Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
File:                     lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json)
Hash identifier:          MOGicpVihA34cyskVGGVWSNX2WOc2l0pW3tNdhqZXTg=
Subject key identifier:   66:51:E8:2C:1A:BD:BA:64:F8:54:72:7A:1E:9E:B1:53:F3:89:14:F7
Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
Certificate issuer:       /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Certificate serial:       019D98F4ECEE14DC99BE4CFB263C4E1FEA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
Manifest number:          1481
Signing time:             Fri 17 Apr 2026 01:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:21 +0000
Files and hashes:         1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: KJh1FefL+Sn5kJwk7rrItHi/4mAfm0VuabZuS3LuVpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:ec:ee:14:dc:99:be:4c:fb:26:3c:4e:1f:ea:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
        Validity
            Not Before: Apr 17 01:01:21 2026 GMT
            Not After : Apr 18 01:01:21 2026 GMT
        Subject: CN=6651e82c1abdba64f854727a1e9eb153f38914f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:0d:c4:b1:36:08:af:c4:6b:a0:eb:d8:6c:
                    e2:ca:8f:19:15:40:51:4d:6b:2e:6f:aa:12:7a:20:
                    91:b9:4d:a2:ee:8c:fb:6c:45:0a:0d:0d:34:17:5d:
                    b0:16:12:cc:de:7b:0d:12:10:e8:49:a1:46:18:b6:
                    69:6e:ba:da:2f:50:45:60:9b:94:e0:a8:a0:8b:b1:
                    91:de:09:39:54:58:d6:7b:73:4a:9b:8f:25:47:1f:
                    50:45:cf:06:0e:41:f9:41:29:8c:34:5a:bb:5d:a4:
                    bb:07:e2:49:9c:b5:e1:36:b1:9e:8e:35:32:7c:fa:
                    3d:4e:cf:df:f7:2e:61:34:32:2a:51:fa:17:d6:cd:
                    cf:66:65:8e:0a:a5:2a:2b:b5:6e:9e:68:fa:fc:77:
                    f6:d1:34:e6:da:d2:8b:07:36:7e:f8:dd:a5:17:c9:
                    3a:4e:59:0b:cc:67:51:df:47:53:16:3a:b5:42:22:
                    63:5b:85:61:9e:2f:b9:ed:ab:f9:6c:4e:fd:4f:af:
                    1c:3d:9e:20:1f:64:6e:de:e8:bb:45:f4:7e:6b:d1:
                    5d:27:76:a6:75:35:bf:11:99:ae:10:fe:93:47:a5:
                    08:61:43:a5:d1:29:26:aa:fa:8b:fa:91:c2:0f:18:
                    e4:a8:21:a2:2a:3e:48:e7:dd:05:78:d2:48:7e:18:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:E8:2C:1A:BD:BA:64:F8:54:72:7A:1E:9E:B1:53:F3:89:14:F7
            X509v3 Authority Key Identifier:
                keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:89:d4:9a:59:91:96:5b:13:37:da:df:28:a1:0e:26:56:
         70:86:f5:06:67:57:47:e8:64:c1:00:4a:b3:fc:93:d2:b8:cc:
         43:88:4a:26:4e:c7:41:ce:72:31:53:51:c3:a9:a9:1a:ec:2b:
         e4:33:ff:f0:31:de:03:9f:5a:ea:52:cd:80:65:43:1b:19:22:
         00:72:9b:af:6f:4f:e9:a2:04:5c:9d:91:11:7d:8a:42:d1:98:
         8d:6e:07:12:46:65:d0:2f:8c:97:fc:59:f0:10:75:75:ec:16:
         b4:9b:75:db:77:34:1c:4e:ab:e5:bd:c4:cb:41:e9:c9:1f:d0:
         5f:49:22:fe:bc:0a:2a:27:49:a4:8c:53:4c:50:fb:63:8a:41:
         9e:c0:96:4f:e6:e7:ee:ef:80:c0:bf:ce:20:8b:5c:d5:48:d9:
         ee:5f:d7:69:a8:bd:ee:ea:b4:81:e7:c6:3d:eb:de:d3:26:9f:
         c7:e9:d5:13:cf:5d:f2:db:61:4f:38:e8:c8:50:a3:c8:b4:e0:
         a6:d8:f9:06:82:86:02:38:48:4e:85:48:3c:9f:45:50:d9:83:
         ca:79:c7:b8:48:4a:84:9c:16:a1:90:d7:e8:fb:05:3b:cf:f0:
         d0:de:ea:ac:38:34:1b:1c:3b:f4:6c:ef:05:fa:66:7c:2a:49:
         3d:96:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:08 2026 by rpki-client