Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          1XrPI0JXVM893XF44Yr/DRsEi1GY7UU01FA9RZCuj38=
Subject key identifier:   8B:9E:80:F9:67:3F:47:B8:19:6A:0D:E1:D6:9E:C8:2B:B3:73:09:FA
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       0198D960993733A5B85B025D4C4E0221FDA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          05CD
Signing time:             Sun 24 Aug 2025 00:00:43 +0000
Manifest this update:     Sun 24 Aug 2025 00:00:43 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:43 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: rQuInkQfsiF7Ulv7BiFsGUdx20fnWHTMHDErrrGMCnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:60:99:37:33:a5:b8:5b:02:5d:4c:4e:02:21:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Aug 24 00:00:43 2025 GMT
            Not After : Aug 25 00:00:43 2025 GMT
        Subject: CN=8b9e80f9673f47b8196a0de1d69ec82bb37309fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:68:60:c6:7c:45:48:ca:d8:8e:14:b8:c4:
                    0b:56:67:3e:97:8e:2d:72:5a:cc:a4:b9:3d:83:e4:
                    2c:bf:02:d0:18:76:ec:f3:de:ea:c2:e8:0d:00:f1:
                    6d:3a:bf:b8:b6:11:6f:f4:41:61:9c:f8:84:ca:97:
                    5e:a4:b3:46:86:03:91:fc:6e:f0:c3:e7:f5:17:59:
                    e9:d6:d4:d3:d2:1b:66:99:70:ff:56:46:8d:0d:4f:
                    14:e7:43:ef:d6:7f:31:7c:75:a9:2b:98:28:9c:3a:
                    0d:62:b2:30:40:dd:5a:20:b8:a1:ff:ba:b8:d9:ed:
                    1f:82:f9:f0:8d:fa:38:46:f7:eb:01:dc:30:a0:0b:
                    a1:c3:c8:6f:3b:bb:8a:0c:91:d0:01:5b:af:7f:ff:
                    45:ef:32:ea:51:dc:fc:2c:16:49:fe:21:9a:13:c7:
                    76:21:99:be:15:89:aa:06:c8:e8:85:dc:65:56:8d:
                    7c:df:5a:e9:42:b1:75:9d:db:84:8d:05:23:98:3c:
                    cb:2f:6b:7f:89:9d:1d:38:b0:0a:5e:f9:0b:37:c9:
                    c4:db:6b:89:13:bc:53:af:37:e0:6e:80:c6:bc:f7:
                    81:f1:48:45:6e:21:ea:e0:45:2d:96:c5:f5:43:7b:
                    36:9f:e4:cd:2e:cd:83:65:9c:d5:f1:f4:4c:a2:59:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9E:80:F9:67:3F:47:B8:19:6A:0D:E1:D6:9E:C8:2B:B3:73:09:FA
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:ca:3f:4c:73:f9:5a:dc:d4:46:1e:d5:cc:8f:fe:a8:23:
         8f:f8:e0:0b:39:44:c0:24:53:d1:0b:54:7d:ce:5a:f6:55:42:
         a9:74:35:32:b7:7c:88:36:1c:80:07:88:d0:a6:4d:a8:36:a9:
         f4:96:2d:0c:d0:f0:a9:db:a1:4e:78:89:7c:a1:30:27:84:20:
         0a:f0:87:06:74:37:48:ea:7e:5b:ce:d0:c5:70:3a:0f:f5:8b:
         53:b3:19:d9:28:62:d7:dd:ad:2f:17:0b:d5:c9:8c:02:99:ff:
         ff:e0:9e:fc:47:cd:7e:a7:8d:66:00:45:78:a1:20:1c:45:99:
         11:46:3e:13:e3:5e:6f:b5:25:5f:83:4e:09:95:fe:d8:92:0f:
         6d:e7:54:36:05:c7:c4:d5:d8:57:f7:ba:a1:62:d4:46:af:f1:
         27:b3:fc:14:7a:4f:b7:86:13:d4:9c:8b:57:12:39:c4:0c:88:
         2a:04:fe:8d:1c:fe:fe:d6:3e:9b:cf:4e:47:48:87:3c:dc:9f:
         fc:a7:c5:5c:58:fa:f6:70:df:30:f0:32:2f:81:0f:5c:34:68:
         77:25:5d:c0:10:00:99:9a:e7:56:02:06:0f:ee:c2:d9:aa:63:
         fb:bd:6d:aa:59:ce:42:48:1e:ce:c2:e0:d0:9d:ad:34:c9:c6:
         b3:98:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:27 2025 by rpki-client