Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          qNzzIyJYvK9AffcrEWohlnPo9v93K1OYWHkI0GcDdSg=
Subject key identifier:   3C:FE:95:3E:8C:FB:04:7B:69:88:75:D5:FD:A5:69:69:B8:D7:46:E1
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019DA3AED0F39BA374E76D5F8FA1A43687C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          0848
Signing time:             Sun 19 Apr 2026 03:00:36 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:36 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:36 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: yUKdWXnzS3lsTGE0fMXiTP0R/4m0cezxMzYmzVXUMwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:d0:f3:9b:a3:74:e7:6d:5f:8f:a1:a4:36:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Apr 19 03:00:36 2026 GMT
            Not After : Apr 20 03:00:36 2026 GMT
        Subject: CN=3cfe953e8cfb047b698875d5fda56969b8d746e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:ca:bf:4c:1e:6f:cc:d1:38:e5:c4:e7:6e:
                    08:c9:92:e1:0f:41:07:f1:10:b1:73:c0:a0:80:08:
                    87:70:50:f9:db:07:db:ba:d2:08:98:b9:69:d7:88:
                    bf:08:e4:0c:b7:e3:dd:38:e3:4c:6d:be:f6:61:50:
                    14:76:8d:85:b1:ee:46:d2:76:dd:60:4d:e1:26:1b:
                    3f:41:57:63:79:e8:c9:c1:1f:b5:2e:46:66:04:dc:
                    bb:27:d8:6c:b8:9a:e3:82:ba:aa:c7:95:b2:59:19:
                    fa:73:f2:bf:8f:71:2d:22:69:7d:a1:75:cb:6a:bf:
                    ac:34:e6:c6:da:0a:9c:54:d1:c7:19:95:26:88:4f:
                    4a:0a:90:f0:05:fd:fb:97:ea:45:ac:e1:f4:7d:ff:
                    a0:1b:59:fd:4e:1d:f7:2c:49:58:4f:66:f7:f7:af:
                    69:0e:c0:5e:53:5a:0d:ad:19:d1:0a:fc:8d:05:86:
                    4c:56:74:30:b7:d8:18:c6:b9:23:d1:19:7a:bb:84:
                    77:97:30:d2:fc:17:e2:d2:4d:48:a4:41:e0:d6:91:
                    51:ed:46:62:39:df:29:fb:0b:5e:27:d1:cb:2d:5a:
                    81:c7:e6:c5:2d:de:4a:15:94:7d:22:fb:88:bf:95:
                    2b:a9:1f:a2:75:08:ed:83:1e:99:e1:48:c0:db:c5:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:95:3E:8C:FB:04:7B:69:88:75:D5:FD:A5:69:69:B8:D7:46:E1
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:87:48:a8:bf:68:9d:14:9b:aa:63:f3:d3:29:3f:ad:97:
         fd:ff:91:1d:87:6e:c7:43:82:89:39:65:d0:b2:b0:86:36:a6:
         bf:a5:69:c3:08:fb:8a:60:aa:0d:cf:2e:66:7e:89:d3:87:2a:
         d4:d0:3b:a0:d2:d0:4d:09:1c:43:ae:b2:e1:79:57:f2:0d:34:
         49:06:47:6a:7e:ef:5a:af:f9:d7:46:3e:44:de:a6:88:9b:60:
         93:69:0c:92:3a:b7:dd:cb:cd:74:63:84:e3:0c:6e:95:93:6c:
         18:53:3f:1c:36:ec:35:00:61:99:d1:67:ec:cd:4d:76:00:12:
         ee:a7:77:58:ca:2e:ed:60:bd:61:07:9e:43:51:c1:82:2e:00:
         29:a6:40:7c:17:98:d9:4c:f6:41:7f:e3:bd:76:b8:21:6f:0b:
         63:65:38:c7:e8:ec:b8:04:1a:63:d7:5a:91:7b:33:e0:a9:b7:
         ac:73:4c:7f:5a:b2:da:21:8f:07:e4:a1:d3:60:2c:ac:a0:35:
         2c:0d:b7:4a:f4:2e:cc:39:af:d2:6b:de:7c:6f:83:f7:c7:a3:
         5e:3c:7b:cc:39:3a:e5:3c:a5:2c:4f:3e:27:aa:91:72:19:87:
         3a:b1:14:8f:f0:13:a1:2f:2d:24:af:5e:19:03:c2:b2:c6:a8:
         5c:f5:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:02 2026 by rpki-client