Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          5x5pwrTFJlJ2eSqPtwkgsc2SyA/WO/Syo+WadOay+SQ=
Subject key identifier:   ED:DD:D5:B1:8C:CA:3B:2A:85:B0:AE:26:E9:2C:42:EF:C5:95:71:16
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       019EC2CA09FA9B95A7071E3FF1CE9BF3285A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          0887
Signing time:             Sat 13 Jun 2026 21:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:21 +0000
Files and hashes:         1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
                          2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: Rc2OEC5fEwfxY6o+X96MTac8LiHAA2tE2/Ivu4msWys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:09:fa:9b:95:a7:07:1e:3f:f1:ce:9b:f3:28:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Jun 13 21:01:21 2026 GMT
            Not After : Jun 14 21:01:21 2026 GMT
        Subject: CN=edddd5b18cca3b2a85b0ae26e92c42efc5957116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:48:74:f1:b5:12:b3:b1:ab:a5:08:4a:ba:
                    7e:72:2e:8d:ee:68:a7:44:69:67:53:fe:ea:cc:ec:
                    46:2b:b9:7f:4c:4f:aa:2c:a8:63:fa:a7:bd:fc:5d:
                    55:0f:1f:e5:53:ea:13:ab:f2:8c:2e:95:3a:38:1e:
                    11:f9:87:ac:ba:82:cd:01:a2:c4:78:fa:a6:b4:60:
                    70:11:18:91:02:8d:be:66:8c:f6:66:b3:9f:d8:73:
                    44:77:0a:64:3e:5f:26:96:0d:dc:37:30:5d:cb:d6:
                    93:e2:0d:2d:65:b5:2a:3c:1c:f6:23:ef:dc:6f:fb:
                    47:43:e5:93:9c:87:5f:e2:93:4a:ea:49:66:65:13:
                    b9:28:f7:0e:fa:4d:ec:66:cc:86:10:95:82:a4:82:
                    0a:22:72:52:4f:23:b9:b5:d4:8f:88:b5:d3:7a:06:
                    1a:21:80:39:45:22:9e:f0:1a:25:74:1d:eb:f3:50:
                    84:b2:e4:1f:f4:ce:7b:93:dd:cb:ea:2c:ad:98:61:
                    6d:a7:af:df:f7:3c:d0:d2:ec:fe:37:27:c5:e3:c9:
                    74:f5:7b:6e:bf:55:5a:0b:5a:83:a0:5e:c9:76:2e:
                    bf:c3:e6:5c:d2:25:ba:4e:bc:b7:05:12:bd:bc:a4:
                    39:f3:d0:bb:90:bc:86:c9:96:55:0a:f7:4e:78:98:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:D5:B1:8C:CA:3B:2A:85:B0:AE:26:E9:2C:42:EF:C5:95:71:16
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:94:8f:75:c8:44:29:5d:67:55:18:ea:bb:b1:38:20:0a:26:
         8e:04:c5:a8:5a:19:79:ea:88:ea:4b:9e:7b:10:40:7b:85:a8:
         33:70:9c:1e:c1:c2:ee:b7:95:8b:30:2b:ea:e1:d3:df:5b:2e:
         61:3d:58:fe:dd:a5:cd:46:6a:c5:5c:64:f5:75:c7:df:92:40:
         e0:56:6b:8d:bc:66:0b:c7:4c:2b:9c:98:16:90:c2:67:0c:60:
         23:96:7f:91:9f:fc:a1:7b:94:33:c7:fb:f4:85:34:fe:10:0e:
         8a:36:ed:c3:4f:d5:6c:95:40:e0:03:d8:30:a6:e4:70:e3:80:
         82:ac:91:9a:7c:01:f7:72:18:87:18:e0:f0:e5:11:e7:ea:84:
         8e:b2:80:16:f6:e4:6e:7e:83:45:03:8b:a9:8b:9f:8d:f2:60:
         22:c1:48:56:54:04:90:62:e3:16:ce:15:c6:7b:a4:d5:e7:d4:
         e2:c7:6d:6f:6a:b5:4e:95:85:fc:e7:01:81:12:2e:5f:22:5e:
         12:c7:f6:38:fd:10:bb:1c:3b:49:1c:7f:70:87:8c:7f:7d:f1:
         a0:eb:b5:87:90:7e:5b:71:98:b3:40:1c:6a:58:90:f3:39:b8:
         aa:8c:0a:52:41:ef:4b:6e:ce:e9:5a:e2:62:d2:17:2f:d2:e5:
         50:98:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:17 2026 by rpki-client