Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          VPg0zdJEk606Lv24B6v1+zjjws/c7gStrFHtWuswtLI=
Subject key identifier:   71:87:62:A9:DF:B9:0D:94:A8:E3:BF:2A:62:A0:4D:27:CB:4E:92:3C
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       0199FB0F0895CFBCE0D319F69EFCA64F6910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0663
Signing time:             Sun 19 Oct 2025 06:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:30 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: 5rGi252REi8Bnipbi8DgDk/EuIV0UpgIonqIbY77zV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:08:95:cf:bc:e0:d3:19:f6:9e:fc:a6:4f:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Oct 19 06:01:30 2025 GMT
            Not After : Oct 20 06:01:30 2025 GMT
        Subject: CN=718762a9dfb90d94a8e3bf2a62a04d27cb4e923c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:2f:55:ba:4f:c1:f1:21:40:3d:4f:51:b6:
                    73:63:05:fe:99:cd:d9:c8:8c:ad:ce:97:4c:55:8b:
                    2f:94:39:01:39:e7:1f:a9:8d:68:ae:83:32:a3:26:
                    f1:e7:eb:7f:1f:4f:6e:b0:3d:88:f0:f7:1b:12:27:
                    2f:86:c2:2e:b6:47:7d:63:0c:fe:26:82:c7:1d:c8:
                    4c:cf:1f:33:2b:17:c2:0a:ca:06:f4:b0:af:c0:81:
                    f2:0d:9e:40:5d:3f:f0:51:55:77:dc:d0:87:ba:8e:
                    7f:1b:fa:8d:fc:9b:ee:09:5b:af:a1:1e:37:c2:71:
                    69:23:7c:e4:d0:7b:52:ed:4d:f0:a5:11:4c:6c:63:
                    26:f4:5c:44:c7:d2:89:3c:ab:78:e8:66:80:02:29:
                    01:af:57:e4:d3:fa:0d:26:7b:c1:52:63:33:a9:5e:
                    64:e0:4a:64:a4:b2:91:b3:c2:ca:80:be:c3:81:b5:
                    06:6e:ed:f4:35:6e:18:bf:a6:bc:ec:fe:7c:ee:38:
                    f4:f4:75:29:c3:cd:aa:bc:23:46:3a:8c:c4:24:53:
                    c9:5c:11:71:e1:96:5a:b6:a8:de:19:56:09:7a:25:
                    06:b9:83:51:a9:86:c4:71:c6:7c:ed:10:80:33:ff:
                    1a:94:eb:52:88:c8:74:ba:c0:ef:88:9a:03:98:59:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:62:A9:DF:B9:0D:94:A8:E3:BF:2A:62:A0:4D:27:CB:4E:92:3C
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:38:0d:d0:26:9e:ff:67:7c:23:c1:09:aa:f6:ad:e9:33:
         82:6a:7c:14:aa:ce:26:88:72:5e:bc:59:77:ae:ec:c1:5e:3f:
         60:36:26:71:4b:6e:0c:97:43:04:8a:0a:9c:a9:60:e1:eb:19:
         3c:ba:6b:66:53:79:00:5a:75:9d:24:f5:50:11:c6:68:01:86:
         8b:15:a5:2c:ae:34:d3:e8:17:f5:34:a5:d4:47:01:28:94:f0:
         a5:b9:cb:51:4d:5b:fe:5c:94:dc:7f:1f:24:d8:70:1a:ae:dc:
         fb:38:f2:a6:75:75:3e:39:f0:e4:74:a9:fb:11:3f:37:3f:a9:
         86:88:90:f4:d5:2c:6f:ce:73:86:24:32:be:06:c3:21:24:09:
         56:15:6a:3e:83:d3:da:6a:aa:9a:88:69:96:b3:1e:3e:5b:e5:
         85:82:70:2f:e0:e1:7e:3b:b9:e9:1b:62:f6:47:69:a5:b9:ba:
         ec:07:b8:7d:10:6c:85:57:31:7c:50:dd:8c:33:c4:c1:ac:43:
         14:c9:b4:34:40:58:8f:60:1d:5c:92:b7:67:38:85:5a:3d:43:
         a8:a3:82:4a:66:c8:47:56:3f:e3:0c:26:da:44:ca:63:82:0a:
         20:58:fd:05:d2:4a:ea:be:f0:dc:fa:47:7f:e6:8a:20:a9:70:
         1e:39:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:14 2025 by rpki-client