Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File:                     SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier:          EYe/dE5pKK3a1FZ65g1Y8LQYkWI119Lsx0rjYsP7UFU=
Subject key identifier:   C5:30:4B:56:6D:BE:AB:08:32:EB:7F:45:9C:50:45:B6:24:EC:EA:74
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer:       /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial:       01A13F39AE4F1C325311C719A12712CFCDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number:          106D
Signing time:             Thu 15 Oct 2026 11:01:47 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:47 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:47 +0000
Files and hashes:         1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: XBpNOnM4V2VyPkJHBxJ2xjJaQFWriQ9vPx/a7LlLnsU=)
                          2: Z07oGH4qALSlhCqp4P64q2iB1us.roa (hash: Z4N+HOJqsVfo6FvilkavZbY8gKGAnvRy13Fs0EXFZTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:ae:4f:1c:32:53:11:c7:19:a1:27:12:cf:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
        Validity
            Not Before: Oct 15 11:01:47 2026 GMT
            Not After : Oct 16 11:01:47 2026 GMT
        Subject: CN=c5304b566dbeab0832eb7f459c5045b624ecea74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:8b:0c:c0:7f:87:c3:05:0c:ee:27:ca:b5:
                    cf:db:56:55:8f:d9:f6:d5:2d:43:02:47:db:5a:ea:
                    1f:b8:59:fd:2f:ce:e5:e3:70:66:f7:be:fa:0b:fc:
                    3f:1d:f7:9e:8b:00:03:7b:3a:9e:fb:63:e2:f3:33:
                    76:04:8f:bc:e0:68:4f:bf:46:a8:4d:48:0e:fe:0b:
                    e8:2b:65:a0:7d:ca:9f:e1:25:7e:89:03:8d:2e:f9:
                    19:f0:64:10:46:cb:70:eb:e8:62:a6:d9:3b:01:c4:
                    91:17:e7:eb:9f:65:70:8c:f1:d0:9d:a3:e3:28:17:
                    30:42:15:94:88:88:61:d8:4b:16:ee:5b:89:f3:6c:
                    71:fe:f5:ec:13:f1:31:27:25:9d:5f:7d:de:7e:49:
                    f3:11:56:4f:29:29:09:2f:17:db:b3:52:45:fe:78:
                    3e:5d:51:48:d7:dd:71:4b:23:5e:a4:08:9d:d9:01:
                    86:19:d9:aa:6a:28:1c:be:e9:f9:68:9e:b5:b3:82:
                    55:8b:41:50:37:36:e4:1f:29:52:24:87:9c:c5:ab:
                    37:d8:5c:81:6c:97:35:2d:2d:94:dc:1f:9d:bc:a2:
                    4b:46:1f:39:39:ee:bb:5f:59:bc:67:5b:69:c1:7d:
                    05:40:e4:46:7c:fe:80:87:13:29:b9:02:9c:77:33:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:30:4B:56:6D:BE:AB:08:32:EB:7F:45:9C:50:45:B6:24:EC:EA:74
            X509v3 Authority Key Identifier:
                keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:09:15:4c:f0:5a:65:f9:ab:8f:ac:e3:54:2b:51:a7:09:
         99:b0:5f:0c:df:98:0f:0f:da:91:26:d2:04:8a:23:1c:4b:a8:
         f0:f1:9b:05:6d:c9:35:81:9b:6d:04:30:a7:12:0a:11:ae:af:
         9f:48:2a:10:b5:66:ed:df:a6:21:31:6f:59:b6:15:0e:f2:8c:
         5f:45:cd:d4:63:e5:b2:12:8d:03:96:91:7d:10:e2:95:20:1b:
         40:22:0f:b5:70:18:3d:e9:df:ee:f4:bf:ca:d4:f6:3b:70:f5:
         ae:4e:e5:59:20:2b:68:9b:51:16:32:67:b2:dd:d5:93:80:16:
         28:0b:56:4c:94:d7:45:78:e3:45:5d:c0:01:84:64:e9:ea:cd:
         b3:a8:ad:63:d3:97:aa:0a:c0:a1:73:9f:8a:49:0e:66:ff:95:
         81:e6:93:f9:d3:ec:59:db:aa:2c:07:ce:17:d4:06:22:35:3f:
         16:13:fe:ba:0f:5b:1f:57:ea:3f:cd:ec:8e:b0:ee:9e:cb:c3:
         d6:8e:c6:bf:fe:cc:c5:a8:19:25:e7:b8:58:36:4b:c4:32:0c:
         ad:f6:88:1b:45:1a:32:3d:73:49:b2:99:ea:b9:a9:c0:6e:73:
         e4:64:8c:97:68:4a:3e:9a:f0:f5:45:91:ae:2d:6a:de:16:14:
         f5:df:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:42:07 2026 by rpki-client