Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          cCccmDdAuXHpYGw6Fcmy1SEtqNtEVCrcCTd6lilsT6I=
Subject key identifier:   CC:42:36:C1:DA:7A:C0:D6:97:CB:A8:B0:BC:B4:C9:C5:15:56:F2:5F
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       0196741E359F5B89629610522C6FD57C825B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          0E7A
Signing time:             Sat 26 Apr 2025 22:00:58 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:58 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:58 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: hnVh0xMymixKjc1LcbpHEdPXW5e1TEdlZql/zzp4Iv0=)
                          2: lBmif3cec10f96f5KVrFOMIaqw8.roa (hash: CNoA9Jb73fZBHtmfFBZ+xq7RmTBmWpp0zyBq79wifVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:35:9f:5b:89:62:96:10:52:2c:6f:d5:7c:82:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Apr 26 22:00:58 2025 GMT
            Not After : Apr 27 22:00:58 2025 GMT
        Subject: CN=cc4236c1da7ac0d697cba8b0bcb4c9c51556f25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:a8:76:a0:41:95:91:79:92:10:1b:0a:d1:
                    17:8f:f1:d3:fb:85:e5:01:a7:e7:8c:75:48:f3:82:
                    c2:55:fb:ea:c1:da:fb:f8:13:06:09:6a:35:da:00:
                    78:73:ec:32:d8:00:59:57:c7:7a:a4:cc:46:76:de:
                    90:7a:38:a2:d5:07:3a:ac:4c:05:35:27:4f:e5:e3:
                    f8:51:a0:55:f1:8d:21:a9:3c:dc:f0:b7:aa:59:59:
                    92:08:66:1b:ab:33:e9:29:81:ec:78:67:22:61:3a:
                    ad:d8:5e:70:c9:54:75:2f:d5:54:57:6f:5f:cb:63:
                    2a:41:05:c1:29:88:ad:2c:ea:91:9b:64:ae:c2:f5:
                    71:ba:ca:f1:a0:d7:16:0a:fd:00:45:a5:44:2c:e3:
                    7f:3a:14:d6:0f:fc:26:8d:fc:b3:55:11:22:69:be:
                    9a:26:f8:9b:1a:c7:17:be:00:bd:44:08:40:a0:c1:
                    3c:6d:37:95:d3:7b:d0:e7:98:db:d8:36:17:cd:33:
                    b4:14:c2:c1:f3:07:80:6c:ae:ad:0e:23:e9:0b:0c:
                    59:2d:94:ac:51:64:9e:56:1a:96:0f:eb:1a:0d:ad:
                    44:fb:80:ce:bb:f9:a1:ea:4e:41:40:f5:e5:4c:d1:
                    48:86:7a:49:b5:cc:4d:91:45:0c:ba:7a:26:88:56:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:42:36:C1:DA:7A:C0:D6:97:CB:A8:B0:BC:B4:C9:C5:15:56:F2:5F
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:82:f3:83:72:f6:85:a5:37:d9:11:af:a7:e7:86:8e:e7:
         04:ab:df:7e:5c:f1:f3:07:d1:59:72:c4:6b:80:a4:19:50:d8:
         a1:84:bf:4a:86:4f:a5:99:71:d2:d7:86:c4:32:8e:fa:8e:c3:
         0f:7b:cb:a0:14:d6:17:0e:26:8b:91:e8:30:2f:d3:cc:b1:57:
         2d:40:3f:64:47:57:e1:bb:6f:6d:eb:3a:30:0a:7c:bc:c1:ed:
         ab:85:c4:37:01:1a:be:ab:52:c6:87:e3:86:3e:f2:84:63:6b:
         b5:14:3f:f3:28:7f:55:b1:47:89:56:1b:9d:56:c6:75:14:2e:
         42:d7:14:5b:8e:44:6a:62:bd:c8:86:a5:88:92:68:51:68:be:
         2f:7b:7e:b7:77:e2:99:33:56:58:bc:2e:d6:63:28:5b:83:d1:
         90:c8:0e:1c:72:54:37:35:0b:a7:e8:12:e2:75:66:a1:66:b9:
         aa:1e:cb:54:25:eb:eb:da:67:63:db:3f:16:cc:0f:d8:a2:4a:
         03:8b:7b:bf:ee:e9:87:a1:d6:b0:1a:fb:15:33:50:cb:55:ab:
         16:8e:c3:25:62:ef:a3:e7:98:1c:ba:6a:57:04:69:fa:a2:22:
         42:9c:ee:eb:9b:e7:ad:81:11:df:98:27:70:d5:e4:7d:1f:bb:
         8a:da:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:55:23 2025 by rpki-client