Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File:                     1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier:          VuNmQkriBpa0B2vmjgL2MbjyiiDwbl4p/bYzt684aA0=
Subject key identifier:   CD:0D:D5:1F:7F:1E:0F:C7:FF:03:13:49:B7:16:CD:E0:BA:F3:A8:B4
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer:       /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial:       019DA3AF32C2D62E914B6F762831B98E8839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number:          051D
Signing time:             Sun 19 Apr 2026 03:01:01 +0000
Manifest this update:     Sun 19 Apr 2026 03:01:01 +0000
Manifest next update:     Mon 20 Apr 2026 03:01:01 +0000
Files and hashes:         1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: 7l34TgWdJqdben4ylMA64PAX5ou6O81MHSu4NC9ePmY=)
                          2: JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa (hash: ixMKAyIPqjVMfEHJMavyVmPNTt58bhUiJM7XMfqPYcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:32:c2:d6:2e:91:4b:6f:76:28:31:b9:8e:88:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
        Validity
            Not Before: Apr 19 03:01:01 2026 GMT
            Not After : Apr 20 03:01:01 2026 GMT
        Subject: CN=cd0dd51f7f1e0fc7ff031349b716cde0baf3a8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:11:14:0c:35:f5:b0:d8:0c:24:70:58:df:
                    e8:ab:c9:6f:8c:1b:cc:ba:a0:9f:ff:bf:59:39:27:
                    e0:c8:9c:88:17:c8:ca:54:a3:9b:ed:a1:15:cd:41:
                    48:21:31:f9:9c:1f:05:96:1f:f4:15:7d:58:24:9e:
                    69:f9:8d:13:54:28:af:99:aa:8b:2c:7f:64:7a:17:
                    df:b5:f6:be:e6:34:67:bc:d2:c8:48:c6:58:0d:cd:
                    de:4e:6c:bd:a2:f9:a9:42:87:d7:13:6f:49:a0:89:
                    20:fb:64:76:8f:5e:51:f2:7d:dd:08:c3:9b:a3:0d:
                    0d:b0:40:ec:d6:3c:83:e7:63:3b:81:1c:85:ff:38:
                    b1:f7:94:cb:52:17:a2:f8:cf:17:de:d2:45:f5:a5:
                    14:25:aa:b9:85:59:55:53:aa:5e:c3:d0:d6:53:32:
                    51:fb:0d:51:4b:4e:13:83:a8:79:e6:ed:fb:7e:35:
                    31:eb:90:27:c7:e7:8e:13:5b:a6:67:6b:a8:54:59:
                    49:c9:b8:23:6d:0b:fd:cb:09:17:3c:a3:7f:51:68:
                    ae:10:1a:ff:d1:7d:fe:a8:55:e2:20:69:76:a0:26:
                    9f:27:e7:82:83:aa:a7:96:15:f3:2d:7d:a3:ff:9b:
                    8c:e7:f4:c7:bf:c0:22:e3:2d:af:f0:2b:f0:32:fd:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0D:D5:1F:7F:1E:0F:C7:FF:03:13:49:B7:16:CD:E0:BA:F3:A8:B4
            X509v3 Authority Key Identifier:
                keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:4b:8c:fc:fb:71:dc:16:ff:7e:c5:31:4a:71:29:b9:83:
         33:3f:e8:b8:6f:bb:c2:05:0e:2e:72:7f:a7:50:6c:cb:b3:aa:
         f4:30:85:9e:c6:aa:53:b9:f0:cf:ef:b7:24:c8:56:50:b3:98:
         c5:7a:1b:d5:7f:7f:00:a1:c9:6e:53:b5:d0:8e:42:31:1f:c1:
         1c:a7:e7:a9:26:a3:0f:ec:05:28:08:33:58:8c:08:e9:3a:dd:
         0b:cd:8c:d8:b6:a3:2b:ee:a9:24:e1:71:3a:94:3e:da:9d:56:
         78:6d:f9:3b:20:04:3f:40:92:b5:72:65:63:6d:24:25:cd:94:
         0b:9a:33:53:9d:88:09:c7:32:d7:96:3b:65:a3:e6:38:e6:ad:
         c0:5a:d4:ec:b1:c1:c5:91:6b:27:58:a1:6e:39:ec:5b:65:3a:
         3c:0c:fd:6a:71:30:37:79:9c:56:b1:59:16:99:e8:68:85:a6:
         99:24:cd:e2:1a:b8:f2:95:44:19:16:48:ae:34:13:96:2a:70:
         b1:47:78:0a:da:52:98:f3:08:1e:a8:d9:c2:04:39:27:5a:2f:
         a8:a6:49:92:26:6c:fd:a8:98:95:31:3f:e8:6e:5c:6e:bb:f3:
         da:7b:74:19:2b:d1:3e:ee:c4:e0:c4:0a:f2:e6:6c:4f:85:55:
         31:33:40:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2jrzLC1i6RS292KDG5jog5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MjA3NTViZjY3YmE3ZDdiNGQzZDAwMTAyNzYwNGVhMjli
MjNlZDEwHhcNMjYwNDE5MDMwMTAxWhcNMjYwNDIwMDMwMTAxWjAzMTEwLwYDVQQD
EyhjZDBkZDUxZjdmMWUwZmM3ZmYwMzEzNDliNzE2Y2RlMGJhZjNhOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VERFAw19bDYDCRwWN/oq8lvjBvM
uqCf/79ZOSfgyJyIF8jKVKOb7aEVzUFIITH5nB8Flh/0FX1YJJ5p+Y0TVCivmaqL
LH9kehfftfa+5jRnvNLISMZYDc3eTmy9ovmpQofXE29JoIkg+2R2j15R8n3dCMOb
ow0NsEDs1jyD52M7gRyF/zix95TLUhei+M8X3tJF9aUUJaq5hVlVU6pew9DWUzJR
+w1RS04Tg6h55u37fjUx65Anx+eOE1umZ2uoVFlJybgjbQv9ywkXPKN/UWiuEBr/
0X3+qFXiIGl2oCafJ+eCg6qnlhXzLX2j/5uM5/THv8Ai4y2v8CvwMv0DowIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM0N1R9/Hg/H/wMTSbcWzeC686i0MB8GA1UdIwQY
MBaAFPkgdVv2e6fXtNPQAQJ2BOopsj7RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1TQjFXX1o3cDllMDA5QUJBbllFNmlteVB0RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNkLTg0Y2MtNGM3MC1iYzZm
LTllNTQ0ZDI0NmZkNy8xLzEtU0IxV19aN3A5ZTAwOUFCQW5ZRTZpbXlQdEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0LzZiN2MzZC04NGNjLTRjNzAtYmM2Zi05ZTU0NGQyNDZm
ZDcvMS8xLVNCMVdfWjdwOWUwMDlBQkFuWUU2aW15UHRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWlL
jPz7cdwW/37FMUpxKbmDMz/ouG+7wgUOLnJ/p1Bsy7Oq9DCFnsaqU7nwz++3JMhW
ULOYxXob1X9/AKHJblO10I5CMR/BHKfnqSajD+wFKAgzWIwI6TrdC82M2LajK+6p
JOFxOpQ+2p1WeG35OyAEP0CStXJlY20kJc2UC5ozU52ICccy15Y7ZaPmOOatwFrU
7LHBxZFrJ1ihbjnsW2U6PAz9anEwN3mcVrFZFpnoaIWmmSTN4hq48pVEGRZIrjQT
lipwsUd4CtpSmPMIHqjZwgQ5J1ovqKZJkiZs/aiYlTE/6G5cbrvz2nt0GSvRPu7E
4MQK8uZsT4VVMTNAng==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:53 2026 by rpki-client