Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File:                     Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier:          OLM9hqHUxFATFEeyOw79oUyj5/AIz8nint7gnrD2djk=
Subject key identifier:   B0:99:3F:BF:05:96:6B:10:C6:63:59:6D:C6:86:1C:22:1F:5E:A2:D2
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer:       /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial:       019847ADC58E463E1EE2C32E1CA58DC36CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number:          1525
Signing time:             Sat 26 Jul 2025 17:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:27 +0000
Files and hashes:         1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: j0p1mxZ7CgLlvacnVoOxbGRV9g4Vji3CZ5MuhiyKDE0=)
                          2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:c5:8e:46:3e:1e:e2:c3:2e:1c:a5:8d:c3:6c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
        Validity
            Not Before: Jul 26 17:00:27 2025 GMT
            Not After : Jul 27 17:00:27 2025 GMT
        Subject: CN=b0993fbf05966b10c663596dc6861c221f5ea2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:9f:e8:cd:31:c4:ab:10:28:b2:97:cb:80:
                    14:a2:a0:c5:47:c4:50:4d:0a:f4:6d:ce:d8:63:bc:
                    bf:fb:d4:d0:8f:09:4f:e1:bb:a2:a7:c2:57:e0:75:
                    94:9f:2e:b6:5b:01:cb:de:e6:3d:3b:17:f8:3e:b4:
                    70:f3:c6:17:4e:c9:d3:d2:78:38:53:83:0b:29:45:
                    b3:5e:37:34:a3:a5:00:fc:bb:11:18:0e:d3:dd:57:
                    78:f6:e9:0b:b4:1e:06:02:03:84:6b:ef:51:d1:98:
                    b0:d8:8b:98:ae:2e:19:d7:1d:a7:63:96:67:81:e5:
                    cf:d7:86:ed:ff:6e:1c:0d:3f:22:78:0f:57:ff:63:
                    e8:dd:6e:e9:1b:1a:c3:85:94:45:3b:b3:9b:53:07:
                    77:0e:84:97:6d:7e:0c:55:50:c4:fe:a0:e8:cb:78:
                    9d:6c:7c:07:9f:94:40:11:96:3f:3c:ec:a4:8b:e1:
                    52:2f:0e:35:9b:9c:65:37:b6:01:ed:96:f0:77:96:
                    4a:1b:eb:89:0e:5b:e3:cf:30:9f:af:d6:64:e3:45:
                    cb:76:d2:ca:2f:07:61:e6:a8:9e:96:de:72:68:0b:
                    7a:ef:76:6f:5f:55:08:e0:17:c4:b5:48:1c:1a:8b:
                    42:7d:90:7b:3d:71:ec:c0:32:73:93:78:bc:98:eb:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:3F:BF:05:96:6B:10:C6:63:59:6D:C6:86:1C:22:1F:5E:A2:D2
            X509v3 Authority Key Identifier:
                keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:ce:82:cc:79:c1:83:19:94:ff:17:e2:c9:ad:42:0a:33:
         70:fd:08:41:c7:da:f9:0e:72:41:c8:dc:de:e3:d8:a5:8a:68:
         ba:00:3b:55:23:03:09:54:41:34:fb:4a:ef:bc:c4:0a:44:2d:
         bf:02:3c:66:65:c0:46:4d:95:ec:a1:2d:02:57:5e:bd:ec:53:
         dc:00:7b:95:e8:7e:ae:22:bf:83:b8:cc:d1:35:9b:9d:9b:d9:
         e1:d1:2b:85:17:ec:cc:f8:94:83:fe:71:8f:d1:80:0a:b2:46:
         5e:67:3f:27:6d:65:9e:fe:df:ae:f8:bd:6a:08:8f:7d:0f:64:
         75:e6:06:b8:08:02:fd:f1:2e:aa:32:78:74:ab:9d:6f:9d:52:
         77:ca:87:d5:e8:a2:0a:a3:03:4e:4c:38:0e:92:9b:38:99:9f:
         32:b8:3c:7c:c0:7d:8c:1f:a0:9c:00:ab:cd:90:3e:eb:ba:e8:
         eb:41:89:6c:66:57:ee:b2:01:d6:82:28:ef:d5:1b:68:b7:c8:
         20:e3:59:74:a8:27:5d:a5:7e:e6:6a:74:6b:e9:8d:36:57:59:
         dd:98:94:a6:89:c8:bc:20:9b:35:fe:d3:5d:0a:2e:d3:fa:15:
         0a:b1:9c:cd:b5:f9:1b:b6:85:93:7f:bf:16:63:39:1e:b6:8a:
         a6:7c:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:56 2025 by rpki-client