Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          1kd2epomFRZODjC29BPNYsqfgvYTEMNJ9wiiNBoVheA=
Subject key identifier:   CA:98:77:81:6F:7D:F4:F4:C9:78:4A:F8:DC:A2:17:1C:C8:A3:05:89
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       01A13CDCA2323A8527057F7A9EC6BFECCD77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0A25
Signing time:             Thu 15 Oct 2026 00:00:54 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:54 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:54 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: 2ZnJ7QA3OWhDSzN32OuqKoAj1QbaqsAHuAkXlKHL2qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:a2:32:3a:85:27:05:7f:7a:9e:c6:bf:ec:cd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Oct 15 00:00:54 2026 GMT
            Not After : Oct 16 00:00:54 2026 GMT
        Subject: CN=ca9877816f7df4f4c9784af8dca2171cc8a30589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:96:1c:58:d7:df:53:50:fd:db:2d:95:8b:
                    a9:02:9a:81:5a:d2:30:af:f3:33:d8:e2:d2:e0:39:
                    cb:0e:a8:12:31:e1:a1:b9:3b:7b:3e:1b:24:99:b4:
                    6e:43:7b:04:e6:51:61:6b:40:dd:72:c5:dd:c4:50:
                    5f:bb:b8:47:65:29:a7:99:19:a2:6c:7f:1d:3c:af:
                    30:cc:d9:ad:3b:39:ec:cb:81:1d:e7:d0:fd:c6:b4:
                    71:23:2b:ef:a6:d2:20:16:f0:ce:c8:e3:05:0a:42:
                    a8:b0:aa:13:46:55:b2:56:40:27:dd:33:10:45:76:
                    1d:ed:22:bf:c3:5a:25:42:f7:ff:b8:67:cd:da:12:
                    89:85:75:d1:08:b3:54:6b:98:d8:b9:26:94:8a:05:
                    f0:12:43:8b:95:a6:a7:86:2f:d5:e6:7e:7f:d7:17:
                    ea:b0:cb:15:63:cc:da:43:09:97:79:59:0d:f0:dc:
                    3f:33:a3:86:5d:21:c8:97:03:e4:12:21:68:b2:b5:
                    47:f5:68:fe:09:87:d8:8f:56:ca:9d:fe:85:93:8a:
                    f7:7f:4a:8a:49:6a:5e:66:d8:7e:b8:21:cd:4a:ed:
                    06:2f:2a:1a:96:b4:ca:ef:9a:55:61:8a:99:19:ec:
                    aa:35:43:b1:11:6d:3c:fa:7a:ba:b3:5a:9d:6f:1e:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:77:81:6F:7D:F4:F4:C9:78:4A:F8:DC:A2:17:1C:C8:A3:05:89
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:16:d3:6c:86:05:ba:0b:2c:2d:36:8e:d0:2c:6c:0b:dd:99:
         aa:fa:80:13:7d:86:0c:7d:c2:6a:2f:c0:c5:2d:1e:72:25:44:
         ca:0d:31:12:e8:ca:3c:55:06:9a:20:ff:66:3a:f2:31:2b:cf:
         8a:20:09:b4:9a:d4:72:d2:a5:7d:ab:14:cd:5c:c1:2e:fa:d7:
         25:86:18:b5:14:ad:b7:8f:6e:83:f8:d3:f3:4f:0f:31:df:6a:
         80:db:2d:ff:b3:ac:f5:ac:5f:65:bc:f2:01:08:7d:db:78:f0:
         24:32:3b:30:bf:f5:93:5a:8e:d2:c7:a4:c9:61:b5:42:03:99:
         c7:e4:f6:18:40:90:fc:0b:1c:6e:2c:54:a1:e9:77:ac:9a:ec:
         de:bd:70:0e:35:b7:e7:d9:15:52:c0:20:cd:78:ee:11:e4:32:
         42:db:3a:49:49:61:88:3e:89:0d:f7:5b:fc:9c:5d:18:8a:d6:
         9d:8b:54:a7:db:53:97:bd:65:97:49:79:44:0d:59:e2:1a:d4:
         e5:f2:90:f3:f2:0d:63:63:47:2e:ce:15:63:c6:1b:fe:b0:50:
         28:a0:d2:98:5f:82:70:27:04:4f:f8:40:7e:a0:8b:d0:5a:28:
         ae:39:79:a7:eb:0a:07:ca:82:36:e5:80:db:76:be:c0:a3:a9:
         de:8e:e2:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83KIyOoUnBX96nsa/7M13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmNlZGVkYzdjNWFkYjg1ZmRiYjc5ZjRiMWQ3ODA0ZGZk
MDEwM2UwHhcNMjYxMDE1MDAwMDU0WhcNMjYxMDE2MDAwMDU0WjAzMTEwLwYDVQQD
EyhjYTk4Nzc4MTZmN2RmNGY0Yzk3ODRhZjhkY2EyMTcxY2M4YTMwNTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTGWHFjX31NQ/dstlYupApqBWtIw
r/Mz2OLS4DnLDqgSMeGhuTt7PhskmbRuQ3sE5lFha0DdcsXdxFBfu7hHZSmnmRmi
bH8dPK8wzNmtOznsy4Ed59D9xrRxIyvvptIgFvDOyOMFCkKosKoTRlWyVkAn3TMQ
RXYd7SK/w1olQvf/uGfN2hKJhXXRCLNUa5jYuSaUigXwEkOLlaanhi/V5n5/1xfq
sMsVY8zaQwmXeVkN8Nw/M6OGXSHIlwPkEiFosrVH9Wj+CYfYj1bKnf6Fk4r3f0qK
SWpeZth+uCHNSu0GLyoalrTK75pVYYqZGeyqNUOxEW08+nq6s1qdbx7ipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqYd4FvffT0yXhK+NyiFxzIowWJMB8GA1UdIwQY
MBaAFO387e3Hxa24X9u3n0sdeATf0BA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUt
NDU2MDZlZTA2NzY3LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUtNDU2MDZlZTA2NzY3
LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhbTbIYF
ugssLTaO0CxsC92ZqvqAE32GDH3Cai/AxS0eciVEyg0xEujKPFUGmiD/ZjryMSvP
iiAJtJrUctKlfasUzVzBLvrXJYYYtRStt49ug/jT808PMd9qgNst/7Os9axfZbzy
AQh923jwJDI7ML/1k1qO0sekyWG1QgOZx+T2GECQ/AscbixUoel3rJrs3r1wDjW3
59kVUsAgzXjuEeQyQts6SUlhiD6JDfdb/JxdGIrWnYtUp9tTl71ll0l5RA1Z4hrU
5fKQ8/INY2NHLs4VY8Yb/rBQKKDSmF+CcCcET/hAfqCL0Foorjl5p+sKB8qCNuWA
23a+wKOp3o7iMQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:07 2026 by rpki-client