Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          9QxTmYYzX0dIR+mthcn3tCjm/DcdDSPFbIDBnGGHPQI=
Subject key identifier:   B1:40:93:60:7F:D9:5C:0B:B5:97:9A:62:DA:DD:C3:69:FF:9F:E3:12
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       01A0CEC8ADC90A17D2D2D0B19748A90B6472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          09EC
Signing time:             Wed 23 Sep 2026 15:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:53 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: l7lyypCdaMOEAo0l7C8UHut1DNAtDHdMjLOQb698WGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:ad:c9:0a:17:d2:d2:d0:b1:97:48:a9:0b:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Sep 23 15:00:53 2026 GMT
            Not After : Sep 24 15:00:53 2026 GMT
        Subject: CN=b14093607fd95c0bb5979a62daddc369ff9fe312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:d3:37:91:b7:fb:06:09:49:f4:fc:0e:07:
                    70:f0:af:3d:42:67:89:e6:22:ad:ed:c5:70:6b:15:
                    95:80:69:b6:7f:99:17:fc:db:28:b4:fc:dd:b9:c1:
                    7b:2d:17:c5:49:26:2b:a7:46:41:4b:bc:41:9a:9b:
                    84:1c:7e:60:95:3a:9a:7d:e1:fd:d1:06:12:19:69:
                    d5:7d:c3:75:a7:25:13:30:1e:1f:64:c0:82:39:ca:
                    44:2f:1d:83:d2:94:38:b6:84:7a:35:8b:d8:54:d6:
                    71:0b:c1:8b:86:b7:bc:82:27:55:b4:88:76:51:29:
                    6c:b7:f3:55:f1:e1:fa:e9:03:81:d5:9b:3e:e5:5c:
                    28:85:71:87:81:e7:66:b8:1e:59:48:10:7b:0d:9d:
                    d3:2c:06:79:a4:bb:9c:e1:0c:a9:c9:a7:c4:af:26:
                    4c:6c:6d:99:8d:c6:50:51:5f:5f:86:11:c2:0b:3f:
                    17:0a:05:2b:4a:f2:57:be:5f:77:c3:04:3e:2d:57:
                    75:f9:4e:0b:ba:0a:1b:08:0c:7b:26:51:e7:e6:91:
                    df:ae:95:81:51:85:24:3f:8e:7c:2f:5c:8a:63:5d:
                    42:0b:84:53:ac:56:44:ec:cd:d4:2a:81:9f:71:a1:
                    bd:ac:3c:00:b1:b9:b5:dc:eb:eb:5d:3d:25:1c:7b:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:93:60:7F:D9:5C:0B:B5:97:9A:62:DA:DD:C3:69:FF:9F:E3:12
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:42:5c:40:6a:96:68:fb:20:b4:e0:6a:3f:78:ee:96:36:69:
         fa:0a:c2:eb:58:7f:4c:aa:b9:bb:59:57:8b:76:6b:bc:6d:3c:
         4b:4e:ce:75:5e:af:3d:d0:dd:de:86:4d:d0:76:50:95:dc:47:
         fe:b6:48:75:dd:c5:f1:e4:2f:bb:24:2d:a2:da:9a:6c:cb:58:
         b4:26:75:f7:48:ee:a1:44:55:12:4a:27:fa:8f:26:23:4f:a0:
         de:33:c9:2f:42:6f:12:d9:94:8a:98:b3:cb:ed:20:b7:65:7a:
         43:00:dd:46:49:2a:af:82:3a:c7:d5:b2:0c:0d:0f:7c:95:9b:
         2a:d5:e8:15:f1:41:27:54:06:51:b2:f0:0d:2e:14:42:9d:55:
         bc:b2:19:d8:ed:da:af:6d:6c:e0:e1:43:63:36:a2:b4:1a:17:
         60:82:4a:32:ca:26:6e:1d:5c:70:9e:56:70:4a:39:10:75:34:
         10:94:de:38:68:17:ac:73:16:6a:01:0a:51:61:3e:fd:ab:12:
         8d:7c:c5:95:cb:c1:eb:53:95:91:5b:a3:e0:25:a2:74:45:65:
         a2:6e:30:ad:50:c4:2a:39:71:db:14:45:02:64:c9:cf:62:08:
         d8:64:fe:ae:70:07:6e:47:b1:83:d8:f5:44:0d:37:4f:af:b7:
         87:04:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:44:02 2026 by rpki-client