Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          DyheUIU31vrSaDbkRbsD8I9GFf+XatAL/3plaav+U74=
Subject key identifier:   0D:45:B2:11:DB:49:8B:20:BA:C2:EE:29:34:C3:62:7D:DC:31:6E:1F
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       0197B88F64A4B562658303C6AB2945700D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          0F22
Signing time:             Sat 28 Jun 2025 22:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:34 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: 7Mrap877juFTUiFAFdqi0bigb5EWGSUTAeniCeZow/8=)
                          2: lBmif3cec10f96f5KVrFOMIaqw8.roa (hash: CNoA9Jb73fZBHtmfFBZ+xq7RmTBmWpp0zyBq79wifVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:64:a4:b5:62:65:83:03:c6:ab:29:45:70:0d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Jun 28 22:01:34 2025 GMT
            Not After : Jun 29 22:01:34 2025 GMT
        Subject: CN=0d45b211db498b20bac2ee2934c3627ddc316e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:b4:ba:7b:5a:1d:90:32:ee:88:a1:5c:7f:
                    31:58:9e:d6:15:a8:bc:15:f4:5f:49:d9:b6:14:3f:
                    f0:dc:40:ae:d2:e4:26:04:dc:28:d2:4b:c2:45:71:
                    d7:ac:38:cd:d6:8e:bd:66:aa:5b:a2:1d:6f:96:29:
                    70:70:78:a3:ec:e5:da:72:2a:66:9a:c1:79:3c:3e:
                    be:b6:ef:98:c2:c8:dc:59:f1:d0:55:63:8f:ff:1e:
                    f2:d9:19:4c:ee:3e:cc:92:dd:fa:c7:54:2f:c5:55:
                    9c:40:3f:a2:5e:51:62:1c:f7:11:7a:fa:cb:0a:c9:
                    8c:04:4f:6f:30:6a:a4:fa:3f:b6:57:0f:84:72:a7:
                    6c:15:8a:be:be:ea:e8:a8:4d:c7:62:b1:b9:e8:89:
                    c7:4c:a7:4e:5e:f7:dd:3d:65:c3:26:c8:8e:7f:8f:
                    2a:ab:34:bd:7e:7d:de:30:6a:cf:4b:a8:64:bd:65:
                    c6:2b:a2:4a:20:5e:3f:28:7c:c7:09:cc:c2:08:aa:
                    47:d0:8b:42:df:ee:0c:2b:94:b3:35:88:e4:f0:23:
                    d3:11:0b:84:c0:bd:24:28:b9:bf:f5:c6:43:e2:fd:
                    99:a4:45:e3:4f:b1:29:23:47:af:80:bf:2c:f7:50:
                    81:88:3f:fb:e5:6a:af:64:bd:dd:b0:1a:c7:c6:b4:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:45:B2:11:DB:49:8B:20:BA:C2:EE:29:34:C3:62:7D:DC:31:6E:1F
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:54:fc:bd:15:40:31:cb:68:1d:5f:15:93:c6:c7:11:65:
         54:19:c5:90:ef:ba:65:19:08:4a:50:ec:b2:46:03:45:03:df:
         0e:a0:56:fc:cb:7d:d6:77:9d:85:1e:4e:be:ef:93:65:30:4c:
         78:ea:56:ea:18:2a:20:a9:e9:dd:90:e6:cd:e0:04:45:4c:89:
         d2:99:74:85:2d:ee:79:ac:50:40:fd:59:d1:6e:4b:41:1b:42:
         b1:89:f7:d3:02:16:09:7f:27:bd:ed:ec:2f:41:48:f7:e0:7c:
         f3:77:51:56:bd:92:61:92:94:98:b9:ad:75:1d:8b:d6:f9:6d:
         b2:95:7b:f6:e8:73:40:c4:d2:c6:56:24:65:1a:d9:68:4c:88:
         73:14:c7:b9:ed:84:8e:8a:2f:8b:29:f3:b2:d0:61:a6:46:cd:
         cb:f5:5e:12:93:78:86:9f:ed:0b:34:1d:39:6e:bd:59:55:f2:
         a0:8d:8c:c5:42:d6:27:c6:35:57:bf:1a:dd:03:80:8c:10:89:
         0c:ad:22:a5:07:a3:a6:48:5f:5c:c4:90:d8:df:20:36:00:57:
         bb:cd:99:91:d0:45:d6:39:90:c2:f2:a0:16:99:ff:ed:7b:9d:
         1e:42:b7:c6:de:c8:3c:3f:bd:93:c3:3b:84:3f:3a:dc:92:c2:
         a6:d4:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:42 2025 by rpki-client