Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File:                     Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier:          CZkmzAPlzehS9sgdMrtvbm7a6msoXJN+DzX+R1xNw54=
Subject key identifier:   EF:16:93:5D:62:72:A7:25:CC:CD:F4:6C:91:E2:77:76:8F:2A:10:5D
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer:       /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial:       019D386633B7750F358D4A3DEA22F6E195F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number:          17B4
Signing time:             Sun 29 Mar 2026 07:01:55 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:55 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:55 +0000
Files and hashes:         1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: 6vSfoftyvgKGlZFg+DoyG/qf0Ycc5CipolicJOxSKYY=)
                          2: ksdw21uo8tL2LhVO0SZTaj0xN_A.roa (hash: SG7h3EKzF4YmgDHN6t8CLka5u3+CMxZHGn0rZ97GjLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:33:b7:75:0f:35:8d:4a:3d:ea:22:f6:e1:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
        Validity
            Not Before: Mar 29 07:01:55 2026 GMT
            Not After : Mar 30 07:01:55 2026 GMT
        Subject: CN=ef16935d6272a725cccdf46c91e277768f2a105d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:a2:0c:b3:49:a7:83:46:8a:7a:4e:2c:f6:
                    ad:5f:18:04:4d:ce:3e:07:11:34:9e:c7:ee:dc:0c:
                    28:fb:14:ff:66:b7:b4:7d:02:5e:e1:aa:b7:9a:00:
                    ec:50:08:e2:b4:2d:17:b2:49:1a:37:e2:f6:a6:26:
                    6b:db:2c:a8:22:78:52:b4:b2:3e:40:00:66:f8:6c:
                    d4:b5:fd:4a:81:96:5c:1e:b2:0c:c4:0f:6a:76:e6:
                    c4:e1:e8:5f:70:09:91:bb:e9:c4:54:cf:48:0c:dd:
                    3d:06:89:7b:b5:9d:e3:42:7f:0c:71:e0:02:7f:7b:
                    16:bc:01:b9:a5:9a:27:17:89:b1:d1:99:0a:7b:ff:
                    56:8d:ad:43:4a:d3:de:18:b6:21:d1:ea:50:da:e0:
                    04:36:86:b3:78:7d:9d:87:aa:ac:5c:2d:79:ce:d9:
                    48:ab:d2:1b:38:c9:cc:ce:58:1c:2f:4d:75:0a:7d:
                    30:aa:1f:13:12:e5:23:01:c1:cc:85:76:2b:b7:45:
                    3d:f6:e5:5e:08:fc:de:4b:ca:97:ff:47:12:b2:c9:
                    12:17:22:c1:75:21:be:11:af:10:26:94:b9:83:e2:
                    25:7a:b2:17:d9:53:58:7e:96:e2:97:15:68:22:7c:
                    5e:85:8e:be:df:d3:e1:14:bc:03:81:7d:e2:e2:2c:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:16:93:5D:62:72:A7:25:CC:CD:F4:6C:91:E2:77:76:8F:2A:10:5D
            X509v3 Authority Key Identifier:
                keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:1a:15:da:28:87:1f:fc:d7:20:90:28:52:4d:c3:15:94:
         da:65:61:3d:47:44:4c:f8:a0:ef:27:74:78:d9:21:3f:6d:2e:
         24:e5:60:5c:bb:8e:5a:89:fc:40:4a:72:27:4e:c4:e2:c6:8d:
         74:2e:1c:d8:a0:00:3b:18:07:e8:14:fa:6f:7f:32:5a:dd:61:
         86:7c:88:26:1f:9b:ae:34:d2:26:3a:d8:e3:ff:95:22:6a:51:
         16:f9:7a:84:15:96:e0:25:62:2b:e9:5d:5a:9e:d5:16:6d:cc:
         eb:30:86:85:52:99:ac:14:ea:dd:81:88:f5:97:df:53:d9:0e:
         69:4e:91:49:b6:93:2a:52:37:51:76:74:8e:75:32:9e:79:24:
         a3:43:83:df:a8:80:d5:41:52:77:f3:28:f1:06:b0:ac:2e:71:
         94:cb:37:40:3c:d3:22:ee:3e:48:0a:65:df:e4:15:16:ef:72:
         08:3b:cd:8a:fe:98:e1:c3:58:99:c1:39:fd:41:68:ff:b2:b9:
         cc:7b:b7:19:42:50:14:45:e6:2b:2d:d5:16:27:16:a6:ef:5f:
         16:2b:be:e7:df:79:b9:aa:de:40:9d:28:d6:cf:81:b5:9e:2c:
         e9:b5:89:e0:c3:d2:7b:fe:23:52:31:b3:14:28:71:bf:7f:20:
         c8:2b:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:35 2026 by rpki-client