Manifest

$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
File:                     917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json)
Hash identifier:          JTg3jeTr+pgUfDibK6cm+2XI7qD7vpJZ+psbQPuKNRw=
Subject key identifier:   7D:76:76:F3:27:D0:B2:47:A1:2D:DC:BC:47:8D:76:75:E7:A2:59:37
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       55CF0934A9547A3E7A8205D22C80F1AA0B592EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
Manifest number:          07AB
Signing time:             Wed 23 Jul 2025 21:08:47 +0000
Manifest this update:     Wed 23 Jul 2025 21:03:47 +0000
Manifest next update:     Thu 24 Jul 2025 23:28:47 +0000
Files and hashes:         1: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: f6kqNpaouo4IJLz4+TE1CDF9dBY/IV8Tu4wSfLd1JTA=)
                          2: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: VvB56LrjlzdzGthEetT5tIGZci+QATz46SP0VJtjvuE=)
                          3: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: pVGUMpFaJRHsNf53FHiig+XLiVLrq4s9uchlrjAhiSY=)
                          4: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=)
                          5: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (hash: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=)
                          6: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: kI0kbYAdMgWhESDWM0EC5+Mfm3tf/xFT+bxqMRtwQwo=)
                          7: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: PBen+R0swS3EqAcXbZpm/npRHePATD8IaAlZax2MqLk=)
                          8: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: 4ZWAmDrwu4Strz0TOAaswKz/Iza6dycEiIEWJH8g4Xw=)
                          9: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: CD2wxjYSfRPVv1P3NM9gPcAzfmPv7Txt4DQakbWTg6k=)
                          10: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: 9emyDyKvQ+p3D4i64P4jO7VZoB1ouKmqxlWkmWmWJKM=)
                          11: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=)
                          12: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=)
                          13: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: BYY56AoRrxgnLm9I6DXnIMbVDNZjzGgx+KhPNmJwQo4=)
                          14: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: UR2be2wKKxV/30zai705hlCSe6fGiL7hYLTIuMgZKKE=)
                          15: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: vBYPJx00qLVv8CtqPb97mpTIIbclUXpVmgNdOsiewnw=)
                          16: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: 8M8H7s0+6PEYOPiP+i/A7SxmCn/mfCoc9BgSmxCnWkA=)
                          17: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=)
                          18: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=)
                          19: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (hash: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=)
                          20: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
                          rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cf:09:34:a9:54:7a:3e:7a:82:05:d2:2c:80:f1:aa:0b:59:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Jul 23 21:03:47 2025 GMT
            Not After : Jul 24 23:28:47 2025 GMT
        Subject: CN=7D7676F327D0B247A12DDCBC478D7675E7A25937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:1d:0b:51:f6:22:ca:62:15:dc:c2:59:a7:
                    eb:ff:e9:f9:fb:bd:4b:c7:fa:88:9d:2a:dc:ee:9e:
                    d0:7e:42:32:c5:62:e7:7d:b9:ee:6e:0b:27:1c:92:
                    03:80:18:f3:98:62:c4:6f:55:42:32:62:6c:e8:46:
                    25:97:d9:ca:90:fe:81:86:20:d6:a8:18:0c:c6:6a:
                    7a:6a:af:14:cd:09:e2:a2:03:dd:e8:35:04:d6:7b:
                    9d:da:dc:69:c4:a9:0e:2e:32:ca:0a:08:bc:9c:ae:
                    5b:8a:67:fb:27:d4:7b:42:53:eb:85:cc:4d:bd:56:
                    27:94:58:ae:79:e6:d5:c8:f8:18:8b:57:6d:21:fa:
                    d9:83:53:7b:f6:1a:14:67:7f:c8:ab:e6:83:17:6a:
                    4e:9f:78:57:1e:c2:8d:6c:c9:0c:bd:33:a4:24:18:
                    db:9b:12:81:72:81:0a:7c:e6:0c:4e:28:f3:37:a6:
                    ce:eb:ed:78:e8:7c:09:31:0c:27:f7:8c:b4:80:e0:
                    28:0a:b5:8d:2b:d2:20:8b:ac:03:57:01:70:c7:fb:
                    b0:11:a5:cd:1a:97:89:28:49:3f:e3:63:51:e8:77:
                    26:12:25:57:a8:89:10:7d:55:4d:43:ac:88:a2:ea:
                    b6:47:69:d4:fc:10:ce:56:2d:93:f7:38:59:e0:be:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:76:F3:27:D0:B2:47:A1:2D:DC:BC:47:8D:76:75:E7:A2:59:37
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e5:a7:15:8a:c3:04:ab:7f:d7:0a:fe:32:16:e1:1f:c5:71:
         7e:9c:10:7f:bc:63:ab:83:49:4a:89:c5:16:da:10:60:6e:e4:
         d0:25:4c:a3:83:39:67:9a:1d:33:e4:73:d4:b5:d3:2c:40:e5:
         5d:f5:fd:e1:9b:fa:21:9f:16:18:ce:63:33:2a:c8:e8:a1:a8:
         19:3b:4b:23:73:77:73:48:0e:61:43:e1:81:c2:41:31:8f:08:
         fe:14:71:48:2b:96:33:d5:6e:7d:d0:b8:29:7e:c7:64:f0:ad:
         e5:72:73:2f:84:e2:a9:35:a7:0e:8d:0c:28:c5:3b:25:26:d4:
         14:93:71:6b:45:f9:c7:57:77:47:ca:5d:1c:e4:ff:f9:fa:81:
         e9:e7:79:93:f3:04:3f:36:47:00:9b:43:fa:2e:55:a8:d0:4f:
         db:81:10:67:b9:67:d3:a6:64:2d:d2:8e:6a:21:6a:f2:66:40:
         e4:8d:86:f0:32:bb:77:ab:29:96:91:61:68:ac:f7:f4:70:92:
         e3:85:8f:2f:be:cd:35:96:db:27:a1:ed:c7:ae:f6:dd:27:06:
         0d:2b:1a:b4:35:1e:79:85:54:89:4b:86:2b:5e:ed:15:0d:b5:
         43:b0:23:34:dc:2e:e9:50:31:fe:1d:5f:ad:91:2a:c0:ca:b9:
         a7:d8:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:13:41 2025 by rpki-client