Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File:                     ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier:          Im/bfcAn6XTHUQDTcqF95UWWRZnRTjjXmXxO1ypV9KE=
Subject key identifier:   A6:4E:4C:09:24:66:91:56:4B:7A:10:F8:83:CB:83:BD:0D:5E:D8:FE
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer:       /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial:       019874BE2F2DEAB3DBD64B6D1E3F76658E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 11:01:17 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:17 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:17 +0000
Files and hashes:         1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: 8FqCny2vM2ebHx2Hb5w3+EY6viTDApshmaU8O43uztQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:2f:2d:ea:b3:db:d6:4b:6d:1e:3f:76:65:8e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
        Validity
            Not Before: Aug  4 11:01:17 2025 GMT
            Not After : Aug  5 11:01:17 2025 GMT
        Subject: CN=a64e4c09246691564b7a10f883cb83bd0d5ed8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:19:60:78:32:63:32:57:c7:3a:68:8b:1e:
                    b5:8e:6a:a1:be:64:f3:3b:9b:f1:6a:68:c9:f6:60:
                    45:4f:a3:c9:20:49:9a:82:66:f1:05:79:46:6f:69:
                    62:c6:10:a5:d3:dc:ee:cf:21:d7:5f:79:34:20:aa:
                    f3:c9:1d:90:65:55:7a:ea:11:5c:2f:a6:d1:46:f0:
                    09:b9:a3:7f:38:93:87:b7:7b:78:aa:4c:74:08:78:
                    a1:9d:5a:da:c1:ff:cc:32:61:cf:c8:72:91:34:40:
                    38:a6:59:e5:81:a5:07:b1:11:75:88:a9:cf:9a:3a:
                    e5:b1:c3:85:6b:1a:bf:bf:6f:5a:b0:54:d6:7f:17:
                    17:b0:ca:8f:ae:bb:55:9d:a2:ab:86:4f:d5:24:b6:
                    eb:ef:d4:75:ab:61:88:c7:82:6d:7b:c0:60:5f:0d:
                    79:78:84:d4:30:80:eb:bc:23:ec:cb:05:e2:5f:27:
                    6f:05:47:13:fc:5a:eb:05:1c:fd:0f:3f:e0:07:64:
                    f4:d6:a0:61:85:8b:01:4e:88:ec:92:ca:ae:e1:fb:
                    b5:c1:c4:52:24:d6:ab:a4:e2:1e:dd:c7:71:ac:97:
                    1b:bc:c9:9a:78:c2:ad:b1:7c:48:d8:41:ef:26:24:
                    44:12:c9:8e:c2:fc:66:9b:c5:64:c5:1b:35:22:f8:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:4C:09:24:66:91:56:4B:7A:10:F8:83:CB:83:BD:0D:5E:D8:FE
            X509v3 Authority Key Identifier:
                keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:93:01:29:b4:c0:fa:7f:b8:97:b1:b0:06:5c:04:cf:f8:1a:
         67:cc:8b:6d:94:e9:a8:fa:b4:92:19:e8:7c:c7:02:07:b2:0e:
         03:66:a2:8d:4c:f7:3e:0d:5c:11:af:cb:e1:bb:a8:11:2d:6d:
         bd:bd:aa:7d:1b:6d:60:91:0f:e7:9a:31:a0:02:04:d9:4e:48:
         a8:ea:31:51:45:65:51:39:7e:51:35:7a:f2:a4:3c:bd:f2:2b:
         07:e1:1f:d1:54:7c:00:96:1e:56:fe:61:9e:e1:ad:d9:8d:d8:
         25:b7:43:5f:dc:b2:48:8d:2a:ce:ff:e9:a2:57:ad:bd:d2:b3:
         6e:bf:c4:8e:2f:c5:b8:cf:11:4d:eb:c0:cc:54:e4:76:d9:2a:
         5c:53:36:fa:55:06:b4:24:2b:7d:8e:83:e8:50:64:ef:90:0b:
         15:de:ef:02:99:bb:96:d9:37:c5:9f:68:f8:8d:3c:d0:12:48:
         25:23:11:63:02:ef:be:77:f4:52:43:74:29:9c:17:14:d0:ee:
         e7:08:7e:1d:52:8d:0c:c1:44:ca:ac:56:5c:9c:49:15:84:b3:
         02:2e:18:1d:df:6d:6f:eb:4e:1d:56:1f:bc:16:d4:ad:13:b2:
         52:a8:1f:6f:56:42:e6:b4:36:d9:7f:fe:34:4d:20:11:f9:ab:
         20:00:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:03 2025 by rpki-client