Manifest

$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
File:                     917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json)
Hash identifier:          +8WF9zpODCGdW79yEXZUOGk1H3PWZ89LAQlezyO0Sl4=
Subject key identifier:   26:77:52:AF:79:BF:22:EA:62:43:41:A7:95:41:98:F9:8B:A8:60:EB
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       49AE80219305DD9A38276981522D819171AB5795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
Manifest number:          07AE
Signing time:             Fri 25 Jul 2025 10:52:40 +0000
Manifest this update:     Fri 25 Jul 2025 10:47:40 +0000
Manifest next update:     Sat 26 Jul 2025 13:46:40 +0000
Files and hashes:         1: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: pVGUMpFaJRHsNf53FHiig+XLiVLrq4s9uchlrjAhiSY=)
                          2: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=)
                          3: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: oLykT169XQRe54OvxL35AP1wQ7QpOrX2jz3vggRS11I=)
                          4: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=)
                          5: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: vNIOfkjzqm/U9+QSyeJGVHIdNe47F6+YqKQfpk+hGR0=)
                          6: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (hash: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=)
                          7: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (hash: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=)
                          8: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=)
                          9: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=)
                          10: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: 9emyDyKvQ+p3D4i64P4jO7VZoB1ouKmqxlWkmWmWJKM=)
                          11: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: ab+orse2k3vLknSM5IryV4UsYwWDG7bQUz36yV+1F4Q=)
                          12: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=)
                          13: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: UR2be2wKKxV/30zai705hlCSe6fGiL7hYLTIuMgZKKE=)
                          14: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=)
                          15: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: l462BIQ/tSzO6Zk3E4YvJo4+0xUGQksUVCqC9Uky4/k=)
                          16: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: BMHprozwGWte6Qvio800qiByYqNv/68WnMz3X7VvKmo=)
                          17: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: l/M5vxVHJraJJquOUp447WdJa8JrB1Yb96LanQ1u/4U=)
                          18: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: 9SZbM1JQOn55ti5Slj3CD0Xi3Y00lbhjZ5ffOoVpANw=)
                          19: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: /SAUZ1k4eX8L1yaDa6G7I9/pVyjhf/s+58s5E13PVOU=)
                          20: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: FEgUArpY9QDIPqvCa5MPgOHoh9/PssDMBldIU2hRx70=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
                          rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 13:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ae:80:21:93:05:dd:9a:38:27:69:81:52:2d:81:91:71:ab:57:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Jul 25 10:47:40 2025 GMT
            Not After : Jul 26 13:46:40 2025 GMT
        Subject: CN=267752AF79BF22EA624341A7954198F98BA860EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:9a:cd:51:c8:e4:37:72:06:e0:14:ae:22:
                    9b:f3:07:bf:55:48:e6:41:b4:2c:bb:ea:9a:b9:c6:
                    cc:8b:c9:96:5d:22:bb:2f:da:e6:af:53:3d:c5:25:
                    f1:84:f2:11:41:c4:37:f2:89:07:a3:67:07:25:cf:
                    2b:5c:7f:ef:da:2f:f4:ab:75:f1:7f:05:ac:97:6c:
                    bf:ca:07:a6:6a:68:58:1b:db:cc:cc:e6:c2:e3:db:
                    80:9b:5d:14:63:9c:46:e1:22:45:ad:79:23:9a:24:
                    6c:f1:4b:51:c9:df:90:0f:46:4d:21:3f:7b:f8:27:
                    d7:a3:29:5a:f3:8f:2d:c6:b7:b2:e9:0c:ae:0d:ea:
                    f4:b0:42:86:7c:b7:ed:06:5f:eb:b1:3e:51:32:af:
                    c7:29:fb:7b:a2:05:50:00:3b:21:1a:c1:ca:64:cd:
                    b6:d8:30:e6:65:0f:fb:99:6a:3e:ff:17:5f:46:4a:
                    a1:51:fa:13:a3:96:63:6d:aa:19:4e:51:e7:9b:e4:
                    9d:0e:95:9d:4e:bb:96:aa:9c:9e:75:42:89:3e:95:
                    42:cc:59:36:ea:f5:86:49:9f:72:cc:19:a0:99:22:
                    76:f9:b0:36:3f:45:54:49:00:81:bd:47:32:88:b9:
                    62:01:b6:83:9a:59:5f:40:e4:82:56:84:a0:6b:eb:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:77:52:AF:79:BF:22:EA:62:43:41:A7:95:41:98:F9:8B:A8:60:EB
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:28:d5:41:de:e1:6c:04:ca:ed:30:1c:92:57:36:3f:3c:c7:
         ed:dd:e3:f9:37:c8:54:b7:ce:11:53:f3:f0:fb:18:b8:17:89:
         f8:c7:d5:90:c2:d7:ac:bd:4b:4d:ee:50:73:7a:e0:44:8d:1d:
         da:78:b5:e6:a5:b0:62:0e:33:43:6e:20:2d:bf:31:19:24:d5:
         ef:e0:0b:e7:32:52:0c:74:5f:03:44:4e:f8:6c:e4:b3:ed:e6:
         eb:73:1e:b9:5d:d3:f8:e4:c3:4c:ad:6e:56:d7:2d:58:59:ef:
         97:87:af:78:8b:37:c8:b5:ec:62:c5:de:3f:3d:fe:ce:cb:72:
         8c:82:bd:99:1b:5f:c7:92:0b:24:f3:d4:bd:f4:0f:74:10:36:
         b7:1f:a3:4f:91:86:43:9d:dc:ef:2d:7d:7a:f7:44:65:1d:97:
         75:e1:aa:0f:93:0a:cf:d9:ae:cf:81:67:67:0b:cb:39:d0:df:
         24:1d:3e:85:12:56:b7:ab:3e:98:ce:23:1d:a9:05:8d:19:0e:
         4a:47:09:d9:8d:c6:d0:74:79:ef:95:0f:18:80:03:a3:6d:12:
         94:3c:cf:7a:11:04:bd:d2:57:26:33:aa:8f:c7:f6:c7:cd:c2:
         8c:07:a1:ae:57:79:da:82:84:b5:0f:7f:65:1d:d0:2f:f7:ff:
         07:8e:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:49:09 2025 by rpki-client