Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File:                     SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier:          h/4YvlNhsNs/fv/Sl4Ns85yZEbdlBgPbyyF4ThWypHI=
Subject key identifier:   52:64:24:AF:9A:6D:CD:F3:75:8B:61:49:51:63:0F:09:F0:F1:89:2E
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer:       /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial:       01A172B8D16D7FAAFA9A546CCF02A1B994A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number:          0941
Signing time:             Sun 25 Oct 2026 11:01:17 +0000
Manifest this update:     Sun 25 Oct 2026 11:01:17 +0000
Manifest next update:     Mon 26 Oct 2026 11:01:17 +0000
Files and hashes:         1: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: SGuGkMa65TLQD0WNKhtw9hxc8QhtGC+wG1tIuKy3OYE=)
                          2: ejZDEXBG6lJfQBaB_r07TXkoi64.roa (hash: S5aamcy+0zShe8pnJRlRZQ6L4/p8VXPVoAbyx/8mm70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:72:b8:d1:6d:7f:aa:fa:9a:54:6c:cf:02:a1:b9:94:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
        Validity
            Not Before: Oct 25 11:01:17 2026 GMT
            Not After : Oct 26 11:01:17 2026 GMT
        Subject: CN=526424af9a6dcdf3758b614951630f09f0f1892e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:e9:a2:e4:38:7b:09:2f:b3:b2:7a:81:ab:
                    83:08:27:57:29:b1:a5:8c:7e:b8:e4:69:6e:17:10:
                    e2:26:46:f1:ff:64:79:13:b8:ef:a3:d2:1f:21:02:
                    c8:92:5c:f5:38:0a:6f:6c:61:a5:3e:0c:45:6a:39:
                    46:f6:68:19:15:dd:ff:5d:36:9d:84:db:36:d7:de:
                    3e:cf:e3:8b:a6:8d:a8:51:fa:c2:2d:6f:20:33:ef:
                    da:4e:4e:a0:ef:5a:0d:c8:e3:66:b0:7d:7a:3c:e1:
                    63:87:b6:3f:6f:43:b8:78:2c:8d:3f:a8:2a:46:f8:
                    b5:a2:f0:25:9e:46:ef:77:2c:88:8c:3f:82:62:85:
                    65:ab:9a:78:93:ae:0e:b2:be:ea:b8:ad:ba:ba:5c:
                    67:2d:66:bf:fb:28:ec:3b:d2:76:3a:86:32:90:e2:
                    eb:81:79:9d:87:5b:a1:be:b4:a7:00:a1:66:07:18:
                    49:90:27:c2:67:f9:a5:15:a9:3e:b0:d0:be:22:2a:
                    f8:e0:1a:f4:d3:be:d7:c6:30:c4:81:81:79:59:20:
                    f8:4a:45:69:2d:30:90:4c:08:57:4a:47:f1:23:b4:
                    fa:86:ce:94:45:9d:1b:a1:4b:c1:a1:51:c9:c9:f4:
                    c0:c8:66:83:b4:3a:a6:63:1e:0e:55:14:b8:d6:6f:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:24:AF:9A:6D:CD:F3:75:8B:61:49:51:63:0F:09:F0:F1:89:2E
            X509v3 Authority Key Identifier:
                keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:10:d6:23:03:22:76:d4:ba:93:cf:1d:b0:69:fb:60:d3:9d:
         f5:e6:04:b0:d2:30:ea:19:5e:dd:30:e6:fb:cb:76:55:1c:35:
         63:07:30:01:c0:12:87:b7:b6:1a:e5:e7:58:08:b5:3c:6c:9d:
         95:b5:3a:06:ba:2f:36:b1:01:82:bc:fa:01:94:83:b8:5a:01:
         1d:61:d8:24:59:7d:04:e7:6e:ae:8f:c7:b2:4a:ed:54:f3:61:
         05:a0:f9:e3:01:b0:0e:ad:b3:71:51:a9:45:90:a0:f2:24:74:
         c3:46:e8:25:14:f0:db:57:95:5b:1d:3a:9d:68:a0:b1:33:71:
         6e:b1:f0:7f:90:fb:15:ab:1d:f6:ba:e0:d7:25:2e:b3:c5:3e:
         d6:bb:57:ce:de:66:ee:03:7c:b9:98:56:11:f1:2f:fa:65:b2:
         f2:54:5c:03:3b:bf:d3:95:d7:17:d9:35:b8:15:62:98:58:0b:
         7b:90:00:79:74:c0:a0:cc:4d:c1:82:69:f5:5e:e4:83:e1:ff:
         59:60:e9:3a:49:f6:a5:45:59:74:3b:be:a8:b9:ee:d1:c6:98:
         f9:1d:6b:b0:f4:3b:db:4e:8a:34:64:79:3b:56:e7:1d:26:9f:
         1a:23:d0:dc:6c:30:e7:ce:30:06:43:6b:c5:dd:2a:0e:ae:25:
         19:a5:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:10:27 2026 by rpki-client