Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          630hjwLTIvKDjk3CU3bqQa99SkcWBlrGKBlTL6gwDtc=
Subject key identifier:   0F:F6:B6:52:DF:2B:85:38:CB:B5:66:91:9C:CA:F4:1A:0E:65:61:41
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019893DB2E4DEF5A1C4D5F511C5544B2415B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          05A9
Signing time:             Sun 10 Aug 2025 12:01:11 +0000
Manifest this update:     Sun 10 Aug 2025 12:01:11 +0000
Manifest next update:     Mon 11 Aug 2025 12:01:11 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: LwqVJmMeSUxFyZDNgB6DHT7jTldW9h4IvJMf2yq34Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:db:2e:4d:ef:5a:1c:4d:5f:51:1c:55:44:b2:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Aug 10 12:01:11 2025 GMT
            Not After : Aug 11 12:01:11 2025 GMT
        Subject: CN=0ff6b652df2b8538cbb566919ccaf41a0e656141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:67:78:b6:c5:16:7b:ec:85:39:86:51:17:
                    f6:13:ef:b5:32:b6:4a:16:6d:c7:4f:09:e6:50:b1:
                    37:60:90:b9:db:e0:fc:0f:66:77:b6:38:a8:26:ba:
                    d2:80:7d:4f:42:c3:e0:7a:44:ab:50:27:14:59:be:
                    5a:9f:ad:3b:0c:d6:4c:56:ec:f8:94:62:79:bd:0f:
                    a4:7c:50:8e:7a:99:55:73:c8:27:10:ec:54:86:6b:
                    bd:bf:dc:75:ca:fb:b2:8f:b0:a7:04:7c:7b:32:31:
                    48:43:33:3f:bd:a9:90:8a:d5:5a:d5:60:79:1f:ba:
                    2a:53:0e:8f:dc:e8:d0:aa:fc:95:6f:e9:8f:f8:fc:
                    06:d7:80:3c:9d:17:78:27:c7:3f:24:1f:8f:1b:b1:
                    e0:30:6a:54:02:ba:87:30:b0:13:e5:da:68:f3:0b:
                    a9:5e:df:9e:12:e4:4d:30:dc:ca:e1:f5:72:91:d5:
                    16:ce:c0:4f:bf:4e:43:5e:89:f3:ad:33:cb:23:87:
                    14:45:51:42:84:ed:e6:15:20:3f:1c:a3:93:29:a5:
                    53:5b:85:40:dc:cc:7a:a5:9c:d4:74:78:40:93:96:
                    f0:85:41:5e:18:66:57:08:05:58:9b:c0:f2:de:63:
                    88:7e:2e:bf:25:8e:d7:2a:c0:11:21:92:bc:f9:59:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F6:B6:52:DF:2B:85:38:CB:B5:66:91:9C:CA:F4:1A:0E:65:61:41
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:8a:3b:e6:2a:ba:f3:a5:9d:b0:7e:9f:b2:74:7e:a9:63:
         b1:ee:5f:43:70:20:88:69:20:20:5f:77:fa:18:93:1d:3a:c9:
         78:69:e6:5d:ee:df:a5:88:99:5f:b8:2b:05:cd:f6:c0:b1:11:
         e1:bb:ec:02:17:87:75:57:1a:17:c6:4a:9a:da:06:81:57:81:
         7e:ee:6b:6d:07:2a:64:53:60:bb:45:17:a2:28:dd:e1:10:07:
         f3:24:bb:71:c1:02:fa:66:fa:09:f8:6b:c3:94:f1:8a:b5:52:
         0e:ad:37:e5:d1:fa:03:95:a6:54:a4:3b:bd:04:0a:fb:7d:1e:
         56:d8:4f:8c:cb:4e:bc:71:91:4c:53:5c:f0:81:f5:4b:72:f4:
         55:2e:7b:31:36:23:72:39:4f:13:39:f9:b2:81:f1:b5:7f:08:
         9e:2f:f6:c0:83:27:bf:9e:3e:4b:b7:18:b1:06:60:c2:c1:c5:
         ff:74:60:83:2b:bf:83:03:bf:0d:b7:50:f7:5c:43:14:5e:cc:
         50:cc:e4:99:0d:90:53:fc:b9:9e:3c:f7:9c:9c:79:60:df:f1:
         3d:c5:82:7f:4a:73:e0:03:7c:85:64:d4:fa:33:45:4c:7e:5a:
         cb:8d:da:7a:60:e4:14:65:2d:2e:af:aa:3b:16:ac:7c:65:68:
         bc:8b:98:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2y5N71ocTV9RHFVEskFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmNlZGVkYzdjNWFkYjg1ZmRiYjc5ZjRiMWQ3ODA0ZGZk
MDEwM2UwHhcNMjUwODEwMTIwMTExWhcNMjUwODExMTIwMTExWjAzMTEwLwYDVQQD
EygwZmY2YjY1MmRmMmI4NTM4Y2JiNTY2OTE5Y2NhZjQxYTBlNjU2MTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTRneLbFFnvshTmGURf2E++1MrZK
Fm3HTwnmULE3YJC52+D8D2Z3tjioJrrSgH1PQsPgekSrUCcUWb5an607DNZMVuz4
lGJ5vQ+kfFCOeplVc8gnEOxUhmu9v9x1yvuyj7CnBHx7MjFIQzM/vamQitVa1WB5
H7oqUw6P3OjQqvyVb+mP+PwG14A8nRd4J8c/JB+PG7HgMGpUArqHMLAT5dpo8wup
Xt+eEuRNMNzK4fVykdUWzsBPv05DXonzrTPLI4cURVFChO3mFSA/HKOTKaVTW4VA
3Mx6pZzUdHhAk5bwhUFeGGZXCAVYm8Dy3mOIfi6/JY7XKsARIZK8+VkjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/2tlLfK4U4y7VmkZzK9BoOZWFBMB8GA1UdIwQY
MBaAFO387e3Hxa24X9u3n0sdeATf0BA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUt
NDU2MDZlZTA2NzY3LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUtNDU2MDZlZTA2NzY3
LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFD2KO+Yq
uvOlnbB+n7J0fqljse5fQ3AgiGkgIF93+hiTHTrJeGnmXe7fpYiZX7grBc32wLER
4bvsAheHdVcaF8ZKmtoGgVeBfu5rbQcqZFNgu0UXoijd4RAH8yS7ccEC+mb6Cfhr
w5TxirVSDq035dH6A5WmVKQ7vQQK+30eVthPjMtOvHGRTFNc8IH1S3L0VS57MTYj
cjlPEzn5soHxtX8Ini/2wIMnv54+S7cYsQZgwsHF/3Rggyu/gwO/DbdQ91xDFF7M
UMzkmQ2QU/y5njz3nJx5YN/xPcWCf0pz4AN8hWTU+jNFTH5ay43aemDkFGUtLq+q
OxasfGVovIuYAA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:25 2025 by rpki-client