Manifest

$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
File:                     917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json)
Hash identifier:          Yz+mLDqCC/0M2vGtz1KhMNQFrf9L7DaWEnXSPRqHL8A=
Subject key identifier:   5A:AF:D3:9E:FF:2B:C9:88:37:82:54:16:F2:13:BD:31:2F:92:DD:0A
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       7220E27E63FC0EA48F17C49407728FACD62F40C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
Manifest number:          07A9
Signing time:             Tue 22 Jul 2025 08:56:12 +0000
Manifest this update:     Tue 22 Jul 2025 08:51:12 +0000
Manifest next update:     Wed 23 Jul 2025 11:42:12 +0000
Files and hashes:         1: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: 5GcaAj4F1Yar2xNymo+A5Ji0E07rvAyBmM78UjGogpg=)
                          2: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=)
                          3: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: BYY56AoRrxgnLm9I6DXnIMbVDNZjzGgx+KhPNmJwQo4=)
                          4: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=)
                          5: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: 4ZWAmDrwu4Strz0TOAaswKz/Iza6dycEiIEWJH8g4Xw=)
                          6: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=)
                          7: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (hash: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=)
                          8: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: PBen+R0swS3EqAcXbZpm/npRHePATD8IaAlZax2MqLk=)
                          9: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: f6kqNpaouo4IJLz4+TE1CDF9dBY/IV8Tu4wSfLd1JTA=)
                          10: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=)
                          11: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (hash: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=)
                          12: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=)
                          13: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: 8M8H7s0+6PEYOPiP+i/A7SxmCn/mfCoc9BgSmxCnWkA=)
                          14: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=)
                          15: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: vBYPJx00qLVv8CtqPb97mpTIIbclUXpVmgNdOsiewnw=)
                          16: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: kI0kbYAdMgWhESDWM0EC5+Mfm3tf/xFT+bxqMRtwQwo=)
                          17: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: CD2wxjYSfRPVv1P3NM9gPcAzfmPv7Txt4DQakbWTg6k=)
                          18: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: 9emyDyKvQ+p3D4i64P4jO7VZoB1ouKmqxlWkmWmWJKM=)
                          19: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: pVGUMpFaJRHsNf53FHiig+XLiVLrq4s9uchlrjAhiSY=)
                          20: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: UR2be2wKKxV/30zai705hlCSe6fGiL7hYLTIuMgZKKE=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
                          rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 11:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:20:e2:7e:63:fc:0e:a4:8f:17:c4:94:07:72:8f:ac:d6:2f:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Jul 22 08:51:12 2025 GMT
            Not After : Jul 23 11:42:12 2025 GMT
        Subject: CN=5AAFD39EFF2BC98837825416F213BD312F92DD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:f2:8a:de:48:f5:9d:5b:fe:6c:a4:01:f4:
                    df:23:ca:b4:2a:f0:d5:0d:c3:5a:7b:25:3f:d3:15:
                    b1:24:8f:db:86:95:4d:3a:09:30:05:ab:c7:54:cd:
                    76:cb:0a:20:96:85:ce:54:da:cb:9c:33:0b:ab:6f:
                    82:54:7b:85:78:b9:f4:76:01:50:ea:ac:eb:0b:2b:
                    43:37:25:62:af:db:b3:f4:4a:38:64:c5:7a:db:77:
                    62:35:fc:96:18:06:9b:1b:5c:04:a7:c8:e4:81:a9:
                    5b:0b:5f:2a:2e:a7:e8:2b:7f:de:12:43:f2:dc:4b:
                    c9:65:b5:a1:11:23:40:9b:58:0a:a4:ae:8c:a0:be:
                    44:52:90:67:c5:94:da:3e:38:5a:19:22:59:4b:fd:
                    2c:b3:17:29:1e:54:be:98:04:29:22:15:db:9d:a9:
                    90:73:57:3f:34:2e:de:1a:f6:ea:85:b2:d0:63:57:
                    5e:b1:32:4d:79:3a:ec:de:b4:a7:92:c3:af:3c:46:
                    81:68:54:99:de:a8:2d:14:ce:b6:a9:2b:e8:5c:b1:
                    91:9f:cc:2c:e5:59:9c:22:b9:82:46:96:c5:8d:f7:
                    69:a0:1f:c4:60:bb:ba:b3:ee:c4:4f:8f:e1:a7:f4:
                    b3:da:30:aa:2c:be:70:ae:97:a8:43:1a:da:50:5e:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AF:D3:9E:FF:2B:C9:88:37:82:54:16:F2:13:BD:31:2F:92:DD:0A
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:01:af:c7:58:6b:a3:f4:81:da:a2:d7:bc:3e:6a:e8:44:91:
         34:31:65:d3:44:c5:b1:35:a1:0d:b5:0b:9e:43:ac:14:02:66:
         b8:77:9b:01:bd:61:4c:91:b2:5c:9d:8d:68:53:3c:12:85:e2:
         f3:0e:2d:ef:43:c5:36:50:27:ad:03:58:f2:96:f1:8b:ea:f9:
         01:48:39:aa:6e:62:e5:7d:aa:ac:ef:eb:a4:6a:1d:77:80:ab:
         40:1d:df:51:6a:49:97:b5:f6:a9:53:49:c2:cf:3a:84:0f:17:
         4a:85:4f:ed:f4:3d:ff:c9:fa:10:f3:a9:3f:71:37:57:2f:fe:
         4d:17:ef:d0:d5:9c:d4:dd:03:2c:77:27:64:49:53:68:7f:dd:
         a2:eb:98:e5:58:70:c1:25:92:d3:d0:4b:e6:d8:99:9b:cf:c1:
         be:b2:f3:9f:df:dd:a0:00:cf:7b:ad:b7:95:35:d8:71:84:4b:
         35:e6:ca:52:88:74:9b:bd:27:cc:39:29:0e:1e:31:59:a9:a5:
         de:de:af:eb:ea:c0:98:34:31:a1:33:9f:92:68:17:1e:47:4d:
         c2:e1:88:5e:89:60:21:d7:71:d4:22:25:e4:1b:0d:dd:8a:a6:
         c1:a0:7f:4c:fe:0f:ae:fc:49:ec:51:19:ca:ac:26:75:b0:95:
         c2:8f:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:44 2025 by rpki-client