Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          NGeDYCPp+SburbQJi/qYn/bAs6d0za5nAtKMNwNj/Pc=
Subject key identifier:   9A:36:2A:9A:7F:D3:6A:58:CC:15:DA:53:B7:21:AC:72:50:33:10:E3
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019F1867A8C4DFD6DA89891617A014894063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0909
Signing time:             Tue 30 Jun 2026 12:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:14 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: vrWzuxCDBfMbxu2Nt5oJppvaLaOfdRuEH5OT86uIRLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:a8:c4:df:d6:da:89:89:16:17:a0:14:89:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Jun 30 12:01:14 2026 GMT
            Not After : Jul  1 12:01:14 2026 GMT
        Subject: CN=9a362a9a7fd36a58cc15da53b721ac72503310e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:91:0a:94:25:f9:13:3f:5a:d4:9f:f4:65:
                    66:ff:fa:83:37:cd:3c:25:06:ef:6f:b3:18:be:4e:
                    b7:4e:56:d0:7b:0d:88:c2:56:e1:fc:de:31:c6:b6:
                    f1:c8:3b:44:ef:e7:71:dc:0b:27:d3:87:d4:ef:68:
                    b2:d3:2b:2f:d6:a2:03:be:33:05:c0:2f:ef:e3:e5:
                    40:63:1f:35:a3:b9:7f:8a:39:44:ad:a6:7a:55:2b:
                    b5:f0:66:af:48:f7:e6:8a:04:be:b0:d1:17:87:dd:
                    04:8c:a2:99:66:20:fd:e9:e1:8f:42:70:42:d3:ee:
                    d2:a9:e6:4d:4f:3b:e7:ea:77:9b:ae:e6:10:9d:16:
                    e0:13:1c:7d:f5:eb:25:f2:c4:ce:cb:52:a6:2c:7a:
                    11:a1:cc:15:5b:8b:af:d5:d0:d8:7a:13:9c:f3:b1:
                    b1:ad:50:64:48:cf:ad:e6:e6:d0:53:ea:27:a2:33:
                    08:ce:b5:a3:da:c4:c8:c3:dc:a2:4f:58:14:8f:6e:
                    f5:cc:2a:32:78:40:90:a4:ed:2d:ef:3d:dc:74:b2:
                    70:73:61:a5:8f:5e:56:2c:d2:08:61:7d:2f:94:70:
                    c1:a5:14:12:e9:53:98:98:24:c1:8a:66:25:f5:80:
                    1a:36:38:3d:50:e7:b8:45:e2:b9:1f:31:bd:e5:68:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:2A:9A:7F:D3:6A:58:CC:15:DA:53:B7:21:AC:72:50:33:10:E3
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:05:e6:69:fe:61:1f:b7:bc:3c:d3:f9:69:6e:cc:18:a1:
         fe:fa:06:c0:ea:87:0e:76:f2:d2:4e:21:67:24:b2:78:e3:01:
         ad:33:f6:1b:5f:93:e7:ce:60:7e:5a:d5:5e:fa:28:cf:93:44:
         17:c5:b7:78:18:8c:16:12:fe:4c:68:f0:14:72:05:2e:fc:51:
         da:6b:e3:2e:fd:77:6b:04:5a:7e:b1:16:05:bc:21:05:d4:23:
         a3:fc:f4:5a:f3:eb:bc:a7:08:dd:83:8b:03:1e:c9:19:d6:75:
         b0:57:e3:6d:60:ca:76:bc:47:ac:dd:68:8d:73:96:eb:ff:5a:
         9e:7f:c1:8c:bc:1d:f0:73:4d:af:3c:ae:09:39:ed:4a:be:02:
         e0:6c:9e:68:db:a0:f4:9d:97:5e:da:ee:96:a8:3a:4f:97:a0:
         c6:75:89:a7:57:28:4b:23:18:5d:63:38:3d:11:3f:43:23:ad:
         d8:9d:79:ae:42:18:3e:60:06:0e:a0:15:7c:7f:0a:a5:31:5a:
         c0:df:6c:80:e1:95:d3:a1:e2:12:96:c5:e6:f8:78:f2:45:b2:
         67:21:98:a4:ef:cb:bb:26:ac:0a:de:4e:d1:29:9a:12:28:1d:
         71:0e:4d:62:b3:57:7f:cf:97:b3:a8:a2:b0:3b:79:df:be:57:
         d0:7c:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:15 2026 by rpki-client