Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File:                     AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier:          n86KKbriOfeuvOdLbXT1YO9KUlUFm5lqJ4UZpmVNzUQ=
Subject key identifier:   CA:81:DE:1F:34:A8:49:A9:82:AB:CA:4A:96:0D:73:F9:97:02:01:2E
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer:       /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial:       019D389C09610CE190E6E43077779905140E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number:          071A
Signing time:             Sun 29 Mar 2026 08:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:43 +0000
Files and hashes:         1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: 2iPnFMf5eX68k1QYx4kK4WcmrKb31yO5PjBxRpefzpY=)
                          2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:09:61:0c:e1:90:e6:e4:30:77:77:99:05:14:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
        Validity
            Not Before: Mar 29 08:00:43 2026 GMT
            Not After : Mar 30 08:00:43 2026 GMT
        Subject: CN=ca81de1f34a849a982abca4a960d73f99702012e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:62:0e:d8:81:23:47:f8:7c:b6:24:a3:8f:
                    7e:a8:3c:3e:6e:b2:20:81:dc:54:08:da:e3:89:34:
                    52:43:6e:90:b3:7c:2f:d6:60:07:3f:59:49:8c:1f:
                    ca:ce:94:25:69:02:86:77:5b:34:91:d5:45:17:03:
                    d9:9a:3e:00:5d:11:6a:8c:8c:94:bd:f2:aa:f7:4d:
                    3c:e7:d0:00:cb:39:90:dc:6d:37:64:d8:af:f7:22:
                    fb:32:62:95:22:85:c3:38:ed:95:ae:55:f9:ad:c5:
                    19:cc:29:c1:aa:74:d8:ab:6d:04:d4:24:d9:19:0a:
                    ca:bd:d0:80:e2:ce:d7:c7:af:a6:df:f4:48:28:2d:
                    5a:46:46:28:05:fb:2a:14:16:d9:3a:33:0c:c7:e6:
                    fb:7a:b4:af:e1:57:29:2a:8f:05:3a:8a:54:fd:d4:
                    f4:2a:15:62:50:45:54:7a:f4:a6:95:02:2b:d9:e1:
                    17:21:a1:0d:da:7d:47:c9:76:4a:d7:bc:e9:0c:e3:
                    40:ef:3a:ed:a5:06:9b:92:35:ee:23:58:64:fb:9f:
                    1b:db:25:d1:df:82:1d:82:ea:aa:cc:f3:aa:da:b9:
                    61:97:d6:8a:2d:dd:15:60:eb:56:d8:4f:46:2f:c3:
                    32:5a:65:d0:50:07:22:09:7b:12:c5:5c:53:00:73:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:DE:1F:34:A8:49:A9:82:AB:CA:4A:96:0D:73:F9:97:02:01:2E
            X509v3 Authority Key Identifier:
                keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:7e:20:c2:6d:43:4a:04:67:c3:4e:4a:ed:23:48:53:40:
         e3:d3:8c:f9:01:37:b1:b9:8d:b4:e7:b8:3d:6e:80:6a:cd:47:
         81:43:0c:50:24:1d:5a:7b:22:77:8b:fc:3a:86:ae:55:1b:60:
         4f:68:2f:63:01:2c:64:99:84:ab:4d:a3:79:a0:0f:29:e5:27:
         75:7a:33:d7:90:06:06:04:4b:3c:71:a4:bc:a4:76:e4:6e:e6:
         d8:1c:76:95:90:8a:5a:b3:e9:a2:4c:28:76:00:c0:74:6f:f4:
         bd:a5:30:be:12:cf:e1:cc:c6:c5:4d:aa:32:da:56:53:20:d7:
         74:43:65:25:f4:0d:14:1e:bb:a1:a0:1a:3f:6f:28:39:97:3c:
         f3:3b:86:25:07:b6:8c:b7:a6:04:ac:48:cf:8e:11:18:63:01:
         3a:36:26:85:09:8f:6c:0d:c2:07:9b:f7:89:51:cd:7a:df:64:
         4a:7c:f5:00:16:08:b8:84:27:ba:49:f7:66:94:8d:9e:ff:43:
         3d:ef:45:6c:a1:9d:9a:6d:25:47:93:e5:c5:4f:c3:e1:d8:45:
         27:46:b4:7e:e6:72:10:a9:d6:61:fb:63:39:96:25:d7:fb:92:
         5b:a2:be:5a:1d:b7:63:d2:ef:d2:2b:d7:e6:11:de:5b:05:61:
         83:71:fc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:44 2026 by rpki-client