Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File:                     Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier:          XHd5OGb1QJdWNCm6zAqe3HM+cgQKQy/6DbASk7MO9OM=
Subject key identifier:   62:5A:77:41:EB:7C:57:94:16:2C:99:D3:50:79:4D:B0:5C:E4:15:27
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer:       /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial:       019D98F4C32149058B47D16F260DD1D6DAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number:          17E6
Signing time:             Fri 17 Apr 2026 01:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:10 +0000
Files and hashes:         1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: MO18E0/eEVv0mFkmMD+fSIjmy5mbXUwkqzqN+jxWedQ=)
                          2: ksdw21uo8tL2LhVO0SZTaj0xN_A.roa (hash: SG7h3EKzF4YmgDHN6t8CLka5u3+CMxZHGn0rZ97GjLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:c3:21:49:05:8b:47:d1:6f:26:0d:d1:d6:da:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
        Validity
            Not Before: Apr 17 01:01:10 2026 GMT
            Not After : Apr 18 01:01:10 2026 GMT
        Subject: CN=625a7741eb7c5794162c99d350794db05ce41527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:3d:cc:c1:2a:77:b6:55:0c:da:4e:2a:c3:
                    18:c7:90:d6:20:14:5d:4a:83:df:97:d5:a4:24:03:
                    40:2d:7a:4a:af:c7:2a:34:77:92:eb:6c:d6:d6:c1:
                    55:67:e7:f3:02:29:ef:87:e9:54:98:41:31:62:e8:
                    18:47:6f:99:ca:86:51:25:2a:84:7f:e4:82:e0:52:
                    87:11:b4:ba:5b:ba:5d:b0:a4:10:ce:34:af:6d:ca:
                    39:49:03:76:4d:ed:f4:58:81:cb:d7:43:3f:2b:71:
                    a4:42:5f:69:53:74:7f:78:90:c0:e3:09:f4:fa:30:
                    bc:0b:7a:e2:b4:57:62:f0:af:49:8f:ce:ee:9b:20:
                    2a:df:6c:1f:07:51:ae:f7:6e:59:0d:b4:8a:c8:bf:
                    e6:0e:8f:70:be:ff:92:6b:e1:4b:2a:26:d6:51:54:
                    93:0c:2b:4d:0e:1f:f6:ef:f0:83:7b:24:0e:41:45:
                    73:a5:34:1f:6d:63:34:84:27:98:f0:01:ac:d1:e0:
                    65:17:cc:94:0d:a8:ed:ac:49:9d:26:c3:7e:2d:bf:
                    d9:2e:45:ea:3d:70:8f:b5:43:aa:69:13:66:61:44:
                    e5:4d:06:27:c3:03:37:f2:8b:1f:3e:7f:f7:6b:fe:
                    a5:37:17:c5:c6:3f:83:5b:df:3a:a7:77:c7:24:10:
                    74:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:77:41:EB:7C:57:94:16:2C:99:D3:50:79:4D:B0:5C:E4:15:27
            X509v3 Authority Key Identifier:
                keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:34:36:9b:df:e5:b4:7f:b3:65:aa:af:79:01:e7:75:cf:
         54:5a:8e:09:74:d4:f0:a5:67:f9:76:66:17:d5:16:4a:9d:b3:
         e7:c1:7c:c1:26:55:95:a6:af:3b:88:79:81:a7:a4:2e:d0:83:
         e4:a2:25:c1:04:9d:ab:db:b4:53:45:ed:fa:a0:a3:2c:4f:d3:
         63:00:a7:a6:fa:b7:e9:06:a6:90:3d:90:b1:81:f5:66:2d:33:
         18:43:6d:f6:ae:44:58:19:06:e1:5b:61:1f:c4:59:03:8f:42:
         22:77:72:9c:01:79:ca:1d:a2:04:5d:d8:95:ae:ee:9e:d0:11:
         4b:00:cc:c8:27:96:ca:a4:02:58:45:96:22:6f:fa:b7:e7:11:
         9d:a0:b3:20:19:3e:65:d8:f1:b3:c7:92:5d:11:9d:eb:49:1a:
         2b:fd:7a:15:49:ab:41:40:fe:e0:6e:0b:d5:89:fd:2d:34:87:
         b8:90:5d:d9:45:66:22:12:8d:c0:8d:9c:6a:f0:75:fc:79:77:
         dc:48:80:5e:ff:a3:db:22:e8:09:bd:8f:47:1a:1d:0e:60:11:
         6a:91:c8:af:33:83:3c:70:7f:d5:8f:9c:95:4d:9c:0e:5d:1f:
         64:32:21:3c:ad:71:3b:d0:97:bf:e0:fc:38:c1:68:3e:fd:25:
         0e:dd:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:21 2026 by rpki-client