Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File:                     AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier:          8pGS3soOtOPDiiapOg68dZlC/y0yUW4mRt5z58GechE=
Subject key identifier:   6E:97:77:44:DB:8D:F9:5C:B5:64:AC:33:D0:1F:39:5C:BE:4F:1A:A9
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer:       /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial:       019D273AB73431526B9D851859742429D544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number:          0711
Signing time:             Wed 25 Mar 2026 23:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:52 +0000
Files and hashes:         1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: f9Me6mZOOg2i0vyey4gKy+0g+iCtHwuWpKbWLAO3Lyo=)
                          2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:b7:34:31:52:6b:9d:85:18:59:74:24:29:d5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
        Validity
            Not Before: Mar 25 23:00:52 2026 GMT
            Not After : Mar 26 23:00:52 2026 GMT
        Subject: CN=6e977744db8df95cb564ac33d01f395cbe4f1aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:6a:71:33:17:0b:8c:c1:3a:f0:60:ca:f4:
                    29:1a:50:97:7f:5d:e3:29:73:47:b3:1d:7b:22:5c:
                    2c:10:dd:40:52:94:d6:43:3e:c7:b2:92:88:e5:aa:
                    03:61:3b:53:35:70:80:8d:87:70:ea:28:58:72:aa:
                    35:44:32:79:a2:84:0c:1e:d6:8d:50:f1:58:e7:71:
                    08:fe:62:2c:9b:5e:4d:7e:14:ba:82:15:d7:4e:dc:
                    42:62:80:4f:f9:6b:52:9d:6c:78:89:1f:fb:9b:d2:
                    02:fa:0e:b8:fb:92:b2:6e:7c:51:84:9b:06:2a:6a:
                    1d:d2:c6:13:d5:41:dd:d8:fb:f1:d1:35:c5:e4:ad:
                    be:10:5f:78:98:2e:4e:cd:78:be:a3:a4:38:19:82:
                    cc:b6:5d:dc:c2:c4:ee:7c:fc:f8:47:be:65:6b:6d:
                    e1:35:8b:9d:e5:f1:6c:5d:51:6a:fd:47:a8:9d:61:
                    90:a8:0d:79:0d:7f:a1:f6:1e:a5:79:72:e2:fe:c5:
                    1d:fc:9f:e4:0e:d4:bd:fb:0e:6f:5c:f5:4e:fe:ac:
                    47:1c:13:ef:ba:05:a2:5f:44:cf:48:9d:95:6f:65:
                    2c:47:88:aa:b1:9c:62:01:1c:66:1b:d5:ad:40:d2:
                    49:cf:13:70:00:7b:92:65:17:50:99:82:b1:5a:fb:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:77:44:DB:8D:F9:5C:B5:64:AC:33:D0:1F:39:5C:BE:4F:1A:A9
            X509v3 Authority Key Identifier:
                keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:33:15:8e:2f:c1:4f:1a:d8:61:d3:55:c5:3e:c9:c9:11:
         42:ac:c9:ef:c3:31:31:78:8b:0a:b2:5e:a7:7b:0f:ad:e1:f6:
         38:9a:34:d8:84:d0:0b:4d:30:a8:ee:cb:23:36:bb:59:09:9d:
         1e:47:f2:a1:23:74:70:bb:91:7d:26:df:d9:ca:43:eb:ff:9f:
         0a:a9:5d:64:10:44:b4:2f:a0:b9:b9:0a:ab:33:03:0f:05:2b:
         b6:84:29:84:cb:48:f3:56:0e:95:3b:29:ca:01:aa:6e:9e:e9:
         d4:b2:3a:cc:da:53:b6:58:09:c5:4d:3e:6a:a1:04:22:0c:42:
         4d:eb:db:50:b7:9f:c2:52:f1:ef:67:08:fb:11:d6:e1:48:74:
         db:d6:7f:67:22:83:46:a3:da:77:78:9d:1c:2a:1c:18:ad:eb:
         e7:7b:db:82:b1:19:bc:b9:ba:f4:e6:90:33:eb:6f:9a:64:25:
         37:bb:42:cc:5a:63:c7:50:f7:ae:aa:00:1a:73:ac:73:cc:fd:
         af:32:24:6d:73:99:9c:9a:e1:ab:6b:19:60:cc:bc:da:71:f9:
         77:12:10:aa:28:a9:65:5d:d3:17:73:8b:6d:22:3c:ec:1a:26:
         58:12:3f:77:0e:54:d8:47:ad:3e:d3:3d:96:07:fa:d6:80:90:
         17:8d:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:42 2026 by rpki-client