6:9d:32:08:a2:70:7c:5d:de:ea:35:b2:bb:45:
                    01:8c:30:39:4e:b8:a4:f8:c1:34:12:c2:05:11:96:
                    3b:38:40:9a:66:1f:55:17:47:f9:10:78:a9:a5:ac:
                    22:4c:b4:f9:87:ed:5a:83:97:7b:1d:54:0b:5e:8c:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D0:B1:A1:46:75:74:6F:F6:DA:EA:F3:34:6A:2D:26:8F:E7:B6:B5
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:21:9d:48:38:c3:6d:dc:f4:4b:c1:39:01:59:5f:ca:70:02:
         84:08:83:4a:8a:82:04:7d:9d:6a:8a:a2:f2:54:77:03:ea:59:
         03:28:1b:29:79:54:64:55:95:c7:13:00:4f:6f:eb:34:c5:48:
         90:5a:c4:9f:bc:f5:e0:c6:79:bf:ad:aa:17:3c:38:2d:90:be:
         1a:81:f8:be:74:4d:f1:3f:25:d4:89:b2:0a:2b:fd:96:0d:1a:
         40:8a:82:4d:be:ca:6d:34:a9:1a:69:96:c5:45:9e:85:77:69:
         34:7a:b0:13:fd:2e:2b:9b:93:54:90:13:41:58:53:63:c2:a9:
         c0:5e:d0:b5:c8:40:9b:2a:32:e2:aa:6c:e2:cc:10:8a:8d:3b:
         0f:6a:7a:8c:b3:82:b0:7e:e3:e4:3c:3e:a0:87:f7:0d:a3:03:
         bc:3e:6a:ff:e8:4a:7c:35:e8:47:26:25:c1:c1:8f:20:4c:13:
         53:24:48:6c:42:a7:5f:e6:34:44:a8:6e:71:70:18:e7:63:47:
         44:72:15:86:5a:15:ee:f0:a2:52:a2:4f:89:3b:27:98:c7:19:
         2c:08:3e:52:15:4e:9a:33:7e:0d:4b:19:a1:3b:a6:a1:31:26:
         98:a5:8c:f7:f7:ce:5b:c2:bf:91:35:02:5f:43:ad:9e:fe:f0:
         9c:aa:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:02 2026 by rpki-client