Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File:                     AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier:          6+iKm4MPXmTw0tlzB5RICzfa8T0MTjPLVrNrl/IvwsI=
Subject key identifier:   45:D5:13:D8:E4:EB:49:A8:8A:C6:43:FC:AF:50:00:4D:2A:C7:10:F1
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer:       /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial:       019CABA23B173A1DCA9FF06E8B5D1564F0C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number:          06D1
Signing time:             Sun 01 Mar 2026 23:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:01 +0000
Files and hashes:         1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: qaVHD7qzst1ERusMHn/i8TfbJSzPjqrBFOwfldDMiHI=)
                          2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:3b:17:3a:1d:ca:9f:f0:6e:8b:5d:15:64:f0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
        Validity
            Not Before: Mar  1 23:01:01 2026 GMT
            Not After : Mar  2 23:01:01 2026 GMT
        Subject: CN=45d513d8e4eb49a88ac643fcaf50004d2ac710f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:05:21:a9:53:fc:6e:19:7b:a0:fd:be:49:
                    71:11:07:59:a7:88:54:f8:b5:d6:47:a3:9a:6b:17:
                    3b:f0:d8:3d:ad:bc:a5:9a:43:eb:f9:0d:09:f4:05:
                    7d:01:e0:19:1d:10:68:a7:65:42:67:da:0d:8c:b4:
                    bc:89:91:1a:ec:81:72:1e:84:c3:d5:85:61:19:4d:
                    5e:35:38:bd:3a:b4:89:4d:22:8e:8b:5b:17:c3:1b:
                    64:11:0b:d3:19:94:e4:6c:42:e9:f5:fa:2a:65:9b:
                    63:71:b5:67:7b:a5:76:e1:a3:53:b3:70:0b:7b:ac:
                    fe:15:60:f6:57:78:f7:8d:1b:91:f6:55:d9:4e:af:
                    5d:c5:42:08:55:8b:60:a7:62:ba:2e:bf:b8:ff:fd:
                    c7:37:e7:09:62:12:21:45:20:a9:9f:76:2e:cf:02:
                    65:3e:69:2a:a2:19:b4:bd:bc:98:d1:4e:22:75:2c:
                    9a:82:88:25:f9:b5:b0:2a:69:e9:ee:1d:f1:7a:e8:
                    d6:be:a5:22:f2:a2:7a:a6:72:67:55:5c:70:04:d6:
                    ca:55:16:64:6d:9e:f1:bf:9c:8a:fa:da:04:10:3d:
                    5d:59:d6:9e:5e:98:71:27:38:54:ab:9d:33:c6:70:
                    2c:a2:9e:7d:fa:f7:32:81:d4:d9:a1:2e:e8:df:a1:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:13:D8:E4:EB:49:A8:8A:C6:43:FC:AF:50:00:4D:2A:C7:10:F1
            X509v3 Authority Key Identifier:
                keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:01:fe:8f:b1:25:7c:8c:91:a8:d6:1c:47:fa:46:45:bd:36:
         c0:66:c7:a6:6a:c8:09:b8:b5:ea:f4:2d:44:60:9c:f7:1a:d3:
         ba:43:b2:d2:6d:de:ed:a3:e3:cf:d8:df:53:d8:f4:f5:e4:03:
         bf:63:51:aa:c1:46:75:cb:84:aa:1c:48:53:4e:1f:b7:b9:43:
         fb:1b:b8:6b:6c:6b:da:45:ee:cc:0e:15:8c:2c:4a:1e:2a:5a:
         66:34:24:a3:23:b9:d7:d6:f6:ee:49:c0:2c:a3:7f:d0:eb:8d:
         fe:8b:a7:b9:13:f8:8d:fe:cc:42:fb:6f:30:89:4c:23:a7:ba:
         6b:ab:e8:0e:bf:99:77:dc:e2:03:f6:f1:e2:ab:45:9a:f4:84:
         a1:e4:c0:4f:ac:3d:4b:38:09:f9:83:d1:9f:06:a8:b4:9d:f4:
         2f:81:2b:ce:ca:5e:57:a3:5a:0c:ff:f1:f7:e6:d2:9b:fa:74:
         37:a6:07:a2:22:2b:fb:7a:b5:3d:88:9b:3e:ec:f8:28:25:a5:
         5a:e5:6c:7a:73:75:6a:6a:ec:f5:65:2a:00:4b:b8:7a:43:89:
         de:8c:5a:79:82:b5:e8:7e:e8:4b:86:ec:bb:a9:2e:28:f6:ba:
         fb:ce:fb:15:b9:81:26:64:3f:41:cd:d7:9e:1a:7a:08:2a:20:
         08:5f:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:57 2026 by rpki-client