Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
File:                     lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json)
Hash identifier:          yowxV/poXmA9Q4MaMy2J7ffu8CLss/+GA3TpE9qWPJA=
Subject key identifier:   19:A2:70:61:19:DE:01:0F:11:27:6B:F5:B0:92:A0:4F:B8:82:A7:BC
Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
Certificate issuer:       /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Certificate serial:       019D28F256DA5C665F2C276F6847DC4E52BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
Manifest number:          1447
Signing time:             Thu 26 Mar 2026 07:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:03 +0000
Files and hashes:         1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: q/cRioz2BcCPcYjlTsG/I7d2FyrhGLgGYnH8yHLQMo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:56:da:5c:66:5f:2c:27:6f:68:47:dc:4e:52:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
        Validity
            Not Before: Mar 26 07:01:03 2026 GMT
            Not After : Mar 27 07:01:03 2026 GMT
        Subject: CN=19a2706119de010f11276bf5b092a04fb882a7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:2d:83:f4:42:fa:ea:51:7b:90:d6:36:02:
                    b6:8a:f2:3f:53:f3:93:b0:d0:a3:2f:98:9b:be:18:
                    a6:29:f1:0c:6e:e3:b4:5a:19:ff:61:a4:52:58:8d:
                    b3:69:eb:97:40:85:13:77:5b:57:3c:17:4b:c9:e3:
                    95:0a:d0:93:43:0b:6c:69:c4:38:8b:bd:5e:a4:48:
                    2d:45:d8:5a:a0:9c:82:43:25:98:08:83:c0:df:fb:
                    4e:77:af:e0:05:92:c2:28:53:2b:50:9b:d5:d5:79:
                    26:ec:1c:0c:3d:86:24:b6:03:25:29:8d:38:84:48:
                    d5:48:cf:0a:8e:23:36:9d:19:2c:b4:10:fa:75:29:
                    47:d9:87:00:b8:c7:10:34:71:97:b0:b7:1a:6e:c8:
                    12:46:78:34:72:50:59:02:d3:dc:1b:36:35:d2:d2:
                    d4:50:2d:fb:23:ef:a8:fd:47:31:5e:71:40:ce:43:
                    d2:2b:e6:90:21:a4:72:19:65:31:17:a6:d6:db:42:
                    58:a5:9b:b5:72:8d:2f:b7:0c:78:ee:b7:1f:4d:13:
                    a7:aa:b8:c3:e6:0c:f1:b3:e1:21:f5:03:85:f0:2b:
                    0c:3d:e6:a3:c6:7d:14:04:01:1d:c4:69:8f:8c:16:
                    3c:7e:24:e7:9f:60:db:21:54:88:00:1a:83:97:39:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:70:61:19:DE:01:0F:11:27:6B:F5:B0:92:A0:4F:B8:82:A7:BC
            X509v3 Authority Key Identifier:
                keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:6f:76:35:a1:9b:35:35:ba:87:53:31:ae:fd:40:54:71:
         b5:f3:92:11:49:e6:03:33:d0:98:c6:87:a5:f8:80:c6:71:e5:
         51:c7:b3:ca:d8:19:73:9d:f3:6a:41:54:6c:31:98:d7:81:de:
         bf:09:2c:09:8e:ac:c4:ed:30:0a:e1:ac:d2:08:b8:3c:1a:35:
         ab:2e:90:a4:9c:c9:00:3a:48:8a:5f:87:42:b9:e6:af:81:04:
         db:4a:20:1a:c6:36:8c:27:70:84:f4:4a:f5:ec:d9:8b:0c:34:
         b4:5e:3f:98:00:dd:a0:07:89:62:c7:cb:47:d8:56:e0:5c:81:
         6a:26:e4:f5:be:bb:f9:de:38:45:f2:55:c4:86:42:6c:57:83:
         ff:47:de:25:c1:dc:6e:36:b9:2b:33:ca:d3:9a:17:1f:3f:c1:
         90:76:a5:bb:22:c7:52:1c:62:c8:62:20:31:05:93:ca:05:97:
         94:95:ba:1d:08:57:32:f1:af:c8:73:69:f6:5d:fb:c7:d6:f5:
         93:71:55:16:b1:9a:7c:a5:0b:be:c7:36:61:46:94:7e:c3:24:
         0e:fb:a9:12:92:c9:b9:69:82:2a:e2:90:ed:b7:78:75:78:76:
         be:82:fd:15:43:1f:21:cb:ea:aa:05:04:92:63:11:7f:20:65:
         29:f0:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:15 2026 by rpki-client