Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          AB3yAsdryCUYdMzEub9qfMq5noD9a24gaiBQCVzUlyQ=
Subject key identifier:   7B:81:53:6C:37:B8:CF:C4:96:04:15:C4:A7:7C:05:5D:0D:70:0C:AD
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       019A4EF46F69444E91AA56A8A414253EE587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          1079
Signing time:             Tue 04 Nov 2025 13:00:33 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:33 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:33 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: WDE5fU9f8WasNZV9eJN972ewBq7uC7QJeZ/3KCeCHRQ=)
                          2: lBmif3cec10f96f5KVrFOMIaqw8.roa (hash: CNoA9Jb73fZBHtmfFBZ+xq7RmTBmWpp0zyBq79wifVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:6f:69:44:4e:91:aa:56:a8:a4:14:25:3e:e5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Nov  4 13:00:33 2025 GMT
            Not After : Nov  5 13:00:33 2025 GMT
        Subject: CN=7b81536c37b8cfc4960415c4a77c055d0d700cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:5e:15:18:bb:ee:56:5c:cb:4e:22:8a:d1:
                    3b:70:5d:ed:05:af:6f:e2:db:b7:db:75:22:6a:bb:
                    93:b6:24:1c:68:eb:ac:03:a7:68:ef:39:7a:2d:cf:
                    f3:79:12:df:15:ef:66:a5:d0:38:20:07:0c:f1:15:
                    f8:45:15:c8:9a:5e:21:02:bb:72:7b:08:f7:40:23:
                    8e:d3:b8:d6:71:05:06:0c:3f:36:97:34:70:c3:5b:
                    7d:68:a3:7c:cb:8b:c7:f7:41:58:b4:45:4b:50:89:
                    65:6c:ca:c7:f9:a9:e2:37:54:69:07:c1:32:b9:7d:
                    1d:bc:74:1a:52:cf:da:9f:eb:2c:58:c0:72:ef:26:
                    e1:b3:a8:d9:c1:07:6d:13:34:90:f3:65:9b:81:00:
                    d9:17:83:00:de:73:dc:41:ac:a4:8b:1c:e6:bd:5b:
                    ab:9b:9a:37:1d:db:dd:e8:51:46:7e:9e:f5:da:7c:
                    15:28:aa:53:6f:50:49:60:c7:7a:75:bc:f0:95:db:
                    f9:d5:dc:68:ac:91:52:e8:3d:20:70:39:f3:93:bd:
                    e9:c7:50:85:4c:47:5b:19:e6:fd:6c:af:94:8f:cf:
                    bb:e2:47:b9:75:dd:01:d1:a0:ea:7d:71:17:b7:89:
                    08:72:f0:6f:94:59:c0:86:43:56:9f:19:58:19:20:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:53:6C:37:B8:CF:C4:96:04:15:C4:A7:7C:05:5D:0D:70:0C:AD
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:6f:f9:f3:86:5e:45:ce:5b:de:3f:6c:19:d6:a6:35:de:
         db:4c:28:d7:63:af:d0:2d:83:28:0d:92:6d:b3:25:fd:55:dd:
         b8:a3:bc:7d:66:cf:ff:2b:a7:13:1b:7e:97:5d:5a:1d:a5:ea:
         71:fe:4e:c5:ad:e9:17:5d:df:ae:d1:4c:cb:d2:48:ed:fb:36:
         f6:a8:f9:e3:49:4a:cd:80:98:c3:36:19:42:91:89:83:7e:78:
         2a:a5:2d:3e:0c:84:e6:1d:37:36:77:4b:9e:de:59:6f:6e:24:
         1b:3f:03:0f:5e:5d:ff:8a:c5:34:5d:aa:12:e2:5f:a5:57:14:
         e8:d1:1d:7e:d9:bf:a6:c9:ef:ad:aa:b1:51:f8:70:81:5c:e6:
         72:77:ef:53:7e:29:86:ac:fd:88:5c:cb:b9:58:b5:6b:c8:c3:
         94:7f:5b:a8:7f:a4:15:6a:bf:61:41:54:ee:6d:03:c4:ff:d1:
         01:a2:ed:59:e2:3c:c4:2c:2d:c7:f6:08:0b:01:14:aa:4f:7f:
         22:68:79:6a:21:21:e9:cd:46:d7:52:69:2b:50:d2:78:4d:7a:
         b9:e9:7a:00:11:a1:de:c3:bb:11:f9:69:75:79:ea:2e:6d:53:
         5d:5a:f7:d5:26:f9:fa:bd:9a:7b:ad:19:84:1c:52:da:f2:62:
         4b:1a:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:09 2025 by rpki-client