Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          OtkP+sct1etZFsBLLeJHhsCBoUDSIZkrufO/us9gFf8=
Subject key identifier:   FC:04:B1:D9:4C:36:6C:65:F7:42:96:AD:63:D2:DF:67:8E:DD:51:18
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       01976D3D9464BF23B28208D3C0BCD040FF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          0EFB
Signing time:             Sat 14 Jun 2025 07:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:41 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: JYzY/6jhiMCPXTKZZlU++3wwWaTjJT0sAy7oQXOoPFw=)
                          2: lBmif3cec10f96f5KVrFOMIaqw8.roa (hash: CNoA9Jb73fZBHtmfFBZ+xq7RmTBmWpp0zyBq79wifVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:94:64:bf:23:b2:82:08:d3:c0:bc:d0:40:ff:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Jun 14 07:00:41 2025 GMT
            Not After : Jun 15 07:00:41 2025 GMT
        Subject: CN=fc04b1d94c366c65f74296ad63d2df678edd5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:32:26:5a:c3:58:de:bd:9f:c2:60:fc:c7:
                    5f:3b:59:6a:5a:a3:a8:89:5c:b8:00:91:83:9b:d8:
                    02:ad:e8:73:96:a0:41:a0:07:f5:54:93:ea:26:07:
                    0e:f3:5f:51:2c:bc:50:fe:00:be:f3:61:0e:5c:ab:
                    1f:e5:98:c1:e2:f3:ec:c6:e9:d2:0e:89:02:55:2d:
                    30:b0:1f:dc:f2:cd:f6:77:03:24:e3:c0:05:ff:86:
                    ea:a8:ad:f6:64:f2:78:c9:af:bd:38:7b:92:6e:34:
                    b7:e0:00:7c:8b:cb:37:b9:56:a3:95:36:96:47:ec:
                    9f:61:95:ba:c7:da:df:7c:1f:38:b2:46:12:b6:13:
                    9b:0b:a3:f7:d7:6f:86:1c:3e:c1:16:a8:9c:1e:0e:
                    85:8c:74:17:21:4a:56:69:c5:7b:7c:bb:5b:32:e2:
                    0f:10:c9:87:94:58:db:1e:95:53:9c:27:67:39:f3:
                    7e:a1:21:88:39:cd:09:e5:5b:76:93:6c:03:ca:a7:
                    58:16:f9:31:14:f8:af:05:e0:ba:92:48:82:ca:f6:
                    58:ca:8b:3d:e5:98:bc:ac:57:82:01:ba:dc:09:59:
                    0a:3c:80:6a:a0:b2:7d:a9:42:27:f3:09:d8:62:45:
                    d2:5c:02:e8:85:8c:10:98:bf:b7:68:f0:b1:7b:67:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:04:B1:D9:4C:36:6C:65:F7:42:96:AD:63:D2:DF:67:8E:DD:51:18
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:f3:56:7e:99:ad:83:5b:47:c2:75:e5:95:02:e6:81:42:45:
         af:7b:4b:53:62:fd:dd:43:f0:0f:aa:5b:e2:62:6e:6e:84:ef:
         85:78:0e:26:7b:a1:76:78:ff:f5:cb:4e:e2:0a:94:a7:5c:af:
         88:fb:7e:df:ff:fd:47:e4:4b:aa:2c:81:92:86:d0:04:0f:36:
         c5:8a:71:95:db:c6:5a:5e:a0:ca:ff:7f:e5:13:e3:f2:fa:03:
         f4:f4:42:58:fb:7b:10:a5:20:5e:bd:4d:c1:20:6d:24:7c:da:
         20:c0:d1:48:62:48:6f:96:22:25:5e:32:2a:dc:b3:0f:aa:fc:
         1b:a1:b4:b2:26:57:75:69:45:cd:ca:6e:7d:14:4a:d9:3c:65:
         c8:cc:4b:d9:4c:a5:86:8a:3b:f2:87:f1:98:56:25:66:9c:2c:
         5b:f4:9e:46:1e:4a:9f:2c:11:4b:92:bd:7d:58:c7:c9:e2:8b:
         02:f3:2b:0f:1e:56:4d:00:ea:81:94:43:69:2b:18:ab:75:bb:
         d7:b7:e5:78:a9:9e:41:a7:c4:1c:c8:da:d5:b7:7d:b0:8d:92:
         3f:7a:d2:6f:29:70:23:d3:2d:de:82:8c:8e:6a:d8:7e:5b:58:
         f5:75:32:41:9c:c9:44:95:50:7a:d5:53:d0:3e:1f:3d:c6:04:
         82:f3:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:08 2025 by rpki-client