Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          mRBvwdMoYKzzGR05wOFShJ80oeHpGctfTxDp8ANffDQ=
Subject key identifier:   47:93:8C:44:B8:B7:70:3A:19:DA:A4:78:13:1F:CD:EB:AD:89:3D:70
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       01993501AE5DD1CAB4FFF9BDC0B1E51F4571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          05A6
Signing time:             Wed 10 Sep 2025 19:02:06 +0000
Manifest this update:     Wed 10 Sep 2025 19:02:06 +0000
Manifest next update:     Thu 11 Sep 2025 19:02:06 +0000
Files and hashes:         1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: XY2VJj1PfsATPdLXVCIEZ2VMy/rFKlHwXj/rDvAKTAU=)
                          2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:01:ae:5d:d1:ca:b4:ff:f9:bd:c0:b1:e5:1f:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Sep 10 19:02:06 2025 GMT
            Not After : Sep 11 19:02:06 2025 GMT
        Subject: CN=47938c44b8b7703a19daa478131fcdebad893d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:3d:a6:e7:f3:29:4b:b0:13:e9:fc:be:02:
                    94:1e:d1:9c:d2:bd:8f:54:9c:e4:e9:87:99:d8:65:
                    f3:03:1a:fd:89:21:6a:94:1e:3c:32:a2:03:ef:67:
                    c1:96:4b:b3:36:7a:a8:aa:cd:80:7c:f4:ef:4d:e0:
                    94:89:a0:97:00:da:26:9d:01:e8:b1:dd:e5:98:71:
                    8d:e5:72:d7:c6:f6:8a:8e:2a:d7:7b:59:6a:03:26:
                    b8:64:49:2c:d7:53:12:d4:90:f0:41:fb:0d:f9:98:
                    d7:8b:64:f9:ab:55:c1:49:c9:2c:71:2f:da:f2:86:
                    19:6e:47:6c:e9:62:85:41:25:2f:58:13:26:09:45:
                    61:5d:00:60:c7:f9:fe:21:a4:81:b7:32:7b:bc:51:
                    e2:f8:05:5c:59:af:fc:35:fa:3f:43:a1:2c:b5:eb:
                    7e:25:06:bd:ac:a9:13:0c:93:33:d7:79:23:7b:c6:
                    2a:20:68:67:23:33:7b:f3:41:42:df:e0:8e:b8:8d:
                    14:b1:54:16:35:18:76:be:e3:f0:4b:d2:26:b5:df:
                    b9:11:24:d5:77:1f:04:4a:60:bd:1c:73:ab:39:b4:
                    0d:78:48:d4:47:b7:6a:8a:d0:ff:12:3d:70:c1:19:
                    c6:a4:54:5f:80:2d:42:3d:df:c4:7f:98:1a:1f:1f:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:8C:44:B8:B7:70:3A:19:DA:A4:78:13:1F:CD:EB:AD:89:3D:70
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:2c:0f:52:de:cf:dd:ba:76:08:8c:fa:e1:0e:e3:c4:37:36:
         b0:61:cf:22:44:b9:cf:12:07:af:e0:1f:af:c8:9b:bd:e8:ba:
         30:dc:4f:fa:5d:5f:a8:67:65:91:4d:08:44:c6:61:df:bd:27:
         05:09:8f:9a:9f:a6:78:49:f0:56:ff:06:26:9d:63:90:6e:f5:
         bc:50:b1:e3:cd:de:49:13:32:53:d0:a9:43:06:ba:04:15:dd:
         25:7c:f0:83:89:b8:ac:9f:52:66:2e:95:64:4a:b5:5d:05:10:
         69:53:d7:a5:f2:dc:ab:db:18:9a:8f:57:4c:54:4e:91:f7:8f:
         cd:67:e2:f6:fb:ea:77:a6:3b:1c:cb:af:ee:a8:c1:97:de:a3:
         73:a1:44:94:5a:ef:95:99:15:92:a7:62:6b:cd:8c:7d:56:bb:
         f4:aa:ff:7e:75:e9:93:e6:32:e5:a3:20:3f:6a:22:bd:7b:46:
         e6:0a:46:07:37:06:f9:cf:30:33:76:a4:31:33:63:b4:98:fd:
         86:33:84:54:f1:2d:77:fc:a3:b5:b6:07:06:1b:04:96:09:2e:
         2d:4a:30:23:f6:ea:79:e6:00:77:76:8f:13:b8:55:c8:37:ea:
         18:6b:57:81:e6:b4:98:78:12:1e:a4:de:99:58:90:ab:4d:d7:
         3f:f0:b7:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1Aa5d0cq0//m9wLHlH0VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0
YWZjZWIwHhcNMjUwOTEwMTkwMjA2WhcNMjUwOTExMTkwMjA2WjAzMTEwLwYDVQQD
Eyg0NzkzOGM0NGI4Yjc3MDNhMTlkYWE0NzgxMzFmY2RlYmFkODkzZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgc9pufzKUuwE+n8vgKUHtGc0r2P
VJzk6YeZ2GXzAxr9iSFqlB48MqID72fBlkuzNnqoqs2AfPTvTeCUiaCXANomnQHo
sd3lmHGN5XLXxvaKjirXe1lqAya4ZEks11MS1JDwQfsN+ZjXi2T5q1XBSckscS/a
8oYZbkds6WKFQSUvWBMmCUVhXQBgx/n+IaSBtzJ7vFHi+AVcWa/8Nfo/Q6Estet+
JQa9rKkTDJMz13kje8YqIGhnIzN780FC3+COuI0UsVQWNRh2vuPwS9Imtd+5ESTV
dx8ESmC9HHOrObQNeEjUR7dqitD/Ej1wwRnGpFRfgC1CPd/Ef5gaHx9RIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeTjES4t3A6GdqkeBMfzeutiT1wMB8GA1UdIwQY
MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt
MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx
LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviwPUt7P
3bp2CIz64Q7jxDc2sGHPIkS5zxIHr+Afr8ibvei6MNxP+l1fqGdlkU0IRMZh370n
BQmPmp+meEnwVv8GJp1jkG71vFCx483eSRMyU9CpQwa6BBXdJXzwg4m4rJ9SZi6V
ZEq1XQUQaVPXpfLcq9sYmo9XTFROkfePzWfi9vvqd6Y7HMuv7qjBl96jc6FElFrv
lZkVkqdia82MfVa79Kr/fnXpk+Yy5aMgP2oivXtG5gpGBzcG+c8wM3akMTNjtJj9
hjOEVPEtd/yjtbYHBhsElgkuLUowI/bqeeYAd3aPE7hVyDfqGGtXgea0mHgSHqTe
mViQq03XP/C3xQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:38 2025 by rpki-client