Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File:                     1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier:          Rs0qjq9ONVLJRiKDO9MBxJ7CyKqCbKVAHleyS5b6Xa4=
Subject key identifier:   9A:EF:5A:61:E0:8A:5A:E2:00:27:7C:50:E7:1C:AF:34:A7:F3:95:BA
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer:       /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial:       019A4FCFFED8443E9CE3F082E2310B83530C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number:          0363
Signing time:             Tue 04 Nov 2025 17:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:22 +0000
Files and hashes:         1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: abvxlUsSMgf8Q+uozJdTEshHazMaVkCpc8zH1W3t/sU=)
                          2: 8nQwwbTKR2QHt6Bol-B0GBvbksM.roa (hash: SHforER0sbIvAI5iADwv0gU7LdmKAhXUjkcLwpFZRTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:cf:fe:d8:44:3e:9c:e3:f0:82:e2:31:0b:83:53:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
        Validity
            Not Before: Nov  4 17:00:22 2025 GMT
            Not After : Nov  5 17:00:22 2025 GMT
        Subject: CN=9aef5a61e08a5ae200277c50e71caf34a7f395ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:d9:01:b1:a0:d5:a5:71:b6:3b:9d:15:4e:
                    ad:0c:1a:ad:c5:81:77:2b:1c:3a:64:ee:66:9a:7b:
                    e2:6c:e6:22:38:2f:a8:a3:57:54:a2:cf:1c:b5:a3:
                    a6:9f:fb:24:b4:3d:b0:2a:1a:ec:cd:c0:9d:f2:11:
                    b2:c4:4c:68:ae:4f:c5:26:44:80:12:98:81:57:0d:
                    da:04:61:34:a6:85:bf:fe:81:6e:f2:d2:bc:f7:db:
                    dd:43:57:98:3f:69:38:f1:0f:90:23:fe:8d:b9:6d:
                    b9:a8:28:7f:20:3a:5b:a6:79:f9:da:e6:92:43:64:
                    63:6b:1b:0d:54:83:c0:25:2d:aa:56:48:67:5d:8f:
                    91:43:2d:88:b8:ec:72:68:2a:a8:7b:45:f6:84:bf:
                    da:da:32:42:5f:eb:7d:ab:50:5b:32:3a:4f:2a:e1:
                    99:61:5d:71:e9:35:9b:d1:a3:e8:45:f2:90:ab:7d:
                    75:db:1b:23:c3:04:15:3c:45:1a:aa:28:7a:43:ed:
                    49:b7:f7:fa:d2:dc:f8:ed:c8:7d:d3:35:95:a9:05:
                    00:59:f6:01:9d:1e:95:96:db:93:b8:e3:b0:8a:03:
                    9b:aa:c2:3c:e6:33:fe:15:ce:89:2a:4a:a8:b5:a2:
                    3a:e8:20:4a:66:06:3a:7f:bf:3a:f3:ed:43:38:0f:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:5A:61:E0:8A:5A:E2:00:27:7C:50:E7:1C:AF:34:A7:F3:95:BA
            X509v3 Authority Key Identifier:
                keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:11:83:1c:22:f5:fd:61:4a:ce:d0:99:8b:82:46:14:ea:
         37:e9:d1:b3:72:92:99:07:32:4c:fd:bb:67:46:41:b0:ed:1a:
         32:24:f0:25:1b:f7:f7:61:75:e4:ec:33:6e:f0:97:29:c4:08:
         f0:01:6b:2a:76:31:8d:11:15:14:55:68:18:04:f2:56:0c:dc:
         c7:ab:c4:9e:b2:fb:99:71:91:18:e1:04:d5:40:b2:6a:bf:32:
         c3:40:46:2c:a7:4e:72:6c:89:ef:26:17:74:ac:d5:d2:f3:2b:
         ca:13:55:e6:a3:a9:16:f7:90:c7:20:48:31:91:c1:86:0e:09:
         e9:34:ff:02:29:05:e7:46:7e:62:7a:dd:54:d2:e7:9a:78:df:
         b2:0a:46:72:03:7e:25:69:ae:8a:8b:3f:5b:24:20:f0:bd:1c:
         17:7d:30:b1:24:c8:25:62:27:66:ec:70:45:17:c6:50:03:bd:
         41:63:ad:74:de:14:e5:33:76:7b:6c:da:f1:b8:d0:bf:07:af:
         9c:aa:6c:72:2e:44:81:85:b1:89:18:b3:a3:6d:b8:82:d9:61:
         e9:51:53:b4:a3:29:a5:8c:42:52:23:6c:53:42:c0:99:f9:7e:
         06:0a:10:5b:23:b3:12:ba:1d:27:2d:07:e7:3c:e0:cf:c9:e1:
         33:6c:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:50 2025 by rpki-client