Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          z+H/ew5GpGJegWSDQYG3zqHoPJMwqZez4FoYdz7mHMY=
Subject key identifier:   0F:CC:A9:95:8F:D0:A3:0E:94:F1:1B:C8:64:B3:8F:37:08:9A:DA:77
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019FA93E16D758FE04D10D66711E880A4618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0954
Signing time:             Tue 28 Jul 2026 15:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:46 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: 3dXGR28E9uqxiiIdNLU2E9MjCJxosgBxtUJYybt+vPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:16:d7:58:fe:04:d1:0d:66:71:1e:88:0a:46:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Jul 28 15:00:46 2026 GMT
            Not After : Jul 29 15:00:46 2026 GMT
        Subject: CN=0fcca9958fd0a30e94f11bc864b38f37089ada77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:42:f2:2d:e6:2a:8b:fe:a5:7c:d4:0c:8f:
                    86:c9:3c:6c:f5:ba:24:f2:8b:31:3d:ad:99:d4:ba:
                    67:4a:df:fc:4f:31:2d:29:41:57:c9:6b:72:f4:3f:
                    f1:43:51:09:d0:e9:7c:3b:48:8d:b9:9f:b8:ab:59:
                    99:fd:35:17:48:85:f6:15:38:a4:0d:b5:e0:fe:04:
                    bb:f4:c3:06:86:f3:3d:e8:04:20:e6:49:86:2b:a2:
                    71:9e:ed:cc:bd:41:d5:3f:e1:9f:bc:83:f7:1b:30:
                    3f:88:d1:39:e0:a6:72:de:13:cb:6e:90:ab:18:90:
                    44:03:6b:e8:47:51:20:9a:5c:80:5e:de:07:e7:1c:
                    a5:81:50:a7:67:d3:79:a8:3b:da:65:d4:47:ad:e7:
                    fe:83:cd:cc:bd:dc:20:6e:72:1a:8f:51:ac:9d:4c:
                    2b:d0:45:9d:c1:ae:16:b1:bb:f0:4c:cb:4f:b0:90:
                    83:a8:0e:0b:64:d9:f1:5b:d4:a0:af:d0:78:37:aa:
                    1e:58:b6:d1:75:da:c5:1a:d9:39:e1:b4:3e:d6:aa:
                    a2:64:e5:8b:d6:c2:1c:97:21:e9:a0:e2:c7:75:bf:
                    03:88:2a:4c:af:a8:58:5f:09:b1:ad:5b:92:08:d2:
                    28:5b:b8:24:31:bb:79:1f:d2:65:da:aa:ab:a6:f9:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CC:A9:95:8F:D0:A3:0E:94:F1:1B:C8:64:B3:8F:37:08:9A:DA:77
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:27:15:d8:ee:86:d4:7e:0e:f0:48:a1:c8:f3:65:b8:57:
         a3:25:27:3f:c5:d7:08:e3:76:aa:8a:6b:d0:0a:bc:be:f7:6b:
         e4:8b:a7:61:ff:74:b6:23:e8:8e:8f:6c:b2:72:3a:b0:a3:d6:
         43:65:92:24:0a:33:03:0d:d6:d7:f4:81:18:2b:95:a1:30:6d:
         b1:f2:fc:63:61:4b:7a:2d:72:e2:fb:d3:df:15:61:4e:37:1c:
         c1:9d:e8:c8:03:a4:37:d0:12:d6:78:a5:41:0f:a5:ec:9e:33:
         44:79:d9:91:1d:fd:f7:73:38:86:91:4a:9e:20:ce:54:b8:cc:
         98:41:80:3d:a5:a4:da:e1:18:8c:29:3d:62:2c:75:6a:f3:04:
         29:5e:42:e1:2c:46:d0:62:01:8e:b5:b9:55:d8:37:83:03:1e:
         e4:3c:b3:92:27:83:9b:43:c5:e8:73:02:a5:03:e2:3b:e0:18:
         c8:72:6b:72:92:c5:07:38:23:d4:60:67:7d:64:4c:b7:5c:e2:
         86:78:a5:9a:fb:fa:ab:93:a6:81:ed:1c:9a:a3:8a:d6:d5:6b:
         23:84:a4:8c:73:74:45:81:04:50:47:0a:d6:59:47:8b:40:a7:
         05:3e:9f:dc:1c:63:c1:7c:c7:73:92:f3:8f:39:0c:6c:6c:ba:
         4e:18:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:28 2026 by rpki-client