Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          0JbkHKR8DeTh3nKx8AVGU1+sIhnb/aU/YdBNd+T7Ubw=
Subject key identifier:   8D:59:20:05:AB:ED:7F:68:AC:75:26:11:60:81:85:41:E2:89:EB:AB
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       019FA2CE00CAE95D3CA7056DCF3EC0392160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          08FB
Signing time:             Mon 27 Jul 2026 09:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:37 +0000
Files and hashes:         1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
                          2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: GL1V5dqadHAJy+ib7fBOTA/Xu6szzhm/gBzmpIwlW0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:00:ca:e9:5d:3c:a7:05:6d:cf:3e:c0:39:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Jul 27 09:00:37 2026 GMT
            Not After : Jul 28 09:00:37 2026 GMT
        Subject: CN=8d592005abed7f68ac75261160818541e289ebab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:86:66:42:63:0f:14:9f:7a:5e:35:b3:bc:
                    59:29:27:a9:05:76:99:1b:d5:4a:23:58:05:dd:70:
                    4b:1a:af:77:0a:ac:ff:06:5d:78:33:e0:00:8e:d8:
                    07:b6:45:d2:7a:03:b2:f1:c8:1e:a3:f0:09:87:84:
                    53:92:b9:d0:85:6c:2b:c6:2b:be:3c:36:24:1c:82:
                    53:22:93:39:ca:08:a0:75:53:ac:7e:4a:4a:cc:6a:
                    5f:4b:0f:45:8b:b3:29:26:20:cb:33:a3:a5:9f:6f:
                    65:94:c2:b1:af:65:d4:be:22:b7:6c:e9:be:dd:4c:
                    98:03:69:e0:ca:c3:5f:16:37:07:b5:26:ef:74:67:
                    9c:6f:a3:00:8b:97:34:ad:f3:90:88:2c:d2:ca:cb:
                    82:f4:2f:ef:12:e9:3a:09:8c:8c:f4:03:e4:c8:0e:
                    fd:cc:03:12:43:b7:d1:64:19:f4:14:3b:3f:76:54:
                    16:90:fd:7a:10:8e:b1:60:29:ec:82:94:a6:d9:01:
                    89:98:c2:a7:f4:ff:e9:53:14:c8:a5:75:9a:3e:02:
                    8f:d6:3c:85:78:f1:b6:6e:0d:3d:e3:99:17:97:7f:
                    62:be:2a:98:d9:14:03:ea:a7:4d:90:4d:3c:94:b6:
                    02:25:65:4d:cc:3e:d1:f8:91:01:d1:14:2f:7a:2c:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:20:05:AB:ED:7F:68:AC:75:26:11:60:81:85:41:E2:89:EB:AB
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:a7:2e:e9:2b:71:80:37:c9:19:7e:3b:0d:81:ea:2d:7f:
         6b:a0:68:41:27:75:3b:48:35:7f:0a:2a:dc:3b:c3:60:6d:ae:
         79:39:a9:e1:32:9e:82:c6:c3:f5:6c:8f:09:2d:c0:48:f2:e5:
         84:99:77:e2:08:9e:23:ac:50:d3:c8:16:83:47:4f:75:63:f9:
         c7:bd:8b:92:57:ff:54:58:38:7a:cf:35:16:98:17:cd:e3:85:
         bf:66:b4:78:9c:ed:6f:6b:44:2c:ec:ad:12:25:46:9b:c8:08:
         8d:d0:3c:4a:35:e7:63:77:31:64:b7:be:23:db:1e:8f:2c:f3:
         53:fb:a8:5d:c1:9a:c4:98:de:22:52:99:fe:f3:5d:55:f5:32:
         09:79:3d:04:10:6d:ea:61:7f:ed:f5:b2:f4:13:e3:cb:37:be:
         7b:77:fc:13:cf:6b:3a:f0:ad:ce:6a:83:bd:3b:70:1e:a0:8b:
         b9:fc:63:ed:8d:31:2e:f1:51:b5:fe:17:f5:2b:2f:1a:b8:4d:
         35:c3:04:57:ff:19:71:d7:7c:46:43:d0:f4:e3:59:f5:0b:61:
         a7:3f:a0:e2:bb:41:1e:e5:18:c4:7d:d4:97:60:7c:ae:a2:ef:
         66:f9:ba:4b:f9:85:39:62:21:44:83:56:7f:44:a5:11:da:d7:
         66:d0:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:30:01 2026 by rpki-client