Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File:                     1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier:          jBDUrphJE1luDBdIbljMXK8NHqBhdEF4VjbcBcXVM2I=
Subject key identifier:   08:A6:79:83:B3:DA:49:A0:E2:C2:37:CE:7A:27:42:5E:D7:30:13:DB
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer:       /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial:       01A13CDC54D443C0ACD342157A968DADE60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number:          06FA
Signing time:             Thu 15 Oct 2026 00:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:34 +0000
Files and hashes:         1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: 6Q/7m5zhWnBEHNo1JEXj3JOCj6AHd4PxLx1jnZN0YhI=)
                          2: JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa (hash: ixMKAyIPqjVMfEHJMavyVmPNTt58bhUiJM7XMfqPYcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:54:d4:43:c0:ac:d3:42:15:7a:96:8d:ad:e6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
        Validity
            Not Before: Oct 15 00:00:34 2026 GMT
            Not After : Oct 16 00:00:34 2026 GMT
        Subject: CN=08a67983b3da49a0e2c237ce7a27425ed73013db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:c9:69:8f:02:89:e6:69:67:87:30:76:c6:
                    f0:0a:fd:20:f1:a9:8e:6c:97:d0:c3:bb:ca:a1:46:
                    09:1c:bf:e6:66:b3:78:3c:c5:f1:a5:e0:f2:da:0a:
                    9f:ac:cf:1c:f1:86:4e:fe:59:d8:33:0e:34:74:7f:
                    1d:88:c6:47:6e:17:21:e7:ef:b2:f6:f7:a5:58:c5:
                    35:38:9e:60:39:a6:a2:84:70:f5:b4:ba:03:a1:1d:
                    77:40:f5:b4:74:a5:47:96:09:18:b3:44:46:d7:67:
                    6b:d5:51:62:09:37:ac:23:cf:7c:7c:5e:a4:51:32:
                    96:4e:dd:9d:91:ca:e3:30:ec:d9:8e:70:55:ad:d5:
                    53:e3:6f:92:f1:52:a1:6c:cc:19:7f:3d:8d:ab:df:
                    84:a2:1e:72:2b:7f:13:0b:c2:61:a9:11:b7:eb:ff:
                    70:0c:d1:a3:83:09:b9:40:a5:83:18:c3:65:de:60:
                    f4:ad:e3:f5:d5:78:1b:8d:0e:69:b8:f7:b5:4f:79:
                    46:9a:e5:da:c4:b5:bc:22:de:50:3c:0e:30:d2:c2:
                    b3:ba:fb:eb:a3:66:0c:ca:f8:54:8b:71:7a:79:a2:
                    4e:47:e8:fd:1b:80:c5:27:01:26:bf:ac:ad:b9:f8:
                    c6:15:64:40:fb:f8:00:93:18:f4:29:e1:be:2b:40:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A6:79:83:B3:DA:49:A0:E2:C2:37:CE:7A:27:42:5E:D7:30:13:DB
            X509v3 Authority Key Identifier:
                keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:01:cc:de:1b:77:19:36:67:39:eb:49:32:51:b3:dd:d4:
         ca:51:71:98:8a:aa:42:33:d3:36:45:07:57:bd:fe:82:a5:9d:
         22:64:7a:3c:79:fb:99:4a:c3:3c:97:b0:d4:db:66:53:d5:21:
         4a:e3:b9:c3:43:ba:1d:68:15:10:6f:9a:68:0e:a3:a8:13:51:
         ed:ea:74:67:8b:5a:8f:f4:b5:2c:98:65:fa:4a:e0:c3:43:93:
         b8:68:27:fa:23:e5:6c:f8:c3:11:6e:50:07:32:c0:97:1d:c4:
         1f:05:ad:e0:7a:2e:d5:d6:35:be:41:31:32:eb:81:d4:86:23:
         e2:d1:e8:28:f0:4d:b0:18:27:72:0c:e4:c6:fd:fb:2e:05:cd:
         90:60:c4:ab:60:f4:f7:fb:fe:34:d1:2f:8c:a7:da:e1:a8:44:
         68:69:01:87:8d:1d:49:59:cf:b5:8f:d8:8b:77:bc:e9:d2:e4:
         a7:81:6e:9b:2a:9c:72:93:69:28:e0:ec:68:bd:49:43:11:b3:
         c2:01:88:0e:d0:a7:db:6d:4c:28:e2:fa:bb:d1:7d:01:8e:99:
         8e:66:a9:2d:12:ef:00:10:74:68:47:5b:19:b4:b2:fd:4e:04:
         04:79:1f:a8:67:c7:85:b6:fc:8a:fb:49:5f:2a:9a:86:68:26:
         26:94:cc:78
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE83FTUQ8Cs00IVepaNreYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MjA3NTViZjY3YmE3ZDdiNGQzZDAwMTAyNzYwNGVhMjli
MjNlZDEwHhcNMjYxMDE1MDAwMDM0WhcNMjYxMDE2MDAwMDM0WjAzMTEwLwYDVQQD
EygwOGE2Nzk4M2IzZGE0OWEwZTJjMjM3Y2U3YTI3NDI1ZWQ3MzAxM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhTJaY8CieZpZ4cwdsbwCv0g8amO
bJfQw7vKoUYJHL/mZrN4PMXxpeDy2gqfrM8c8YZO/lnYMw40dH8diMZHbhch5++y
9velWMU1OJ5gOaaihHD1tLoDoR13QPW0dKVHlgkYs0RG12dr1VFiCTesI898fF6k
UTKWTt2dkcrjMOzZjnBVrdVT42+S8VKhbMwZfz2Nq9+Eoh5yK38TC8JhqRG36/9w
DNGjgwm5QKWDGMNl3mD0reP11XgbjQ5puPe1T3lGmuXaxLW8It5QPA4w0sKzuvvr
o2YMyvhUi3F6eaJOR+j9G4DFJwEmv6ytufjGFWRA+/gAkxj0KeG+K0C2DQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAimeYOz2kmg4sI3znonQl7XMBPbMB8GA1UdIwQY
MBaAFPkgdVv2e6fXtNPQAQJ2BOopsj7RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1TQjFXX1o3cDllMDA5QUJBbllFNmlteVB0RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNkLTg0Y2MtNGM3MC1iYzZm
LTllNTQ0ZDI0NmZkNy8xLzEtU0IxV19aN3A5ZTAwOUFCQW5ZRTZpbXlQdEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0LzZiN2MzZC04NGNjLTRjNzAtYmM2Zi05ZTU0NGQyNDZm
ZDcvMS8xLVNCMVdfWjdwOWUwMDlBQkFuWUU2aW15UHRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8sB
zN4bdxk2ZznrSTJRs93UylFxmIqqQjPTNkUHV73+gqWdImR6PHn7mUrDPJew1Ntm
U9UhSuO5w0O6HWgVEG+aaA6jqBNR7ep0Z4taj/S1LJhl+krgw0OTuGgn+iPlbPjD
EW5QBzLAlx3EHwWt4Hou1dY1vkExMuuB1IYj4tHoKPBNsBgncgzkxv37LgXNkGDE
q2D09/v+NNEvjKfa4ahEaGkBh40dSVnPtY/Yi3e86dLkp4FumyqccpNpKODsaL1J
QxGzwgGIDtCn221MKOL6u9F9AY6ZjmapLRLvABB0aEdbGbSy/U4EBHkfqGfHhbb8
ivtJXyqahmgmJpTMeA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:19 2026 by rpki-client