Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File:                     1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier:          kl8cGzm4enb0Up0TjZQsWQpW4aL3bdwBlUwmkr7DsnY=
Subject key identifier:   F2:D3:BD:46:D9:B9:F4:67:9E:31:97:D3:6A:2B:05:40:2C:4B:1B:29
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer:       /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial:       01A0D0B70357592AD10FEB7C74A1978ECEBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number:          06C2
Signing time:             Thu 24 Sep 2026 00:00:49 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:49 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:49 +0000
Files and hashes:         1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: 7uv0HNA1Wuv5NQPVqG44EEKxlhJUFOd5iKjR1/wnlCA=)
                          2: JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa (hash: ixMKAyIPqjVMfEHJMavyVmPNTt58bhUiJM7XMfqPYcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b7:03:57:59:2a:d1:0f:eb:7c:74:a1:97:8e:ce:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
        Validity
            Not Before: Sep 24 00:00:49 2026 GMT
            Not After : Sep 25 00:00:49 2026 GMT
        Subject: CN=f2d3bd46d9b9f4679e3197d36a2b05402c4b1b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:1e:c2:4c:f8:09:90:b7:64:cf:07:ba:ae:
                    20:0f:35:9f:6e:54:a9:32:0e:97:79:c6:7a:f6:b5:
                    2e:92:cc:3a:69:a2:0f:5a:ee:6c:f9:7c:22:e8:7c:
                    49:1b:ba:d3:04:1c:af:23:c0:4d:14:16:0e:15:c9:
                    79:5c:53:40:2c:a0:13:fd:0b:f1:1a:0d:eb:ee:24:
                    2f:0b:24:9a:9f:2f:ce:33:64:36:cd:9d:97:c1:16:
                    c5:da:d6:b1:c5:0c:15:3c:0c:66:fd:33:ff:c8:a5:
                    ec:f8:b2:92:23:81:0b:e4:c7:91:d7:c7:20:a8:8b:
                    ff:3d:7e:96:58:09:2d:34:a6:1d:74:e1:94:38:e7:
                    0b:28:40:53:4a:2f:56:d9:bb:80:01:22:73:aa:16:
                    64:79:e3:c0:6e:99:ca:08:50:b2:4c:4c:90:68:57:
                    08:c8:c0:46:bf:ba:59:92:1d:4c:53:e3:d4:33:6c:
                    7d:73:17:1c:f9:1f:c1:63:10:5d:5b:a3:a7:3c:29:
                    2e:ca:39:cd:4a:57:23:a8:bb:0a:3c:33:79:a1:5f:
                    48:ee:cf:92:8c:e9:5f:5b:c4:f8:12:88:45:e2:e2:
                    93:53:7e:e3:d0:f6:bc:82:a1:44:c9:5b:90:0f:7e:
                    2d:17:32:92:7e:07:2d:81:7c:79:7b:02:02:a7:6d:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:BD:46:D9:B9:F4:67:9E:31:97:D3:6A:2B:05:40:2C:4B:1B:29
            X509v3 Authority Key Identifier:
                keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:ab:52:96:41:b6:f2:be:24:f3:24:23:77:e7:77:3d:96:
         b3:b5:2a:e8:cb:c1:00:a7:53:12:fe:cb:e9:d9:ab:06:a7:8e:
         40:c5:02:30:52:88:6e:f7:23:33:56:1a:d5:b6:9e:fa:56:71:
         70:d7:45:01:2c:67:9b:ac:11:11:17:b8:ae:05:b6:f4:08:26:
         c3:7d:d6:0b:7d:6d:ef:bc:72:dd:4e:13:3c:fb:b4:f2:7d:ac:
         f9:98:0d:c1:05:b8:0e:7f:d5:9b:55:43:93:46:9a:58:6e:a8:
         ae:0e:f8:90:6f:0d:06:07:ba:c3:40:4f:2c:2a:9c:9a:51:78:
         aa:0d:dd:c7:f5:8a:87:90:7b:e7:74:63:82:92:02:51:25:b3:
         37:de:c9:54:f6:30:68:8f:3a:9f:94:54:5d:f5:5d:0e:08:8b:
         4c:4f:11:f3:6f:d1:9e:69:60:ac:9f:9e:82:c2:f3:b8:2f:bb:
         6b:7e:f7:ea:84:8c:c1:a2:81:57:27:f2:8f:a9:7a:25:cb:db:
         4b:9a:36:e1:89:4b:97:f6:46:4a:35:ff:21:fd:50:01:b2:4a:
         92:16:3f:d2:64:61:0b:ad:f5:f5:e5:67:d7:35:94:58:88:53:
         88:57:e2:a3:0a:e3:6c:83:81:6e:b3:32:66:26:26:60:cc:62:
         f7:7f:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:05:16 2026 by rpki-client