Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File:                     SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier:          5qgPPUDmIeZT/tepmUV4226szXUexFsFjEyUFSP9Lf8=
Subject key identifier:   36:7C:2F:B4:61:54:45:62:AF:97:48:AB:59:3D:19:1B:EA:3D:BA:0C
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer:       /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial:       019D9BBEF8D13739409E677E12EDAD382F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number:          0744
Signing time:             Fri 17 Apr 2026 14:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:17 +0000
Files and hashes:         1: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: ZMGoHfiFXAwqxT456Et+FZY43l37cG30TLcocwByI2M=)
                          2: ejZDEXBG6lJfQBaB_r07TXkoi64.roa (hash: S5aamcy+0zShe8pnJRlRZQ6L4/p8VXPVoAbyx/8mm70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:f8:d1:37:39:40:9e:67:7e:12:ed:ad:38:2f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
        Validity
            Not Before: Apr 17 14:01:17 2026 GMT
            Not After : Apr 18 14:01:17 2026 GMT
        Subject: CN=367c2fb461544562af9748ab593d191bea3dba0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:f4:8a:0f:11:c1:7f:02:cd:9b:57:ea:d2:
                    12:f0:d6:7c:ea:6d:6f:48:ed:85:86:79:7f:14:ac:
                    9c:70:85:a6:c3:dc:09:3e:44:a5:82:26:92:14:80:
                    b9:89:00:ed:e6:c8:d6:70:65:6b:1b:3d:5b:9b:ae:
                    d4:5e:07:99:02:f1:a9:f4:dc:ce:cb:86:52:3f:7d:
                    c7:0f:fa:0a:8e:bf:44:60:53:b8:8b:83:c8:c0:8b:
                    aa:9c:25:9b:48:10:44:60:68:71:48:da:19:f5:b4:
                    2f:03:fd:4a:97:46:c2:64:17:6c:80:b0:9c:b4:9b:
                    e5:5f:97:ba:db:20:af:9e:15:f5:ad:68:4c:59:aa:
                    ea:67:93:e4:1a:6b:dc:eb:49:75:4e:49:56:8f:78:
                    13:64:76:4d:f7:c9:cb:1e:00:74:98:7c:eb:d4:c7:
                    30:4d:8f:e1:e0:9d:91:16:f1:9c:bf:a0:4f:d4:ba:
                    41:cc:17:61:08:60:d6:cc:64:0e:19:50:70:47:cc:
                    ef:75:ad:5f:54:30:cf:af:4a:37:23:26:b3:66:7d:
                    4b:f4:ef:65:99:46:30:19:fc:ad:84:6d:dd:d4:5c:
                    3c:d8:4b:4d:1e:29:64:05:62:da:12:ef:c3:83:d9:
                    6b:db:9f:2a:e1:32:38:4a:c7:f5:dd:3f:ea:52:06:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:2F:B4:61:54:45:62:AF:97:48:AB:59:3D:19:1B:EA:3D:BA:0C
            X509v3 Authority Key Identifier:
                keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:df:9c:90:f3:9d:c9:ba:b5:a4:d0:08:36:48:df:5e:d9:
         59:64:a4:72:fe:7c:cb:fb:4c:0d:9a:79:c4:36:4a:3f:c4:12:
         27:c5:01:ea:07:ff:f6:86:8e:bd:9d:e3:6e:04:ba:db:ad:b9:
         e4:a1:ae:7e:46:f5:58:3d:0f:3c:a3:7d:ed:a7:8b:38:2d:5a:
         aa:3c:83:43:dd:a7:98:58:84:8a:00:da:54:92:c5:fe:a1:17:
         d4:98:a4:61:ab:bf:8d:e7:d4:5e:f3:87:b7:d4:b6:ea:e9:c6:
         a8:26:11:f0:92:1c:08:65:10:2e:84:46:c8:20:54:1c:37:0b:
         03:08:fb:d1:35:af:02:1f:2d:7e:e6:d1:6d:61:fe:74:01:d8:
         b6:2f:47:35:c7:fd:3d:0a:ab:97:0f:f4:6f:5f:9b:27:e9:5a:
         37:de:b4:da:5c:31:48:7f:29:3b:ad:88:a0:f6:35:c9:63:cb:
         d6:a4:96:a0:b2:29:a5:d0:44:9d:0e:d6:80:d3:4f:ac:88:21:
         78:08:36:1a:1a:9f:14:d0:cb:77:8c:4f:2f:1d:a1:e1:f7:f5:
         a3:2e:93:fd:99:41:4d:a9:79:cf:92:f9:e6:3d:e4:7d:06:ba:
         5b:64:d2:83:0b:52:85:95:f1:fd:0f:ef:0c:80:46:76:c9:26:
         82:f9:9e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvvjRNzlAnmd+Eu2tOC99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MWZlMmVmZGRhYTAwYWM1ZTQ3ZDFjMmQ1NGIwNGI5NjEw
N2E5NDUwHhcNMjYwNDE3MTQwMTE3WhcNMjYwNDE4MTQwMTE3WjAzMTEwLwYDVQQD
EygzNjdjMmZiNDYxNTQ0NTYyYWY5NzQ4YWI1OTNkMTkxYmVhM2RiYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LD0ig8RwX8CzZtX6tIS8NZ86m1v
SO2Fhnl/FKyccIWmw9wJPkSlgiaSFIC5iQDt5sjWcGVrGz1bm67UXgeZAvGp9NzO
y4ZSP33HD/oKjr9EYFO4i4PIwIuqnCWbSBBEYGhxSNoZ9bQvA/1Kl0bCZBdsgLCc
tJvlX5e62yCvnhX1rWhMWarqZ5PkGmvc60l1TklWj3gTZHZN98nLHgB0mHzr1Mcw
TY/h4J2RFvGcv6BP1LpBzBdhCGDWzGQOGVBwR8zvda1fVDDPr0o3IyazZn1L9O9l
mUYwGfythG3d1Fw82EtNHilkBWLaEu/Dg9lr258q4TI4Ssf13T/qUgb1eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ8L7RhVEVir5dIq1k9GRvqPboMMB8GA1UdIwQY
MBaAFEgf4u/dqgCsXkfRwtVLBLlhB6lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3Yzkt
YWMwOTIxNDA5NjdlLzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3YzktYWMwOTIxNDA5Njdl
LzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErffnJDz
ncm6taTQCDZI317ZWWSkcv58y/tMDZp5xDZKP8QSJ8UB6gf/9oaOvZ3jbgS62625
5KGufkb1WD0PPKN97aeLOC1aqjyDQ92nmFiEigDaVJLF/qEX1JikYau/jefUXvOH
t9S26unGqCYR8JIcCGUQLoRGyCBUHDcLAwj70TWvAh8tfubRbWH+dAHYti9HNcf9
PQqrlw/0b1+bJ+laN9602lwxSH8pO62IoPY1yWPL1qSWoLIppdBEnQ7WgNNPrIgh
eAg2GhqfFNDLd4xPLx2h4ff1oy6T/ZlBTal5z5L55j3kfQa6W2TSgwtShZXx/Q/v
DIBGdskmgvmedQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:33 2026 by rpki-client