Manifest

$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
File:                     917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json)
Hash identifier:          rCCXiQPctfy3T+YLfgrR7p8lFvizzQ8WfeKn9XitYHA=
Subject key identifier:   56:14:19:1C:A3:F1:CE:91:E3:AE:20:35:C6:CC:65:8D:39:EE:CF:54
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       35A2999ED9EA69E2EF0F7AEB87606AF045FD3E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
Manifest number:          0825
Signing time:             Sun 19 Oct 2025 14:33:50 +0000
Manifest this update:     Sun 19 Oct 2025 14:28:50 +0000
Manifest next update:     Mon 20 Oct 2025 16:05:50 +0000
Files and hashes:         1: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: 9SZbM1JQOn55ti5Slj3CD0Xi3Y00lbhjZ5ffOoVpANw=)
                          2: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: LC9IRB4htaktpRB4L54WnwaKpOBGRaDtKdq9TAm50RI=)
                          3: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: l/M5vxVHJraJJquOUp447WdJa8JrB1Yb96LanQ1u/4U=)
                          4: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: ab+orse2k3vLknSM5IryV4UsYwWDG7bQUz36yV+1F4Q=)
                          5: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: cfZ2cZq47PLh8xIaUDDigmhTafi04oTK4TsExV8Jlks=)
                          6: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: l462BIQ/tSzO6Zk3E4YvJo4+0xUGQksUVCqC9Uky4/k=)
                          7: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: lpiENc1NiZMB+xhZWFop+uH5ii+S65IL3vFdFlLkM/g=)
                          8: 326131313a383038333a343a3a2f34382d3438203d3e20323132353132.roa (hash: rA+VWBlNmMTlI1MqkG6iCSfZp+G+euQmUo4P37LAf6I=)
                          9: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: pVGUMpFaJRHsNf53FHiig+XLiVLrq4s9uchlrjAhiSY=)
                          10: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 8ai4jBBEXqBhy0d+bW6vCZlIpCog/7Y/B3NzzCVqSxU=)
                          11: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: 9emyDyKvQ+p3D4i64P4jO7VZoB1ouKmqxlWkmWmWJKM=)
                          12: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: vNIOfkjzqm/U9+QSyeJGVHIdNe47F6+YqKQfpk+hGR0=)
                          13: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: BMHprozwGWte6Qvio800qiByYqNv/68WnMz3X7VvKmo=)
                          14: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: FEgUArpY9QDIPqvCa5MPgOHoh9/PssDMBldIU2hRx70=)
                          15: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: b8eoDfa3Uog8rRL1vySBHIOJaa69nWJpm5vYAnGVuEY=)
                          16: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: fudf0Tk2AERFb92w9HhJhitXCoCMum1lphDOYpO2nnA=)
                          17: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: /SAUZ1k4eX8L1yaDa6G7I9/pVyjhf/s+58s5E13PVOU=)
                          18: 326131313a383038333a343a3a2f34382d3438203d3e203233393539.roa (hash: UtCrqIL7eDgs+7iFNhqc4eipkNZ0WmRzD7bk4K9U3AI=)
                          19: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: C2j/hCXHv+Vavh99ypHNAOEpOysz53yXfEf1hJhI5nE=)
                          20: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: BN0yN3wqY8GQK3aggJszsc+WEY52z8NtLeJIcUs5U5Y=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl
                          rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:99:9e:d9:ea:69:e2:ef:0f:7a:eb:87:60:6a:f0:45:fd:3e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Oct 19 14:28:50 2025 GMT
            Not After : Oct 20 16:05:50 2025 GMT
        Subject: CN=5614191CA3F1CE91E3AE2035C6CC658D39EECF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:88:d7:8a:51:a1:e1:9e:d9:44:73:df:80:
                    ca:7e:fb:a5:4c:4c:c0:c2:ec:18:55:f5:29:63:cc:
                    bb:3b:ef:df:f0:27:35:ef:fe:ad:33:e2:a4:f0:e4:
                    7a:cb:ee:d7:0c:eb:a3:0c:9d:29:8c:58:72:02:b0:
                    2f:03:b4:47:41:4e:44:e9:c2:13:d6:a6:7d:53:3f:
                    1e:a8:39:c5:82:3a:b9:5e:52:49:2f:a7:af:05:21:
                    69:70:7b:dc:e1:b1:30:fa:82:51:11:00:5d:5f:02:
                    a4:b0:2d:61:a0:91:d8:75:b8:6d:fd:4d:76:45:0d:
                    86:ac:3d:bf:c6:da:e8:fc:1d:88:c7:3d:2d:a6:3c:
                    21:01:43:3c:5a:48:00:7f:bc:74:e9:e0:b4:d1:fe:
                    e2:c8:17:0b:d3:d3:6a:05:49:8c:5c:b6:7d:53:69:
                    a8:c6:ac:d8:9d:1b:e1:40:fe:97:4f:f3:0d:a4:c0:
                    a9:76:57:7f:97:9b:6b:25:01:35:6f:ce:00:8f:d0:
                    d9:01:96:ca:48:29:24:12:ef:50:02:0d:47:0a:93:
                    ae:19:b1:94:95:32:4e:29:91:bd:53:1f:6e:41:50:
                    d7:cd:8f:a3:2c:3a:85:09:e4:60:b8:56:f5:cb:a2:
                    42:92:7f:24:f0:ca:1b:14:87:60:08:36:7e:e8:bb:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:19:1C:A3:F1:CE:91:E3:AE:20:35:C6:CC:65:8D:39:EE:CF:54
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:33:1e:b5:38:b6:94:59:41:f2:ff:fd:ea:ee:08:16:c2:a0:
         2d:57:02:4f:c9:8a:0b:88:0f:a6:bf:1e:74:fc:1e:60:b5:4d:
         e9:f2:17:23:5f:9c:49:95:f4:78:13:60:23:fa:87:b2:62:75:
         23:f7:54:e3:1b:14:42:42:96:9d:19:a5:57:eb:89:e6:44:78:
         41:6f:0c:bd:d6:16:38:26:b1:9e:4d:fe:b5:c0:bd:61:ff:8a:
         48:f0:73:86:0c:b1:f4:69:29:32:cd:00:3a:cb:71:5f:52:f5:
         5e:1b:41:96:7b:65:ec:6a:11:86:4d:26:f8:59:93:22:ab:40:
         01:16:80:cb:4b:9d:08:c2:81:bc:e2:a6:bd:26:aa:0d:56:2c:
         d8:d6:cc:eb:39:7e:67:27:e4:4a:65:87:b7:df:9e:49:d0:dc:
         b7:55:0e:08:c1:4e:99:bc:f2:e5:94:03:c3:4e:72:f0:af:0d:
         6e:6e:5e:d4:bc:da:6f:e2:48:61:31:2b:a8:92:0f:84:91:c4:
         93:75:27:b9:93:79:cd:39:aa:00:7c:6e:7f:62:ff:09:95:99:
         2c:bc:98:6b:83:a9:c8:0c:a8:c8:cc:75:76:42:88:69:c4:6c:
         9d:3b:eb:1c:2a:74:5a:2e:96:9c:5f:d9:88:f7:70:0f:b8:66:
         c9:4a:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:14:17 2025 by rpki-client