Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File:                     ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier:          vLWEJeQTI+dRRAG3q0NulAhTXbkolKJQtWI2uP5aFeg=
Subject key identifier:   BC:8C:9E:9A:02:20:7D:D1:1E:27:E1:F9:80:B7:34:81:40:2B:8D:E7
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer:       /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial:       01A17883624DCC0F0621160BBCA0B3E0C190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number:          1ABE
Signing time:             Mon 26 Oct 2026 14:00:38 +0000
Manifest this update:     Mon 26 Oct 2026 14:00:38 +0000
Manifest next update:     Tue 27 Oct 2026 14:00:38 +0000
Files and hashes:         1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: mBNUFk4xlm4NBjetP9dRTDaVJSUyZprYRILay62los4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:83:62:4d:cc:0f:06:21:16:0b:bc:a0:b3:e0:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
        Validity
            Not Before: Oct 26 14:00:38 2026 GMT
            Not After : Oct 27 14:00:38 2026 GMT
        Subject: CN=bc8c9e9a02207dd11e27e1f980b73481402b8de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:a3:25:df:38:54:ba:26:24:d8:8a:ce:04:
                    97:91:2e:e9:d5:85:95:b1:ef:eb:45:b0:5f:a2:90:
                    32:07:b7:0e:01:99:15:26:e9:96:ae:05:8b:bb:0f:
                    73:6c:be:65:30:26:11:6c:2b:38:c9:b8:07:8d:4b:
                    7c:79:09:04:01:58:c9:d8:b5:cb:2a:cc:24:40:fa:
                    04:21:cb:b9:e6:b2:46:fe:a2:f7:32:41:b2:15:e6:
                    02:b0:f5:46:ea:81:3a:85:61:2f:68:31:ee:50:fc:
                    a5:74:05:6c:c1:18:9f:9f:bf:16:c0:bf:1a:64:2e:
                    bd:c9:48:34:0a:af:44:4d:a9:61:12:b5:a8:31:72:
                    6a:da:fe:f9:15:05:d6:16:9d:cd:cf:30:71:2f:38:
                    9a:e1:19:f1:e5:5b:54:2f:fd:c7:f6:b6:0a:29:fa:
                    da:e2:85:8c:74:51:48:f9:0b:e8:23:60:57:67:be:
                    04:92:ed:03:a7:38:e8:f1:cb:8c:c7:0d:d3:3a:75:
                    de:30:8b:b8:eb:6f:a6:a6:f2:05:e6:3f:81:15:20:
                    b9:1e:06:04:84:84:c9:ad:11:d1:10:d4:31:1b:e5:
                    0a:e3:90:07:c6:49:15:0e:b3:26:6f:cc:7e:83:8f:
                    a0:5f:cf:68:f3:34:e4:24:40:64:aa:4d:ac:06:49:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:9E:9A:02:20:7D:D1:1E:27:E1:F9:80:B7:34:81:40:2B:8D:E7
            X509v3 Authority Key Identifier:
                keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:03:56:bb:2c:b9:13:a2:2f:de:5d:14:31:eb:8c:09:9b:
         d6:08:34:a4:82:31:67:d9:10:ce:7c:03:13:7c:9a:41:7b:94:
         57:a3:b6:6e:44:79:29:6d:16:67:42:ea:be:fd:7a:34:d1:01:
         50:63:ee:5c:25:04:1b:aa:5d:e2:5a:9d:dc:b3:70:82:f5:41:
         45:cd:7b:96:9d:fc:d6:35:2e:07:45:12:87:03:d1:0e:63:5a:
         f4:80:cc:ec:11:d6:c3:47:dd:f4:06:35:5b:89:ae:8e:83:91:
         3c:6c:a1:fe:4e:ed:ac:b9:25:1a:9f:e6:70:dc:d3:cf:af:a6:
         1a:50:83:0d:e3:71:7c:b2:54:b1:f7:1c:61:2e:8e:c0:39:7e:
         f6:06:41:cd:30:f4:8e:f0:d9:f4:f3:4a:79:ef:f2:e9:e7:60:
         b7:a0:d9:0a:8c:75:30:5f:27:ef:b1:51:fa:0e:ef:ea:c1:59:
         23:6c:32:ae:73:06:52:67:de:ac:13:89:c9:d5:7d:a9:17:67:
         4a:f2:6e:89:a0:47:32:90:e6:3d:b7:c9:9b:71:aa:bc:5f:d7:
         40:da:e0:89:c1:91:18:b7:cb:e2:0b:7a:11:e7:ff:6a:81:3c:
         07:79:b1:ae:90:3d:0c:5f:0a:bd:3f:99:c8:0a:c9:77:20:ae:
         90:e0:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:41 2026 by rpki-client