Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          37eyDqW+c3PD2yfY6WCjX/Xoemv50N0xPw88C8JwrVE=
Subject key identifier:   B2:09:F3:50:A9:40:15:33:44:78:6C:98:81:BE:A6:4A:2B:2E:98:56
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       01976696A0A057EA6AF552DD6A95260825DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          050D
Signing time:             Fri 13 Jun 2025 00:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 00:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 00:00:36 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: AopkYAEey6AdYLQO76MNBp0CHBF4/7QpURsj3m1sxN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:96:a0:a0:57:ea:6a:f5:52:dd:6a:95:26:08:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Jun 13 00:00:36 2025 GMT
            Not After : Jun 14 00:00:36 2025 GMT
        Subject: CN=b209f350a940153344786c9881bea64a2b2e9856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:85:6b:43:2d:57:41:54:39:0f:00:71:eb:
                    09:35:d5:33:61:5d:74:3f:b5:bb:c8:f1:65:c6:a3:
                    e3:dc:1e:2c:7f:94:da:2e:d2:74:36:ea:ad:1c:ad:
                    0b:5e:23:46:9d:6a:cc:3f:5a:21:05:35:ff:2a:b7:
                    94:43:1f:3d:e8:36:22:53:58:ee:de:d2:eb:e4:1f:
                    e5:29:3c:46:bc:07:65:69:c1:aa:1b:75:69:ba:44:
                    e0:58:43:03:63:61:69:25:db:34:6d:f0:04:ee:53:
                    8d:3c:21:34:7e:79:43:d2:c9:01:38:46:9d:2e:87:
                    a0:19:fc:b1:fd:27:58:34:fa:48:41:cf:38:85:7c:
                    3e:c5:69:f1:3b:0e:d5:cd:65:bb:95:eb:c1:e4:d2:
                    4f:04:c7:81:f8:d6:90:61:65:3b:5e:19:ba:5f:28:
                    31:20:d9:90:ca:c7:46:4f:0e:c2:37:a4:a8:c3:d1:
                    96:c4:f6:f7:7c:07:5f:dd:ff:08:c2:e4:58:42:c2:
                    8a:c0:69:82:a3:3c:38:8c:51:17:ee:76:7c:b4:28:
                    ad:96:07:d3:0a:06:93:02:01:90:b9:41:d9:fb:25:
                    f0:e4:67:89:ed:be:4c:c9:49:11:96:17:75:eb:2d:
                    a8:f7:ea:fb:aa:62:87:ca:d0:62:3d:7f:1e:e1:0d:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:09:F3:50:A9:40:15:33:44:78:6C:98:81:BE:A6:4A:2B:2E:98:56
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:80:07:b3:6c:99:bb:42:f6:69:2a:f4:74:4d:24:ec:9a:2f:
         3e:57:80:9f:97:02:f3:3c:8c:88:b2:3a:84:69:b5:db:41:56:
         a8:c3:e0:03:4e:99:e3:9f:fb:25:18:a9:55:a6:75:25:ba:6e:
         75:91:41:d6:ab:96:2c:89:cc:0c:6c:4c:21:bd:ee:e2:e7:3b:
         4b:68:21:fb:01:de:e6:df:8e:81:77:9f:c7:24:79:71:29:f1:
         34:84:7a:35:ef:d1:b1:83:77:e6:77:24:e0:63:3e:8a:78:72:
         a4:20:b2:ce:52:5f:9a:4a:6f:96:9e:d8:7c:a5:e4:84:70:ae:
         b3:7d:a1:d3:1c:6c:a5:66:23:58:35:08:e6:ef:38:91:fc:85:
         75:e2:00:24:d5:26:24:c3:49:e9:1c:cb:18:85:b3:dd:cc:13:
         37:aa:30:3a:74:d8:ed:c5:18:b2:f7:ed:39:7d:9b:86:2e:ab:
         93:9f:d8:a2:7d:1d:e2:2e:cd:88:67:3c:db:13:51:f4:51:73:
         92:e3:dd:de:22:54:ee:ab:71:7f:7d:57:e9:02:02:f6:8f:4b:
         29:0f:c9:cb:b6:dc:73:24:0b:77:5d:ba:40:1a:10:1a:57:54:
         9a:80:70:3d:fb:fc:65:d4:44:82:13:d8:d3:9a:98:c3:b0:5f:
         14:64:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:46:10 2025 by rpki-client