Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File:                     sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier:          LZGXnyFilsOcyy2abuOTnvydbqO38EYYQdQBp+g4SFQ=
Subject key identifier:   49:2E:05:66:A6:C8:7A:DC:86:E4:83:C0:15:54:44:46:F8:2D:BC:71
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer:       /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial:       019EB8B48B8CA7FE75D1E95B72DACCA025C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number:          16FB
Signing time:             Thu 11 Jun 2026 22:01:40 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:40 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:40 +0000
Files and hashes:         1: X8tdXJvU9JJe77PtcT-JDwBOQi8.roa (hash: tVoeTVft5vKlrmkaWfTVngTflVy/IwyLYYQaNJOX868=)
                          2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: 0OoTBah2X3HkkMoHBS3RsjA3Du+OnEccNv9fdAQdd7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:8b:8c:a7:fe:75:d1:e9:5b:72:da:cc:a0:25:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
        Validity
            Not Before: Jun 11 22:01:40 2026 GMT
            Not After : Jun 12 22:01:40 2026 GMT
        Subject: CN=492e0566a6c87adc86e483c015544446f82dbc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:0d:dc:43:e5:67:07:1b:51:4d:eb:18:18:
                    0e:71:ec:d1:de:6c:b4:cd:df:4a:5f:95:c8:f1:28:
                    a8:11:8d:72:22:48:11:77:58:f5:cd:50:bb:17:e7:
                    46:47:8c:f8:95:b7:c9:ae:cd:88:57:56:06:1e:6b:
                    b7:d8:97:80:70:00:0f:39:20:b9:79:3a:49:81:ea:
                    d2:86:be:00:ce:d0:f7:c0:c3:77:6c:17:72:0a:9f:
                    5d:4f:f4:2e:21:d0:38:c1:b8:ba:0b:5d:9c:2a:aa:
                    c0:db:0b:bb:3a:7a:33:d4:66:07:68:68:d0:0f:fd:
                    82:56:64:fe:65:ed:e5:4f:d8:3d:6b:80:82:87:d0:
                    d0:ce:11:22:4f:f2:6a:00:8a:d9:a2:13:e2:64:8f:
                    3b:3f:19:1f:27:6c:83:48:e7:3a:2d:81:29:07:fc:
                    f1:b7:6b:f0:12:1f:de:8f:f6:58:f1:b1:ce:dc:a6:
                    84:60:a1:d5:f6:cd:43:ab:d7:1f:79:08:b2:75:cd:
                    d2:3a:b6:64:a1:a0:b0:3b:47:18:28:3c:f2:3a:5e:
                    bb:34:ff:c2:0a:81:47:4f:3e:34:be:64:8e:fb:0a:
                    5a:12:60:38:3c:d7:a9:c6:91:7b:7c:4c:3b:13:87:
                    5b:96:12:86:9a:4a:c8:36:0d:4f:62:76:d0:ee:20:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:05:66:A6:C8:7A:DC:86:E4:83:C0:15:54:44:46:F8:2D:BC:71
            X509v3 Authority Key Identifier:
                keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:44:f0:1e:39:ed:77:92:9f:04:58:e3:aa:ea:8b:cd:03:
         f6:c4:4a:f6:6a:9e:31:7a:1d:f9:51:b6:f5:c0:49:37:f1:09:
         90:c0:16:7c:d6:95:d8:a0:3b:65:09:45:f4:ca:22:24:2f:c7:
         be:00:be:ac:95:21:a2:d1:44:97:bf:16:c8:3d:98:41:79:0c:
         de:aa:dd:50:e6:1b:e1:c0:5b:4d:ef:07:f6:35:c0:e3:bf:18:
         f6:f0:07:81:5e:ef:a5:e2:6b:d8:9d:1d:c2:55:c4:81:f9:97:
         ee:6d:00:54:35:4e:9e:cc:12:74:bb:b2:46:a4:06:ab:4d:e8:
         ca:bd:4b:f5:fb:f0:ed:92:23:f7:b3:4f:4e:cf:ee:01:79:5e:
         e9:c7:93:83:ce:9d:57:06:04:09:e5:13:12:58:46:92:81:e4:
         a7:33:e2:4e:8e:df:4f:da:a1:98:f0:e6:0f:a7:a9:45:31:a9:
         47:25:f3:7c:c3:18:08:6d:3c:f0:c1:df:c1:06:23:45:c4:7d:
         81:7f:b5:ac:70:86:b8:90:3b:5c:24:b9:73:28:02:75:5a:27:
         2c:7c:14:8d:b2:fa:33:c2:32:a0:19:b1:d0:8b:18:b8:0f:74:
         c3:e0:c1:58:03:90:0a:9d:7d:2f:ed:c2:e8:2f:12:15:5e:be:
         6e:81:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:56 2026 by rpki-client