Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          c3LWwIHLGW/uoQIHUQMN1BhLuRDhPkj1dzb6zbFfXh0=
Subject key identifier:   6A:C4:DB:55:25:F3:B8:22:A9:F9:6C:86:05:CB:AD:CC:B8:13:FC:D8
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019F9023358F9BD0B053F3389FCCC695D46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0947
Signing time:             Thu 23 Jul 2026 18:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:54 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: GIX6iMSJ+XJyDGpGvNJhwd84K1BgP7CvG6rnX7CWcpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:35:8f:9b:d0:b0:53:f3:38:9f:cc:c6:95:d4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Jul 23 18:00:54 2026 GMT
            Not After : Jul 24 18:00:54 2026 GMT
        Subject: CN=6ac4db5525f3b822a9f96c8605cbadccb813fcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:be:bc:aa:62:1e:bb:ae:aa:c7:72:06:40:
                    ea:8b:2e:6c:ad:b1:3c:32:47:1b:c8:f0:00:79:bf:
                    b0:e2:7d:5e:ad:fd:b8:96:52:02:a2:76:a4:07:d4:
                    b4:30:1f:78:9f:80:6f:6a:b4:3a:49:6b:f9:bd:a3:
                    c4:b2:46:a1:17:5a:d1:7f:af:f1:98:e6:43:a6:28:
                    f0:28:7c:3b:72:cd:be:f2:c8:ee:81:5b:6b:34:03:
                    15:a5:05:bf:81:dd:96:f8:6b:bd:68:f8:80:a9:2f:
                    1d:38:56:92:63:10:7d:ba:03:b2:0d:46:07:0d:40:
                    47:97:16:dd:bd:14:75:de:8a:c9:f7:6c:be:08:4f:
                    d6:1f:5f:26:09:2a:dc:eb:a8:4e:2e:92:9a:17:b1:
                    05:27:84:d8:73:1a:7f:1b:ff:40:8d:71:4f:74:0c:
                    2e:d8:54:68:b8:90:eb:ff:a7:eb:dc:9d:26:97:b4:
                    18:27:61:65:77:56:76:92:6b:92:48:79:12:f1:c6:
                    27:95:d2:78:9f:a4:ca:ec:63:54:7f:59:ee:1d:8f:
                    ac:6c:b3:c6:ea:7f:c7:9a:09:78:95:a2:b6:f1:5d:
                    13:72:c3:0a:c8:c4:13:41:5c:6e:41:f9:da:64:11:
                    e1:b2:39:06:70:05:fa:70:7b:46:03:24:59:d0:76:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C4:DB:55:25:F3:B8:22:A9:F9:6C:86:05:CB:AD:CC:B8:13:FC:D8
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:06:06:bd:0b:35:95:f7:f1:f6:c8:e7:82:a7:8b:76:16:b9:
         76:23:46:7c:d0:82:2e:d6:be:df:85:19:02:6c:ea:c6:84:bc:
         70:65:20:84:a0:54:fc:22:31:d3:c4:ff:15:c7:c4:f1:25:da:
         45:5b:c3:50:11:77:79:04:85:0f:93:d9:ea:2f:6d:8c:dc:a5:
         88:9b:24:24:0c:15:f4:de:e7:4a:d2:2f:2f:67:c6:f3:41:6b:
         0c:6b:5e:9a:ce:7e:ec:b6:f2:47:d0:55:e5:41:64:66:1d:3a:
         66:95:04:0b:91:b7:46:11:3c:29:cc:8f:10:98:55:73:b5:34:
         ce:5a:ef:fe:51:ae:04:c6:e2:5d:27:7f:9a:da:72:13:18:d5:
         a3:ac:20:a0:96:cb:2c:50:d6:62:68:b2:23:fc:e0:34:31:15:
         93:24:b9:d6:4c:87:f0:71:b5:f5:75:19:2c:08:af:a1:ed:c7:
         ed:62:f5:0a:34:da:95:00:a0:e4:ff:a3:6f:e2:92:d1:34:2a:
         1d:87:df:3f:3a:11:6d:1c:b4:3f:ef:fe:83:9c:23:dd:d0:a8:
         22:91:b1:18:e2:51:be:be:92:24:2e:c8:b8:25:26:8e:02:87:
         8b:40:84:bc:01:c1:c0:b4:eb:c7:7c:9e:24:cc:81:80:5f:17:
         21:39:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:50 2026 by rpki-client