Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File:                     ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier:          pHt/KAXZ9r2lGOHtLqHGNSs2w/Itcg7HYFON+lNAxTI=
Subject key identifier:   4B:70:29:71:77:9F:58:E0:59:B8:BB:20:86:86:FD:11:5E:49:84:A2
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer:       /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial:       0197B77CCEA953C727FACF98AB7076AFB58D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 17:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:39 +0000
Files and hashes:         1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: LG7SKdOhFjrY2cACGF8FzY2Z/nRTOefByoI1sPZQWdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ce:a9:53:c7:27:fa:cf:98:ab:70:76:af:b5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
        Validity
            Not Before: Jun 28 17:01:39 2025 GMT
            Not After : Jun 29 17:01:39 2025 GMT
        Subject: CN=4b702971779f58e059b8bb208686fd115e4984a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:70:ca:48:0f:d7:b1:a2:5f:9e:da:98:25:
                    40:fa:d8:38:d7:1a:ad:d9:d8:36:4b:48:6e:aa:08:
                    7f:37:c7:76:ea:47:df:f9:74:71:47:6a:ab:ae:94:
                    b3:68:7a:ce:0b:49:39:1c:35:7e:61:f5:45:00:06:
                    f9:b0:76:09:36:c1:b2:eb:2e:29:f5:4f:e0:0c:37:
                    d9:8a:ea:45:5a:9c:ce:9a:37:04:27:9d:8c:56:47:
                    8d:25:2b:aa:25:e5:df:ec:65:bf:91:28:8f:22:5d:
                    cf:74:58:d1:23:54:c1:18:bc:06:a8:91:72:c5:4d:
                    7d:e0:04:06:6b:eb:eb:a9:b1:54:44:75:e0:30:5a:
                    f9:cf:ca:04:98:35:d3:f6:8d:d7:16:22:24:17:81:
                    a2:a7:43:56:6e:99:da:29:38:79:ee:44:59:0d:ed:
                    08:25:48:4a:d6:db:a2:09:d3:6d:b2:60:0b:f5:f6:
                    2b:fc:9e:83:0d:50:35:7f:cb:67:72:a9:cb:a5:b0:
                    09:e9:9e:c0:5d:1b:5d:eb:cc:4b:09:36:ec:c7:8c:
                    87:10:b8:16:18:9c:ae:cd:f6:59:3c:5a:9a:e0:42:
                    55:18:ad:59:77:4a:58:59:87:bf:b0:26:ac:01:4f:
                    84:b0:1b:9e:05:4e:ef:83:db:27:e4:54:76:ab:e8:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:70:29:71:77:9F:58:E0:59:B8:BB:20:86:86:FD:11:5E:49:84:A2
            X509v3 Authority Key Identifier:
                keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:cc:12:ab:b9:b7:38:56:be:13:54:1f:3d:2d:f6:02:4d:
         00:78:ed:e9:1a:fd:61:37:8c:36:d5:70:f7:a8:17:9e:8f:ec:
         ca:08:d2:c4:8d:3d:1b:41:ad:ba:24:0d:10:45:b9:e7:33:17:
         b6:ee:e9:2e:27:a2:c8:b3:70:7b:44:e9:47:dd:e0:11:fe:22:
         a4:85:20:ef:8f:47:ee:7c:d2:fc:38:19:f6:69:aa:14:88:b5:
         02:da:0d:4c:9b:06:c0:00:54:83:8a:3f:25:38:29:c4:63:5f:
         25:5b:95:9b:53:12:cb:3d:06:c8:56:6d:a2:1d:e2:66:20:52:
         4d:45:9c:bd:81:21:c4:96:34:e8:8b:20:29:1f:df:b6:16:a2:
         bd:41:e2:51:f5:fb:1d:39:48:e1:eb:8a:84:da:2c:58:7f:8a:
         bc:79:1c:8d:b8:89:b5:16:ee:25:cd:33:20:43:1c:62:33:3f:
         05:67:2b:bb:4d:e5:d2:f6:2c:5c:3a:88:0b:52:28:9c:55:98:
         63:e9:0c:5f:b5:c8:14:ee:1b:87:b9:06:0e:82:d0:6d:4e:ec:
         4f:63:c0:94:b2:84:0f:a7:4b:38:23:6d:40:ea:44:e7:9c:eb:
         5f:fa:f1:b2:2f:25:7c:37:26:48:26:f0:06:de:ae:f6:44:5a:
         b9:ee:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:06 2025 by rpki-client