Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          hbzaNvBxgtfcjY1nr4yGQfs5+p/Z6FXUOOIGMsmTFo4=
Subject key identifier:   C6:15:48:EF:88:78:77:0F:07:90:48:96:12:23:FC:D4:14:0F:8B:F8
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       01A18788997276F1C532DCE137763D88B049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          09F6
Signing time:             Thu 29 Oct 2026 12:00:38 +0000
Manifest this update:     Thu 29 Oct 2026 12:00:38 +0000
Manifest next update:     Fri 30 Oct 2026 12:00:38 +0000
Files and hashes:         1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
                          2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: wqCmtKuX4BoQouc+WM/zRSCi7oliD11lCs/DR6jXSGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:88:99:72:76:f1:c5:32:dc:e1:37:76:3d:88:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Oct 29 12:00:38 2026 GMT
            Not After : Oct 30 12:00:38 2026 GMT
        Subject: CN=c61548ef8878770f079048961223fcd4140f8bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:84:56:1d:ee:c8:da:0e:2d:c8:da:fd:18:
                    34:e4:a7:a1:85:4a:70:19:2a:36:c9:93:45:3e:6e:
                    16:0e:ee:af:4e:11:14:26:f4:e9:c6:33:52:fc:59:
                    7f:50:28:10:65:43:97:c5:37:14:41:9f:8f:d2:fa:
                    d7:4a:58:39:e9:42:77:c3:b6:e3:00:03:fc:3d:a8:
                    8e:3b:4e:80:34:1d:b8:c8:a0:fa:2f:ef:3f:f2:1b:
                    2f:a1:e1:40:49:e2:a4:89:93:1e:61:35:dc:86:db:
                    3b:55:80:c9:46:33:72:87:8d:d6:6f:4b:0e:0b:72:
                    11:c8:21:e2:8c:70:7a:d1:81:bf:1d:47:0e:20:22:
                    33:b0:90:73:43:87:99:f1:9e:27:3a:39:72:87:c9:
                    6a:44:75:51:85:98:66:6a:62:a5:41:91:94:81:54:
                    a4:64:18:04:4c:6c:d0:82:42:9e:f7:9e:63:28:ac:
                    19:bb:c9:91:c4:b9:90:54:ab:73:c6:d1:98:4f:16:
                    16:25:c9:3d:68:3b:f1:ac:9e:62:82:c2:2a:c9:53:
                    98:67:75:47:89:03:c4:fe:12:9a:5f:a9:00:34:4a:
                    95:c0:17:96:c0:62:2e:d3:5d:07:d7:36:29:2a:af:
                    ba:d1:df:5e:d8:1d:24:12:62:b8:18:6f:68:9d:b8:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:15:48:EF:88:78:77:0F:07:90:48:96:12:23:FC:D4:14:0F:8B:F8
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:6f:fa:04:c7:b4:94:d5:57:02:3a:de:2c:2c:ed:b8:2e:0b:
         cb:03:6c:23:6f:09:14:99:0b:c6:11:df:5c:50:12:ed:80:c5:
         58:73:64:d5:02:41:e6:53:dc:f7:e2:79:8e:56:43:88:07:87:
         03:44:2c:a2:49:d6:8f:56:86:ec:69:0f:d0:ab:d1:0b:46:96:
         1d:b9:3b:5f:18:39:e3:8d:ff:65:e9:93:1c:ec:cc:5b:01:07:
         07:b2:69:d7:32:d1:38:dc:69:0a:c9:8a:f2:1c:b2:ea:69:60:
         b5:14:01:9f:f1:cf:7d:b5:e0:70:e9:ec:99:c4:77:ed:93:a6:
         39:02:4a:c4:a3:51:95:5f:e6:63:f5:47:38:3b:93:54:3d:c5:
         2f:62:df:49:0d:1a:d9:76:cd:0e:01:ef:eb:9e:be:ef:d5:05:
         11:f0:36:5d:18:36:a9:25:96:10:d4:35:d5:25:c5:43:42:42:
         38:2e:44:d7:a9:b3:e0:f2:6f:94:dd:2a:46:65:5e:da:a4:ac:
         8b:f8:07:ee:cf:3a:bb:91:e7:5c:b3:e7:64:34:a5:6f:0f:2e:
         d7:da:71:a9:43:fc:a1:1a:d0:33:8f:cb:46:ae:c2:c5:19:0f:
         9a:0a:d5:1c:63:ae:2e:40:51:e0:5f:4c:85:7c:5d:82:4e:37:
         bb:f9:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:26 2026 by rpki-client