Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          WIJNvok8v4sd2T0Fka3R0JRNZyCL4ZSTzKJEynfsSr8=
Subject key identifier:   42:07:71:D3:7C:BF:38:62:B5:B1:0D:26:53:DF:62:51:9B:B9:FE:46
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       019D98F41154B398FAB0E3A891E8CB777A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          122E
Signing time:             Fri 17 Apr 2026 01:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:25 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: J5Cna4/1VlDKutVR7hOv7zmxmMWKue3wwEeYno4Mgp0=)
                          2: hdFvkjtKs9CqOAP8HlCjhA-rfX8.roa (hash: /9qat8m93Fb2TGLTVIMfphjY74FEi4sF9t0aEqwTOUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:11:54:b3:98:fa:b0:e3:a8:91:e8:cb:77:7a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Apr 17 01:00:25 2026 GMT
            Not After : Apr 18 01:00:25 2026 GMT
        Subject: CN=420771d37cbf3862b5b10d2653df62519bb9fe46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4f:48:ff:85:7d:10:0f:3d:7c:13:f1:3b:c9:
                    3c:43:ab:ed:28:cf:af:2c:a6:b2:22:52:d4:ca:2f:
                    65:84:1c:9f:ee:50:af:11:4a:58:35:15:76:2e:8f:
                    2d:08:5a:2d:8c:fd:d9:48:dc:e2:b9:75:f0:2a:86:
                    7d:cc:7f:99:6f:d9:ad:a8:85:35:a4:be:1e:b6:92:
                    77:ea:b0:33:ed:21:b8:88:b5:cf:fc:56:04:b2:06:
                    37:a8:38:18:60:77:be:bf:74:60:eb:1f:9f:8a:ef:
                    0b:e0:2a:2b:f3:1f:52:43:9c:2d:91:b2:8e:32:3e:
                    a0:81:63:da:74:0d:3d:32:1d:29:a9:9a:8c:9d:99:
                    dd:47:45:54:1f:47:09:4c:a7:d1:95:8c:0c:c6:45:
                    fb:f4:84:3d:7b:9e:82:ee:d7:47:cc:05:8c:8b:e6:
                    48:0c:06:86:bf:ba:7e:72:6c:39:9b:86:87:d9:ca:
                    49:3b:57:66:40:b2:d9:86:97:96:49:2d:99:d0:f3:
                    d2:32:49:b1:ec:c8:8d:9c:bd:cc:b4:75:d4:0f:a1:
                    24:bf:4c:3e:41:a6:3a:bd:a4:a1:32:cf:c1:ef:14:
                    4d:14:b6:d9:d6:86:29:0e:4f:72:c4:b9:b1:2e:12:
                    88:fc:a3:be:c7:7c:7f:04:f1:17:e3:fe:7e:95:70:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:71:D3:7C:BF:38:62:B5:B1:0D:26:53:DF:62:51:9B:B9:FE:46
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:e0:17:0b:e5:03:48:5f:f6:b9:15:40:e8:40:f9:52:58:0e:
         0b:16:71:46:77:52:48:bc:91:19:0a:c9:71:ba:c2:65:cc:7a:
         ba:21:c8:a7:7d:9b:a9:49:05:75:3f:98:a2:20:8e:ce:a0:a8:
         48:91:df:40:ea:df:f5:e7:57:82:b5:df:7e:8e:a1:fe:92:1b:
         40:ca:5d:1f:e4:38:e9:f8:10:01:1e:de:f6:d8:60:b6:f6:3c:
         23:0a:b1:5c:d4:92:1a:89:df:d5:fa:53:d5:96:d0:b7:cf:ac:
         94:91:36:43:93:9b:c6:8c:6d:c5:b1:a1:64:00:95:93:b8:53:
         99:87:42:54:b2:63:16:60:35:75:c9:9a:2f:45:64:46:4c:40:
         f8:e6:45:b0:81:0f:b5:cf:1d:51:11:76:4c:04:a1:a8:9a:f0:
         20:4e:c1:b1:9e:5f:f6:44:de:91:68:4f:61:55:52:03:2c:92:
         26:55:43:fa:35:94:07:a5:c4:e1:65:07:18:a6:0d:5e:34:f9:
         60:fd:ec:33:2e:52:0b:0e:a9:2c:88:6e:cd:ee:d6:dd:57:e6:
         4e:be:e8:00:b2:ad:d4:cc:e7:fa:ac:9c:10:bb:3f:28:cf:2b:
         4a:ac:e9:bf:c0:56:10:ee:9e:b0:a7:01:93:46:94:a5:02:16:
         2e:5b:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:36 2026 by rpki-client