Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
File:                     SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json)
Hash identifier:          PEWR+XkNpD3Ctr6CdlFA4SZutSK3amcnus21dyuJ3nI=
Subject key identifier:   36:52:55:BA:04:19:1D:30:C9:B5:73:AB:FA:3F:91:34:5B:DA:A8:B7
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Certificate issuer:       /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial:       01A117183D05DA1B9D426524334100D0BFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
Manifest number:          1232
Signing time:             Wed 07 Oct 2026 16:00:26 +0000
Manifest this update:     Wed 07 Oct 2026 16:00:26 +0000
Manifest next update:     Thu 08 Oct 2026 16:00:26 +0000
Files and hashes:         1: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: cws464AzgqUTayaX/mPOjyMpWBWJ3D8cHWJna9fUMPg=)
                          2: ux9t1taenzMzHDc2wmWt_xH_KEM.roa (hash: NpD2C6KlNQ/GY5fAYSdqeCGTMMgpVvFEpoOp4C5rZfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:18:3d:05:da:1b:9d:42:65:24:33:41:00:d0:bf:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
        Validity
            Not Before: Oct  7 16:00:26 2026 GMT
            Not After : Oct  8 16:00:26 2026 GMT
        Subject: CN=365255ba04191d30c9b573abfa3f91345bdaa8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:c8:9a:17:b4:b4:c9:c1:64:fc:82:3f:6c:
                    ec:89:84:8f:ec:20:e1:22:f8:0a:11:37:25:0c:b5:
                    90:f8:7a:48:5d:22:58:b1:52:b1:7a:09:ec:27:20:
                    5a:38:3d:35:2f:98:c7:ab:4b:02:0b:b4:08:94:f9:
                    18:b2:87:84:b1:9f:b8:5f:15:c7:52:df:a2:cd:59:
                    eb:e8:49:93:ac:0a:71:f1:1a:f7:71:40:35:d6:85:
                    88:24:f2:df:45:b4:f8:ab:4d:fb:24:d0:d8:69:11:
                    56:57:91:08:4f:8c:c0:b8:bb:8a:3b:93:1e:75:f4:
                    f6:74:66:83:bc:a3:bc:ae:18:f3:52:30:ac:87:d9:
                    c1:4b:c5:94:21:e8:d7:d2:cd:6b:1f:bd:ca:9c:e7:
                    67:d3:ae:87:4f:db:e8:2d:0f:c3:6c:1f:1f:47:0e:
                    21:c0:08:b9:de:72:85:f8:e2:44:8e:5d:0d:1b:ca:
                    1d:dc:30:75:d4:96:14:72:08:c6:e4:a5:b3:25:2e:
                    6d:45:50:fb:c9:30:4f:18:9a:f7:4f:e2:3d:fe:38:
                    e4:d8:a2:d3:d1:88:6b:01:4f:fb:ee:96:6c:12:26:
                    64:b0:33:79:62:c7:23:4c:21:51:44:89:e8:4f:35:
                    3b:90:9c:27:e6:54:d8:5a:9a:4b:42:d5:8f:38:6e:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:52:55:BA:04:19:1D:30:C9:B5:73:AB:FA:3F:91:34:5B:DA:A8:B7
            X509v3 Authority Key Identifier:
                keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:55:00:41:09:a7:51:3a:e1:16:0b:e3:cc:9f:52:16:22:27:
         3f:4c:52:56:28:9c:8b:62:26:68:38:a4:88:7c:d7:66:08:66:
         96:11:6f:45:06:50:59:41:d2:bd:84:c0:5b:53:78:d8:66:b8:
         7f:85:25:52:de:72:91:7f:b1:e6:ab:0b:c0:d4:a8:48:d1:5b:
         5d:a5:be:3a:e5:03:da:d2:98:53:eb:db:03:0b:be:87:7c:bb:
         87:46:22:7e:b0:28:eb:18:4b:be:71:10:56:62:57:30:0b:4a:
         4e:f7:fd:c7:ae:9c:8d:4b:c1:c7:b6:69:60:37:51:95:71:4d:
         6a:2e:d4:89:b0:a4:1b:06:80:78:a2:b5:56:64:60:80:04:f5:
         eb:c7:10:3f:59:f2:d4:55:bd:62:10:36:c2:5a:e0:02:6f:0d:
         26:0f:cb:7b:2d:5c:95:f6:ec:3f:20:0a:15:a8:c3:fb:f4:fc:
         48:df:78:c5:70:ea:5f:17:46:b5:3a:c9:d6:13:00:a4:cf:24:
         f1:51:54:f4:72:da:f1:51:de:8a:39:e4:90:4e:49:15:39:10:
         46:53:15:1a:2b:de:e1:e0:80:28:b7:9f:1c:e7:e0:5e:aa:fd:
         03:5a:9b:99:81:b5:f1:1c:4d:63:33:37:7c:dc:5a:c4:12:dc:
         65:ae:98:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXGD0F2hudQmUkM0EA0L/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTJmZjQ4NWZmZDc5NGE2OTQ4MDc4YWZlNGUwNzZhZmU2
MTc2MzUwHhcNMjYxMDA3MTYwMDI2WhcNMjYxMDA4MTYwMDI2WjAzMTEwLwYDVQQD
EygzNjUyNTViYTA0MTkxZDMwYzliNTczYWJmYTNmOTEzNDViZGFhOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl3Imhe0tMnBZPyCP2zsiYSP7CDh
IvgKETclDLWQ+HpIXSJYsVKxegnsJyBaOD01L5jHq0sCC7QIlPkYsoeEsZ+4XxXH
Ut+izVnr6EmTrApx8Rr3cUA11oWIJPLfRbT4q037JNDYaRFWV5EIT4zAuLuKO5Me
dfT2dGaDvKO8rhjzUjCsh9nBS8WUIejX0s1rH73KnOdn066HT9voLQ/DbB8fRw4h
wAi53nKF+OJEjl0NG8od3DB11JYUcgjG5KWzJS5tRVD7yTBPGJr3T+I9/jjk2KLT
0YhrAU/77pZsEiZksDN5YscjTCFRRInoTzU7kJwn5lTYWppLQtWPOG6snwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZSVboEGR0wybVzq/o/kTRb2qi3MB8GA1UdIwQY
MBaAFEgS/0hf/XlKaUgHiv5OB2r+YXY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUt
NjY5YThmZWI3MTQ3LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUtNjY5YThmZWI3MTQ3
LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1UAQQmn
UTrhFgvjzJ9SFiInP0xSViici2ImaDikiHzXZghmlhFvRQZQWUHSvYTAW1N42Ga4
f4UlUt5ykX+x5qsLwNSoSNFbXaW+OuUD2tKYU+vbAwu+h3y7h0YifrAo6xhLvnEQ
VmJXMAtKTvf9x66cjUvBx7ZpYDdRlXFNai7UibCkGwaAeKK1VmRggAT168cQP1ny
1FW9YhA2wlrgAm8NJg/Ley1clfbsPyAKFajD+/T8SN94xXDqXxdGtTrJ1hMApM8k
8VFU9HLa8VHeijnkkE5JFTkQRlMVGive4eCAKLefHOfgXqr9A1qbmYG18RxNYzM3
fNxaxBLcZa6YJQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 21:44:38 2026 by rpki-client