Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          rZs1+miqGnilLSSa/sn5RMOOQGf4mPBkc6bzujmIg5M=
Subject key identifier:   D6:A5:08:D5:FC:18:E1:EA:D2:B0:30:08:F6:9C:04:89:FC:01:EF:F5
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       01A0C859175E301B343148BDDDE80E448C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          0993
Signing time:             Tue 22 Sep 2026 09:01:16 +0000
Manifest this update:     Tue 22 Sep 2026 09:01:16 +0000
Manifest next update:     Wed 23 Sep 2026 09:01:16 +0000
Files and hashes:         1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
                          2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: MDxloMcKuKdx/g8vC+Xujis9NKy+xy9XviKZTfVf+n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:59:17:5e:30:1b:34:31:48:bd:dd:e8:0e:44:8c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Sep 22 09:01:16 2026 GMT
            Not After : Sep 23 09:01:16 2026 GMT
        Subject: CN=d6a508d5fc18e1ead2b03008f69c0489fc01eff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:a2:f6:91:7a:e6:32:6b:9e:1f:a0:45:9a:
                    37:b7:b2:d5:4d:3c:0a:34:1b:d0:6e:d0:8c:ac:bd:
                    0c:e2:10:23:2c:ef:49:fb:95:53:a5:0c:7f:c7:98:
                    fa:89:79:a2:c3:7c:7c:73:92:21:22:bc:19:af:09:
                    15:3a:81:ea:47:f3:7a:6e:44:6f:85:25:c8:74:62:
                    d3:2d:d8:b4:4c:7b:db:ee:e1:cf:7a:99:3c:e5:90:
                    72:36:84:a5:e5:16:31:b3:0d:f2:94:68:c5:af:de:
                    83:1e:20:4f:67:43:20:8e:90:f9:5c:68:38:08:dc:
                    8f:93:da:ff:4f:3e:b8:a1:17:8f:0c:16:6e:07:54:
                    bb:7a:e9:e3:56:40:e9:25:5d:8f:d4:21:22:44:2a:
                    cf:a2:6e:4e:1c:f0:a6:aa:72:d5:93:16:51:a2:68:
                    f1:89:02:6e:25:11:50:31:fb:ad:eb:18:d1:1b:24:
                    a8:22:0d:89:c8:c4:b1:e5:4a:d1:94:1a:4a:c2:0c:
                    cc:18:eb:74:01:dc:a8:e2:36:af:a7:8b:8b:f2:f3:
                    e5:59:e5:92:f9:1d:e7:74:1e:d5:cb:5b:29:33:3d:
                    6e:a8:06:d5:51:b6:56:a2:50:2c:ad:61:d9:d0:11:
                    ee:4c:b3:10:98:9c:b9:d0:6b:7a:7c:c7:b1:c1:c8:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:08:D5:FC:18:E1:EA:D2:B0:30:08:F6:9C:04:89:FC:01:EF:F5
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:ff:c1:cb:c8:a1:7b:78:98:f3:f2:7f:5b:db:ca:75:33:
         69:ac:b7:9c:de:38:60:a8:a5:5b:37:66:b8:2c:14:b0:84:12:
         d9:99:50:53:00:79:6d:e0:aa:a2:4b:7d:e3:27:9d:dc:85:bf:
         53:5f:03:5d:5a:00:48:67:ee:5f:79:a9:87:f6:fe:79:18:e4:
         ff:c6:50:a5:2e:a4:e1:f3:0d:79:87:ef:65:e9:5a:c6:6f:4b:
         aa:3a:91:0c:cc:b1:f9:87:b5:0a:d2:ad:34:42:9a:ec:1b:cd:
         cd:10:49:0e:12:e9:7f:08:c5:95:fc:92:79:b7:a9:86:e5:41:
         0c:bd:dd:3b:bc:0e:b1:9b:d0:6e:ff:df:ea:ce:5f:f8:38:fb:
         b9:fd:2f:50:f8:b5:05:12:b8:49:47:7d:5f:b0:0d:79:52:42:
         d8:f3:ff:2b:24:24:16:a1:c2:27:a7:7a:ee:46:19:c3:54:e8:
         09:52:3a:4f:e1:3d:66:f8:35:2d:f0:3b:84:c8:41:f0:5c:6b:
         20:2f:1a:06:1c:8c:ff:b3:26:07:c6:7f:58:1b:a1:c2:81:a1:
         b3:0b:ec:d8:c4:a3:c9:5c:45:e2:7a:13:7b:7d:ec:77:3f:49:
         37:a9:2c:ed:7c:ae:0e:70:c5:9d:39:6b:59:72:97:42:5e:8c:
         01:1f:f5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:57:34 2026 by rpki-client