Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
File:                     lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json)
Hash identifier:          k6LmsYox0uLOKTC4T0L1nGA+f1e2hlNf7/GdZF039Bo=
Subject key identifier:   81:46:33:68:DA:3E:19:0C:A1:6D:00:D7:4C:F9:77:AD:E2:62:90:E6
Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
Certificate issuer:       /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Certificate serial:       019923A0B192BD879AFCC2A9CB390795F176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
Manifest number:          1232
Signing time:             Sun 07 Sep 2025 10:02:37 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:37 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:37 +0000
Files and hashes:         1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: qg31+N5hbfZ2yZpy68UKGXt7aV0G+ET7mpuiHOfIdWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:b1:92:bd:87:9a:fc:c2:a9:cb:39:07:95:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
        Validity
            Not Before: Sep  7 10:02:37 2025 GMT
            Not After : Sep  8 10:02:37 2025 GMT
        Subject: CN=81463368da3e190ca16d00d74cf977ade26290e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:25:42:1c:b0:01:27:bd:85:bb:92:fb:c7:
                    79:3e:95:b9:34:d7:03:ee:ce:ad:ff:7e:cc:03:d8:
                    51:09:d1:65:0a:a6:39:54:01:b4:36:c7:36:2d:c0:
                    d5:1b:27:bf:db:f2:f2:40:d1:3d:b4:63:92:ba:4b:
                    c3:28:bb:d8:30:03:1a:4f:2d:e9:32:90:1f:1f:42:
                    d9:1d:a9:f7:2e:0e:5c:f9:ef:4d:4e:dc:76:22:0b:
                    aa:df:56:ee:0f:77:26:5c:cd:ef:cf:a1:3d:f3:55:
                    c8:72:c5:6c:28:cc:c3:12:67:bd:85:8f:b8:80:4c:
                    64:11:98:b9:1e:e7:42:5f:e5:f6:9a:cb:f6:30:9c:
                    0a:0e:ad:64:47:33:8e:73:1f:59:64:ca:0d:38:d4:
                    f0:a0:d5:87:6d:82:3c:08:fc:9b:13:63:d3:5b:19:
                    1d:45:cf:dd:41:ac:db:32:7a:12:e4:2d:3e:f9:aa:
                    b5:77:18:6d:74:15:41:61:f3:cc:d1:78:32:c8:6d:
                    ce:ec:6a:b6:1f:9e:fc:86:5a:8a:f5:68:3c:98:90:
                    05:9e:2d:6e:12:5f:5a:b0:69:e4:eb:1b:cd:47:24:
                    03:45:3b:e9:bb:6a:29:a2:a5:38:2a:08:ac:9f:cc:
                    9d:b7:3d:e6:77:48:2c:08:aa:51:2b:59:42:84:3c:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:33:68:DA:3E:19:0C:A1:6D:00:D7:4C:F9:77:AD:E2:62:90:E6
            X509v3 Authority Key Identifier:
                keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:bf:54:2f:b5:6b:55:de:99:b9:f1:10:9c:3b:6b:7b:06:ff:
         fd:ae:b4:e7:68:99:b6:56:b4:12:ee:04:04:ae:e0:19:bf:ed:
         8a:30:a9:e5:e8:d3:39:55:94:87:d6:cf:35:2b:12:a6:de:66:
         7b:c7:62:d1:e0:e9:2f:a2:8a:fb:fd:b1:83:e0:6f:6c:34:20:
         cb:9d:f1:18:90:cd:f0:5f:bf:51:9a:56:35:15:bf:44:9f:45:
         b9:e8:d4:1b:22:60:49:63:88:75:d0:42:72:a0:3a:9b:1e:a2:
         7d:58:16:2c:af:8d:9c:3f:a5:b3:86:10:f8:56:a2:06:ed:07:
         6e:ae:d8:46:e9:d5:9c:c9:aa:4e:39:55:68:26:0b:22:09:d5:
         45:58:57:ce:7c:70:e3:f3:92:06:1a:fe:91:15:8e:e4:09:88:
         af:5d:bd:f6:df:97:95:7b:49:3a:53:f8:93:7b:3f:15:60:69:
         ed:9a:ad:9f:98:9f:6d:dd:be:52:f5:92:f5:77:51:79:49:4a:
         6d:cf:18:ec:69:d6:59:fc:87:02:21:bf:6c:4d:fb:78:9f:f7:
         d4:56:e1:46:b4:61:94:3d:09:e4:54:26:41:eb:46:8b:35:3b:
         68:66:51:1a:44:01:73:86:40:65:f9:fb:3f:db:6e:53:15:59:
         f0:03:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:40 2025 by rpki-client