Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
File:                     SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json)
Hash identifier:          tS8e+ZH3azX56LL1f5OUnagtN6Eq6cBv5I1waNuud4I=
Subject key identifier:   4C:CD:F7:C6:1A:EB:28:2B:7C:DA:5D:1C:5C:CE:9F:0E:3B:8D:3A:70
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Certificate issuer:       /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial:       01A13BC9B5E8B2BBBF7C7189A944C84ED637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
Manifest number:          1245
Signing time:             Wed 14 Oct 2026 19:00:37 +0000
Manifest this update:     Wed 14 Oct 2026 19:00:37 +0000
Manifest next update:     Thu 15 Oct 2026 19:00:37 +0000
Files and hashes:         1: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: 6fD4Ap8EK/BDL4OkGTGYo3OtYTX/c1V0JHenixZ0wRQ=)
                          2: ux9t1taenzMzHDc2wmWt_xH_KEM.roa (hash: NpD2C6KlNQ/GY5fAYSdqeCGTMMgpVvFEpoOp4C5rZfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:c9:b5:e8:b2:bb:bf:7c:71:89:a9:44:c8:4e:d6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
        Validity
            Not Before: Oct 14 19:00:37 2026 GMT
            Not After : Oct 15 19:00:37 2026 GMT
        Subject: CN=4ccdf7c61aeb282b7cda5d1c5cce9f0e3b8d3a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:f8:84:03:47:52:7c:7f:01:0d:c0:a1:3c:
                    09:e0:59:08:65:92:57:05:55:4d:4e:1d:62:03:7c:
                    1c:50:65:f3:7d:7d:89:90:ef:fb:4b:9d:b1:ed:58:
                    92:42:e4:5c:c3:7e:80:f2:2d:3a:08:0a:c4:8e:05:
                    4f:9b:75:f7:ec:0c:c7:0c:17:28:c4:31:35:d9:a8:
                    7e:bf:cf:e5:47:a3:23:40:55:90:68:b9:71:a5:ff:
                    d5:4a:bb:88:d2:16:ae:d8:38:f8:34:97:2b:b7:bb:
                    af:08:3c:17:85:2e:28:6f:8f:0a:12:27:11:56:1a:
                    6e:d6:8d:c2:76:73:66:68:58:8d:d6:d4:2e:15:50:
                    ad:8b:d5:29:9d:47:1d:71:2f:e3:7f:83:14:e4:bb:
                    0f:ec:8d:de:98:52:76:de:9d:ac:4a:bb:60:08:60:
                    39:cb:3d:e4:0a:52:d5:d6:23:4d:fe:75:cf:a2:cb:
                    6d:a7:56:1b:be:e5:18:c7:97:76:83:b1:5f:42:52:
                    e5:7f:19:16:7f:7c:bf:ce:e9:aa:94:b9:1a:ed:46:
                    33:1b:73:e0:7a:64:fe:50:c2:8a:6d:9e:39:1d:3f:
                    78:08:03:27:31:fc:ea:c7:7d:59:49:76:04:01:0c:
                    3f:2d:79:2b:ee:11:89:5e:df:b9:46:de:69:a8:0a:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:F7:C6:1A:EB:28:2B:7C:DA:5D:1C:5C:CE:9F:0E:3B:8D:3A:70
            X509v3 Authority Key Identifier:
                keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3e:9e:39:19:5d:02:c7:13:8e:55:ee:77:b1:82:80:5c:8b:
         76:53:c3:54:74:ea:fd:a0:39:b9:fe:08:d1:ed:b6:df:13:7e:
         18:14:f3:cb:1a:52:3c:79:de:be:0b:2d:a3:1e:ea:85:56:3f:
         9e:4b:6b:97:11:73:6a:aa:3e:f9:d1:92:a1:5b:16:5b:3d:34:
         c0:f4:68:23:23:48:2a:e4:31:6f:84:7e:ac:81:42:9e:59:d8:
         b4:dc:d2:17:0a:a2:1b:55:7d:99:d8:ac:14:3d:30:bf:8b:20:
         1d:b4:83:7a:af:36:6f:be:91:50:ee:01:09:40:dd:d8:29:99:
         02:98:28:ee:e0:35:c3:cf:ba:bd:e3:95:d7:22:02:e9:5c:d3:
         7d:f4:4d:b5:8d:f4:de:1d:81:3f:fc:22:c8:dd:db:99:a1:0c:
         c7:82:86:39:3a:5f:c8:f5:7e:40:5c:18:d6:83:14:2b:a2:8e:
         97:82:8b:4b:f4:17:10:c0:c9:b8:5e:d9:23:20:42:01:4b:39:
         1b:20:0d:2a:1d:f9:4a:40:ed:5e:d6:2b:26:b6:4f:ed:aa:ff:
         48:81:1a:3a:75:e3:e4:7b:b9:0b:27:5a:cb:28:8f:b3:8e:9d:
         3d:c9:95:62:99:6d:2d:a6:b1:05:f7:70:62:91:b6:df:05:fb:
         8d:0d:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:20:17 2026 by rpki-client