Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          ZmpZHlbO3fXFlTrW9/s9sYrACpWkp1rSKEMeKfi0n9k=
Subject key identifier:   9E:31:20:22:11:48:2C:05:DB:CC:FA:53:26:00:E6:67:1E:9E:47:97
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       019FAC76F7C84DF17416AF45FD6682B663C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          0900
Signing time:             Wed 29 Jul 2026 06:01:45 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:45 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:45 +0000
Files and hashes:         1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
                          2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: fO78hbp3zbiltcVh+f53YWi0Ok0NplK1gsVQb+0JTgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:f7:c8:4d:f1:74:16:af:45:fd:66:82:b6:63:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Jul 29 06:01:45 2026 GMT
            Not After : Jul 30 06:01:45 2026 GMT
        Subject: CN=9e31202211482c05dbccfa532600e6671e9e4797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:17:73:10:31:84:d0:f7:8b:7c:dc:c4:db:
                    42:81:66:6c:a0:0e:5f:63:6b:af:e8:e4:2b:5c:f2:
                    cc:50:68:69:70:43:15:a2:4d:b3:c1:1f:b0:a8:e8:
                    5b:bf:8b:ad:8c:1c:0a:c8:0f:67:1e:ac:23:25:5f:
                    fc:e3:54:00:6f:85:a0:87:bf:26:0e:47:01:0c:9d:
                    4a:a2:10:28:d2:13:80:fd:2d:42:95:49:a0:37:1c:
                    8a:ae:cf:03:1a:be:83:95:26:b2:08:3f:fa:2d:5b:
                    2f:a6:70:27:4e:23:83:68:30:79:e8:2b:c6:8c:75:
                    2d:93:97:4b:fc:0f:73:5d:fc:ac:8c:4e:95:c3:d6:
                    6f:cb:bb:f0:f7:b4:74:ae:3f:b9:5e:fc:d4:cf:d7:
                    0b:7b:d7:6d:97:c7:67:4a:38:5e:ac:4c:49:88:9b:
                    f9:f4:b8:c1:66:bb:49:c3:c0:9c:33:db:72:5a:66:
                    cc:f2:59:a2:00:9d:46:97:16:3b:e3:47:41:af:88:
                    5d:aa:03:1f:67:37:35:6d:64:09:4f:e5:a4:61:6c:
                    9b:76:1a:e5:9e:30:75:b5:e6:3a:08:eb:e6:80:07:
                    8b:d6:aa:d9:a5:ba:4f:01:64:43:63:2b:48:77:64:
                    26:1f:9b:b7:a6:82:53:61:17:c0:20:8f:18:d7:5e:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:20:22:11:48:2C:05:DB:CC:FA:53:26:00:E6:67:1E:9E:47:97
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:0b:86:1f:8b:a5:f8:c4:f4:98:07:b8:59:41:5b:b9:43:
         fa:c6:d8:d7:be:97:52:ac:80:f1:7c:cf:2d:d3:d8:08:e5:6b:
         ef:23:bd:a3:b2:a0:ab:a7:97:54:17:cf:ed:3c:ef:94:19:62:
         4c:04:01:64:a1:b1:7c:6b:4e:80:58:e3:5d:0d:96:83:04:45:
         d0:a5:98:16:7d:a6:b1:3f:fb:59:9d:c0:ec:a7:9f:84:77:db:
         88:1b:dd:12:43:9c:75:5c:48:5d:93:6c:72:41:a9:e7:b5:60:
         fa:d4:83:16:bc:45:12:e5:53:d8:f2:ce:b9:21:10:dc:d7:f2:
         3e:94:92:c5:fd:ff:87:ef:2f:4d:c9:cd:66:13:05:b1:18:93:
         62:90:f8:95:0a:d4:b0:38:b6:ec:5f:3f:25:e5:6e:db:af:ab:
         69:a6:67:d4:d3:7e:50:56:6f:71:64:6b:eb:3c:41:da:43:0c:
         fa:14:2c:26:7f:da:95:3f:2b:b9:59:e1:fb:43:22:85:6f:b7:
         a3:45:2d:ad:0e:7e:d3:02:4b:a2:b2:8d:f4:91:52:7b:35:b1:
         d4:aa:2b:5b:71:a8:ea:3d:b0:de:6e:27:54:1e:55:ca:31:fe:
         da:b4:29:13:6d:b7:bf:27:b6:f9:13:88:b6:6f:5b:4d:25:98:
         79:3e:47:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdvfITfF0Fq9F/WaCtmPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0
YWZjZWIwHhcNMjYwNzI5MDYwMTQ1WhcNMjYwNzMwMDYwMTQ1WjAzMTEwLwYDVQQD
Eyg5ZTMxMjAyMjExNDgyYzA1ZGJjY2ZhNTMyNjAwZTY2NzFlOWU0Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHgXcxAxhND3i3zcxNtCgWZsoA5f
Y2uv6OQrXPLMUGhpcEMVok2zwR+wqOhbv4utjBwKyA9nHqwjJV/841QAb4Wgh78m
DkcBDJ1KohAo0hOA/S1ClUmgNxyKrs8DGr6DlSayCD/6LVsvpnAnTiODaDB56CvG
jHUtk5dL/A9zXfysjE6Vw9Zvy7vw97R0rj+5XvzUz9cLe9dtl8dnSjherExJiJv5
9LjBZrtJw8CcM9tyWmbM8lmiAJ1GlxY740dBr4hdqgMfZzc1bWQJT+WkYWybdhrl
njB1teY6COvmgAeL1qrZpbpPAWRDYytId2QmH5u3poJTYRfAII8Y117zqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4xICIRSCwF28z6UyYA5mcenkeXMB8GA1UdIwQY
MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt
MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx
LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi8Lhh+L
pfjE9JgHuFlBW7lD+sbY176XUqyA8XzPLdPYCOVr7yO9o7Kgq6eXVBfP7TzvlBli
TAQBZKGxfGtOgFjjXQ2WgwRF0KWYFn2msT/7WZ3A7KefhHfbiBvdEkOcdVxIXZNs
ckGp57Vg+tSDFrxFEuVT2PLOuSEQ3NfyPpSSxf3/h+8vTcnNZhMFsRiTYpD4lQrU
sDi27F8/JeVu26+raaZn1NN+UFZvcWRr6zxB2kMM+hQsJn/alT8ruVnh+0MihW+3
o0UtrQ5+0wJLorKN9JFSezWx1KorW3Go6j2w3m4nVB5VyjH+2rQpE223vye2+ROI
tm9bTSWYeT5Hsg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:28 2026 by rpki-client