Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File:                     ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier:          FII4Jn9BoD9I9DTKtSYn3gF37Q5Sb5TGhvRNfkZaQow=
Subject key identifier:   55:E4:E2:D6:A8:FD:33:BA:BB:D7:38:08:54:BB:A8:CF:79:70:3D:A5
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer:       /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial:       019EB7A1535DF1C8F558EF2E8DD9DA6B1350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number:          1951
Signing time:             Thu 11 Jun 2026 17:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:03 +0000
Files and hashes:         1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: Xp72usoT56i39j6gjTeWSHlnqnLLU/9QFMueG3ZDKNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:53:5d:f1:c8:f5:58:ef:2e:8d:d9:da:6b:13:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
        Validity
            Not Before: Jun 11 17:01:03 2026 GMT
            Not After : Jun 12 17:01:03 2026 GMT
        Subject: CN=55e4e2d6a8fd33babbd7380854bba8cf79703da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:24:b8:63:3f:8a:d3:42:8b:17:36:f9:18:
                    21:b6:26:39:1a:26:ab:46:fb:c0:4e:29:3a:3b:4b:
                    8e:bf:7b:06:99:f5:8f:e2:20:f7:fe:de:62:4b:0f:
                    6e:95:e4:a8:b3:0f:97:8e:cc:26:5d:25:72:60:d8:
                    a0:9e:6d:bc:c4:26:ca:77:59:d5:51:3a:30:09:c5:
                    68:d2:9c:82:e7:06:5a:7e:98:41:83:11:7c:4b:74:
                    84:55:94:82:97:b7:d3:b1:65:62:6a:7e:66:df:b1:
                    e4:e8:1c:22:9f:a5:42:f5:9c:cf:8e:bc:fd:f7:a9:
                    2c:04:86:15:fe:bd:ba:77:b1:9e:d3:43:b8:9f:22:
                    0d:f8:f0:63:f9:ef:22:7e:78:79:95:1f:3d:de:84:
                    5d:d5:40:c0:62:86:d4:7f:cd:d9:29:3a:f8:89:aa:
                    65:05:29:5c:86:18:36:c2:86:fd:0d:f0:25:54:89:
                    ef:31:17:bd:fb:ba:02:c3:3d:1f:ba:8c:b6:14:c3:
                    65:d2:b8:b7:53:57:b0:eb:83:ee:1a:9c:c4:d6:df:
                    a4:f4:19:c0:71:d9:26:44:03:34:19:02:7b:c4:7a:
                    d4:4a:86:c0:9f:1c:6c:65:75:e9:52:42:52:de:e6:
                    a7:71:21:93:f6:0a:84:c7:6f:2e:64:82:37:17:e9:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:E2:D6:A8:FD:33:BA:BB:D7:38:08:54:BB:A8:CF:79:70:3D:A5
            X509v3 Authority Key Identifier:
                keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:66:05:27:26:18:8f:7e:4f:6d:a2:9b:1a:75:e6:6a:0a:
         1b:67:36:40:a0:75:8c:1a:ea:8c:ab:d3:b7:6e:48:e7:31:43:
         a8:8e:5e:8b:1e:bd:a5:54:5f:ae:7d:22:fd:6a:e8:03:b4:a7:
         b1:ea:7f:84:af:cc:cc:59:34:f3:12:71:82:83:59:78:c1:8d:
         98:3a:e3:06:e5:29:ed:59:68:6a:f5:a0:84:f9:de:ac:39:f4:
         5a:78:7a:b2:3a:92:88:93:46:a4:65:c2:8b:ff:74:77:12:9d:
         1e:db:0e:97:15:37:ab:0b:20:e2:9b:9a:01:da:40:c5:3a:f1:
         a8:1a:ca:87:1b:8c:ee:91:ed:f8:9b:97:3c:c0:3c:33:32:2c:
         26:99:e2:82:5b:d3:65:a1:f6:4f:8e:26:54:13:15:19:fa:09:
         91:6a:6b:ca:da:8b:58:30:77:f6:c3:d3:d8:62:91:4d:a1:07:
         41:52:91:f5:4b:62:d7:2f:d4:f7:d3:64:c7:b4:53:f4:a0:47:
         bc:0d:19:dc:b5:d8:27:fc:66:33:9a:bb:20:7d:46:79:61:d7:
         04:05:cd:b7:bd:a7:7f:85:1d:66:35:ab:22:d3:c9:ce:fb:b9:
         ac:63:57:f1:26:bd:ad:f1:86:80:ac:e1:c7:7a:cb:ab:f1:32:
         f5:1b:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:08:07 2026 by rpki-client