Manifest

$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
File:                     917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json)
Hash identifier:          Z9iRLYPYO/vjf8S7gs1AX+1A62+PGen3I4DQz8+gnwg=
Subject key identifier:   7E:16:F6:54:CE:99:68:5C:E3:58:16:7E:4F:15:73:DC:AD:1E:61:69
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       036B4C563B03BDBA253BB607ECCDAFD63D42FD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
Manifest number:          0786
Signing time:             Sat 28 Jun 2025 02:57:58 +0000
Manifest this update:     Sat 28 Jun 2025 02:52:58 +0000
Manifest next update:     Sun 29 Jun 2025 06:39:58 +0000
Files and hashes:         1: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: f6kqNpaouo4IJLz4+TE1CDF9dBY/IV8Tu4wSfLd1JTA=)
                          2: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=)
                          3: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: BYY56AoRrxgnLm9I6DXnIMbVDNZjzGgx+KhPNmJwQo4=)
                          4: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: pVGUMpFaJRHsNf53FHiig+XLiVLrq4s9uchlrjAhiSY=)
                          5: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (hash: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=)
                          6: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: PBen+R0swS3EqAcXbZpm/npRHePATD8IaAlZax2MqLk=)
                          7: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: 9emyDyKvQ+p3D4i64P4jO7VZoB1ouKmqxlWkmWmWJKM=)
                          8: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: UR2be2wKKxV/30zai705hlCSe6fGiL7hYLTIuMgZKKE=)
                          9: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: 0kgj4S8QD5F7nVwggl2/fQIo+iV7EdVbsi4EXk3j6EE=)
                          10: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (hash: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=)
                          11: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: 4ZWAmDrwu4Strz0TOAaswKz/Iza6dycEiIEWJH8g4Xw=)
                          12: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=)
                          13: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=)
                          14: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=)
                          15: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: CD2wxjYSfRPVv1P3NM9gPcAzfmPv7Txt4DQakbWTg6k=)
                          16: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: vBYPJx00qLVv8CtqPb97mpTIIbclUXpVmgNdOsiewnw=)
                          17: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: kI0kbYAdMgWhESDWM0EC5+Mfm3tf/xFT+bxqMRtwQwo=)
                          18: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: 8M8H7s0+6PEYOPiP+i/A7SxmCn/mfCoc9BgSmxCnWkA=)
                          19: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=)
                          20: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
                          rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 06:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6b:4c:56:3b:03:bd:ba:25:3b:b6:07:ec:cd:af:d6:3d:42:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Jun 28 02:52:58 2025 GMT
            Not After : Jun 29 06:39:58 2025 GMT
        Subject: CN=7E16F654CE99685CE358167E4F1573DCAD1E6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:80:f9:ef:59:29:8c:16:f9:19:d7:80:ec:
                    d2:e9:9c:79:9e:37:8e:a2:65:38:32:be:a8:f2:2d:
                    cf:7b:7b:7c:22:34:4b:be:ee:3b:ab:f0:8b:da:21:
                    26:87:bf:25:18:21:04:cd:46:1f:c0:f2:ed:32:95:
                    5b:73:c9:87:78:96:56:a2:f9:4e:fa:29:34:2f:f7:
                    82:d5:59:f3:37:8c:58:56:f7:8e:37:48:2b:2a:5c:
                    b6:bd:d6:d6:5a:c0:9c:99:98:b1:d0:bf:3f:3c:df:
                    1f:e8:0d:d9:75:37:8c:0a:25:da:f6:33:d5:dd:e2:
                    1a:2b:03:05:1c:fc:90:4e:ec:10:17:6d:09:cd:a1:
                    16:2b:75:da:59:8f:19:09:ac:c4:d0:33:1a:7e:c2:
                    1d:0b:c5:69:8b:af:4a:fa:d5:67:8b:af:d1:3b:1b:
                    3d:00:cb:e1:12:0b:5f:d8:dd:c7:c6:87:52:5f:a0:
                    6f:09:7c:b9:05:ce:cf:ab:25:ee:a0:1c:35:bc:9c:
                    76:e4:49:96:3a:21:13:47:b3:2c:5c:74:1d:12:f8:
                    e3:cc:fd:f7:d9:a1:c0:2d:1d:60:89:7b:85:42:65:
                    53:cc:9b:3e:df:9b:fa:ef:55:e7:40:32:bb:ac:ce:
                    f8:4e:36:8b:84:b6:d7:90:de:18:f3:5f:24:02:8e:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:F6:54:CE:99:68:5C:E3:58:16:7E:4F:15:73:DC:AD:1E:61:69
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:b3:3c:e0:72:28:eb:1e:94:9d:8e:e9:11:64:c1:83:76:
         29:f6:36:2f:74:70:47:46:12:5d:b3:a7:6d:02:35:ea:ba:10:
         83:3e:fe:1b:ac:6d:da:52:4b:db:29:3f:1a:6f:35:1f:b3:97:
         54:63:9c:c0:07:c0:27:85:38:99:18:d4:8b:c5:55:7d:d6:54:
         1f:ff:12:53:25:a4:39:e8:fd:d0:71:de:22:0c:66:f4:18:21:
         e9:9d:e8:42:a6:41:3a:4d:37:3d:69:df:c5:fd:3c:14:82:c0:
         2f:4a:cc:50:21:19:6e:cf:a8:3f:92:12:76:e8:0b:8f:4a:ef:
         60:d8:f2:67:10:c1:6a:fd:9d:1d:eb:54:76:bf:52:32:f7:6e:
         74:09:fd:1e:3f:49:b4:f6:46:e1:6e:09:18:f3:e7:ba:64:0f:
         ef:f9:68:f7:e5:ca:67:b6:ea:97:9c:23:a6:89:00:2a:58:81:
         a5:08:cd:cf:ba:53:2b:87:c5:60:f6:08:da:f5:63:28:db:1c:
         8b:70:f7:2e:56:af:b8:63:b7:c5:02:2f:ea:54:69:ee:03:31:
         41:ae:8e:26:67:4e:42:1b:4d:25:b2:be:55:fd:ce:cc:8b:0a:
         cb:24:0b:9a:fd:60:80:73:96:1d:91:19:86:9e:cc:22:44:ce:
         1e:47:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:16 2025 by rpki-client