Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File:                     1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier:          42S0ICt9adIw8zzwyjxRuydLAyWwuYBIAKGSt/jmcB8=
Subject key identifier:   BE:03:26:B7:8B:A2:1C:EF:0F:44:AA:DB:6F:10:E9:42:5D:A7:BB:C7
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer:       /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial:       019922C3A35C03D84BD7F8E6CB8C5B1CFA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number:          02C7
Signing time:             Sun 07 Sep 2025 06:01:10 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:10 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:10 +0000
Files and hashes:         1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: ll3/Dru+DdRccq4KoH5ZUq+1LYL6uf9iDWl8BrGgGXU=)
                          2: 8nQwwbTKR2QHt6Bol-B0GBvbksM.roa (hash: SHforER0sbIvAI5iADwv0gU7LdmKAhXUjkcLwpFZRTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:a3:5c:03:d8:4b:d7:f8:e6:cb:8c:5b:1c:fa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
        Validity
            Not Before: Sep  7 06:01:10 2025 GMT
            Not After : Sep  8 06:01:10 2025 GMT
        Subject: CN=be0326b78ba21cef0f44aadb6f10e9425da7bbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:82:12:43:ef:e3:dc:8e:c3:dd:3f:65:80:
                    fc:fb:77:53:b3:f2:10:50:67:eb:96:66:85:0b:72:
                    bb:d7:4e:4d:38:aa:08:3e:b2:61:43:f5:72:29:6e:
                    23:e1:af:06:91:94:c2:42:fe:2f:c7:ed:8b:c4:39:
                    6a:fc:c8:51:49:67:69:b2:ed:02:be:93:75:4c:79:
                    66:5a:f1:a9:8e:c2:7c:08:e1:d5:cf:a7:61:f5:75:
                    8a:3b:ce:29:c1:79:52:15:17:76:73:fc:7a:44:95:
                    b8:eb:c8:8a:f2:07:40:70:56:16:61:a1:82:b4:8d:
                    fb:e6:68:60:44:39:28:1b:e0:ca:bb:2b:82:b5:a4:
                    6a:9c:b2:9f:1e:d6:56:8b:62:13:33:84:65:ad:10:
                    20:9d:f3:52:6c:6a:b1:6f:c0:7b:97:d1:d8:24:83:
                    7a:2b:35:7d:7d:d9:4e:a3:d3:71:10:19:4c:da:f7:
                    1c:f2:de:7f:c5:c7:0f:0c:29:f1:13:89:73:a9:da:
                    83:7d:f2:1e:e6:ee:0d:35:5c:c4:cb:ea:e2:5e:d6:
                    be:be:9d:65:15:a0:8b:71:b6:22:a6:22:5b:a2:dc:
                    d6:3d:d0:e7:6c:08:e8:0f:53:b8:22:72:be:fc:1e:
                    d5:08:e2:e5:d4:41:6d:78:cc:d0:6b:54:06:57:ff:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:26:B7:8B:A2:1C:EF:0F:44:AA:DB:6F:10:E9:42:5D:A7:BB:C7
            X509v3 Authority Key Identifier:
                keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:4c:9c:71:13:54:ac:3e:be:07:d3:c9:52:7c:23:3e:44:
         10:38:ea:0a:86:8e:f6:25:3a:51:fd:2c:ce:91:b1:7c:03:f7:
         af:29:b2:ab:86:24:69:ed:cc:00:53:89:45:ec:06:68:fd:be:
         14:24:be:70:57:71:e7:0c:bc:68:24:84:b1:4c:2d:c4:c4:53:
         8c:b8:eb:1b:55:d5:79:5b:d3:4c:e2:26:df:d9:25:34:d9:e4:
         77:73:21:66:9c:25:6f:ef:65:e9:2a:df:cf:82:b3:d0:de:3e:
         ae:1f:4a:a6:ae:7e:ee:19:c0:1f:11:0c:83:7e:9d:c0:12:b0:
         84:2d:4f:55:60:c5:42:17:23:b5:ca:cb:c5:f7:4a:46:da:08:
         d8:cf:f2:3d:c7:4a:bd:54:b7:74:f7:37:78:45:de:f6:f3:0e:
         be:22:c3:74:73:04:d9:76:9d:ba:a0:02:ca:c1:c3:3d:42:ea:
         b5:15:32:ce:fd:ea:d8:83:0d:71:bf:13:89:af:b4:6d:1b:32:
         c0:5a:f3:d6:1c:83:eb:c8:32:cb:84:d9:1b:a3:50:98:0f:63:
         b4:33:f4:d9:72:25:fd:6f:ef:7a:f8:92:79:1c:71:9a:df:d8:
         e0:3e:a1:50:86:c2:59:eb:62:8d:a3:ff:3b:00:21:aa:08:94:
         35:ad:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:28 2025 by rpki-client