Manifest

$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
File:                     917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json)
Hash identifier:          VOs3g77rxz5mHUqdn1cbSo4+GY0ClGEOSqPv91LjhSI=
Subject key identifier:   63:69:67:56:29:F6:D9:88:07:26:ED:D4:09:4D:5D:A9:77:C8:7B:B1
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       412E91B509253FF8FF571E4D9AC63BC5D4614241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
Manifest number:          07EF
Signing time:             Tue 09 Sep 2025 08:40:01 +0000
Manifest this update:     Tue 09 Sep 2025 08:35:01 +0000
Manifest next update:     Wed 10 Sep 2025 08:40:01 +0000
Files and hashes:         1: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: BMHprozwGWte6Qvio800qiByYqNv/68WnMz3X7VvKmo=)
                          2: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: ab+orse2k3vLknSM5IryV4UsYwWDG7bQUz36yV+1F4Q=)
                          3: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=)
                          4: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: UR2be2wKKxV/30zai705hlCSe6fGiL7hYLTIuMgZKKE=)
                          5: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: /SAUZ1k4eX8L1yaDa6G7I9/pVyjhf/s+58s5E13PVOU=)
                          6: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: FEgUArpY9QDIPqvCa5MPgOHoh9/PssDMBldIU2hRx70=)
                          7: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: 9SZbM1JQOn55ti5Slj3CD0Xi3Y00lbhjZ5ffOoVpANw=)
                          8: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: l462BIQ/tSzO6Zk3E4YvJo4+0xUGQksUVCqC9Uky4/k=)
                          9: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (hash: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=)
                          10: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=)
                          11: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=)
                          12: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=)
                          13: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: pVGUMpFaJRHsNf53FHiig+XLiVLrq4s9uchlrjAhiSY=)
                          14: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: l/M5vxVHJraJJquOUp447WdJa8JrB1Yb96LanQ1u/4U=)
                          15: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=)
                          16: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (hash: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=)
                          17: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: vNIOfkjzqm/U9+QSyeJGVHIdNe47F6+YqKQfpk+hGR0=)
                          18: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=)
                          19: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: sUd5cOj5zBaTYdoynPayg4pWZrGgngovcSWXENnQTo4=)
                          20: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: 9emyDyKvQ+p3D4i64P4jO7VZoB1ouKmqxlWkmWmWJKM=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
                          rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2e:91:b5:09:25:3f:f8:ff:57:1e:4d:9a:c6:3b:c5:d4:61:42:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Sep  9 08:35:01 2025 GMT
            Not After : Sep 10 08:40:01 2025 GMT
        Subject: CN=6369675629F6D9880726EDD4094D5DA977C87BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:53:01:d0:92:01:7c:5f:22:ef:ac:0d:97:
                    6c:09:80:d6:30:0e:6e:b3:50:a0:94:72:ff:2c:68:
                    d7:ab:f2:70:d7:08:9f:ad:fc:5e:80:f0:3e:ab:81:
                    83:d1:c6:58:1f:0a:cb:1b:0e:73:d5:bc:92:9d:9d:
                    93:9b:50:eb:e9:c6:70:a1:95:78:56:44:f7:2c:55:
                    7d:1a:9e:9b:c1:cb:e8:4c:6d:11:d3:cd:24:8e:bc:
                    99:6b:a3:20:70:57:cd:f4:06:17:b9:75:ad:7a:45:
                    50:6f:8f:68:6f:46:0d:2f:5d:f1:4b:d5:d1:f8:c3:
                    39:fe:b8:38:3e:99:40:d4:f3:b8:77:90:01:de:8a:
                    6f:f7:2e:c9:d4:34:60:0d:d1:ce:d1:d6:a7:6c:db:
                    12:45:88:cd:f9:22:ab:3b:23:65:ed:91:e5:3f:9e:
                    a6:ab:64:13:f4:35:86:4b:55:6a:70:33:a2:53:7b:
                    59:78:9c:b5:7e:04:67:95:a0:95:4a:89:b4:55:af:
                    ec:e5:54:a2:af:e5:eb:a2:3e:84:0c:19:ee:5e:77:
                    74:59:75:9a:cf:fe:9f:c0:58:cd:ef:0f:5c:ee:38:
                    45:fc:49:a0:75:3c:67:11:16:91:99:9a:86:1b:a3:
                    02:7f:23:2d:1c:ba:26:49:38:a8:3c:a9:f5:fa:bd:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:67:56:29:F6:D9:88:07:26:ED:D4:09:4D:5D:A9:77:C8:7B:B1
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:54:34:20:06:66:24:9a:b0:76:4f:9b:5a:b1:77:2d:89:c8:
         fc:04:17:dc:93:45:f6:95:e8:17:c1:a7:0c:c2:bc:c7:32:74:
         3a:58:1f:f1:06:b1:e7:12:67:29:49:d9:a6:7b:75:08:61:ae:
         55:c0:38:8c:c6:f9:21:af:09:9e:2e:25:29:58:82:bc:f3:a5:
         1c:78:90:c3:a5:ce:ab:4d:3f:18:c6:ab:bd:cd:d1:f8:a1:0e:
         e7:46:6a:da:62:c6:b1:d5:61:f9:be:7f:b9:ee:f0:35:89:da:
         80:3e:5d:85:26:f4:81:cb:5c:c0:4f:9d:7f:b6:ae:be:3b:96:
         ed:23:38:c6:96:6f:c4:e2:38:b5:9d:2e:98:9f:06:09:85:c4:
         b3:7d:ea:85:c2:6a:dd:47:28:8d:7b:48:b3:71:ae:57:89:24:
         f0:af:1d:27:c6:a6:a4:da:17:20:7f:00:93:c7:a4:87:90:f3:
         7b:db:4b:bc:0e:ff:99:05:f3:8a:79:44:54:0f:7b:22:30:d6:
         0d:ff:17:c0:db:4c:16:cb:83:33:0c:f0:54:f9:aa:96:cc:b0:
         0c:fc:98:6d:18:06:ff:7e:f8:13:a8:15:bf:2e:dc:87:f9:bd:
         b2:9f:b1:c6:f2:26:ad:89:5b:a5:ac:98:e3:2a:d0:51:4c:56:
         b4:94:26:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:06:25 2025 by rpki-client