Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File:                     sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier:          VnoDJ6sA13OCyshxNRWSLxjuSSRpQC5p06g/O4NqKrI=
Subject key identifier:   C7:71:84:D9:CF:FE:CC:AA:CF:F9:28:80:FF:EA:0D:D5:D5:D1:12:B4
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer:       /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial:       019CE55A5EB859F0E0330434BE560FC694FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number:          1609
Signing time:             Fri 13 Mar 2026 04:00:30 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:30 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:30 +0000
Files and hashes:         1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
                          2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: +8Ai0aZ9ht7MUJPNLtXzGrqWOJOUQAgPPTuUw/FE0WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:5e:b8:59:f0:e0:33:04:34:be:56:0f:c6:94:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
        Validity
            Not Before: Mar 13 04:00:30 2026 GMT
            Not After : Mar 14 04:00:30 2026 GMT
        Subject: CN=c77184d9cffeccaacff92880ffea0dd5d5d112b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:ef:71:f6:05:2d:44:1e:97:a2:1d:0d:b4:
                    c8:06:9a:14:42:c9:00:16:98:2f:c2:77:b7:fa:10:
                    ed:df:a7:b6:5d:ad:1c:3b:aa:0a:6d:0f:7f:23:ff:
                    01:33:35:e5:ef:7c:79:cb:90:1c:72:59:c1:3a:7c:
                    9a:8a:59:c6:41:df:03:4d:2f:9d:a2:03:c7:b0:9c:
                    9d:98:af:1d:37:3d:94:40:fb:f1:f5:f0:d5:df:5b:
                    91:0b:ab:f4:aa:8e:96:d3:8b:06:d6:e2:3c:12:be:
                    95:58:7f:de:eb:39:ff:e9:be:88:d6:53:0e:99:05:
                    34:e8:c6:66:ad:c3:60:bf:64:fc:b6:5f:fc:30:98:
                    58:79:b2:31:89:9c:69:73:0a:67:3d:07:12:85:1c:
                    15:bc:a8:94:43:61:f5:bf:0a:08:67:ab:bf:a8:29:
                    52:7d:b7:f2:0c:c7:87:59:e1:d2:8b:8f:94:1b:a7:
                    66:69:ef:12:31:1e:25:36:d9:4b:0d:c9:3c:e7:7f:
                    66:3d:37:2d:3e:3c:1d:32:dc:21:a3:9d:22:6f:a1:
                    fa:8f:98:5d:14:4f:b8:45:16:60:f5:f7:2d:3b:2b:
                    6e:48:aa:b8:d9:60:a6:ce:c5:7f:7c:8b:92:df:32:
                    4e:c4:61:82:78:0f:f9:02:ee:9d:28:b4:96:ed:ca:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:84:D9:CF:FE:CC:AA:CF:F9:28:80:FF:EA:0D:D5:D5:D1:12:B4
            X509v3 Authority Key Identifier:
                keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2f:6a:60:93:23:c7:de:d4:11:0b:18:cf:31:67:46:f6:19:
         79:d9:27:88:32:8c:2f:d2:33:6e:22:dd:63:f1:c1:49:07:39:
         d2:43:77:09:5d:fc:ae:2d:30:6d:7f:a1:22:a9:bd:24:50:ac:
         fc:e7:df:32:4e:11:e7:6b:45:2c:c3:a8:2d:df:e4:8f:ba:04:
         db:a0:fa:06:13:8b:22:d4:cb:2f:47:74:6d:63:6d:40:4d:1f:
         2b:56:7b:17:6a:c0:64:2a:5d:f3:f0:fb:5a:ee:1d:cc:52:29:
         c8:4b:22:d6:f9:dc:ab:ae:6d:30:90:c0:90:0c:26:ac:0a:f3:
         9e:60:4b:b0:b6:9a:a2:4d:43:5b:1d:2a:b9:b1:24:b3:29:96:
         c1:7a:17:8f:62:ef:b8:3d:86:90:08:3c:9c:79:3a:26:6d:14:
         eb:84:6b:28:f7:84:da:10:49:72:4f:99:cb:e9:1b:45:07:af:
         7a:44:b2:31:45:5c:69:97:2e:a2:a8:04:c6:21:0c:c3:d5:21:
         63:42:f5:3c:30:34:c6:67:b4:69:a4:c0:64:d5:f2:57:14:60:
         b7:2a:32:08:f5:bf:ed:5d:c9:d3:b1:8f:79:79:b8:82:cf:87:
         2f:33:2b:78:aa:ed:11:5e:a7:f7:4b:3f:ba:e3:4a:0b:b4:8f:
         d1:aa:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:47 2026 by rpki-client