Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          i+xrlsielNCOSpCb+2AFHXaGEPX9PGFDEkGPvQh6obQ=
Subject key identifier:   FA:F1:38:9B:25:F8:A6:DF:84:EB:51:98:5A:21:BA:E5:80:6C:82:B3
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       019CAC7DE530881AFA5A2043A28701DC1B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          07C8
Signing time:             Mon 02 Mar 2026 03:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:57 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: /nEVtaYs4fM8OuSQpGAdD2s6BgJikO9by4HXa9KZqio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:e5:30:88:1a:fa:5a:20:43:a2:87:01:dc:1b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Mar  2 03:00:57 2026 GMT
            Not After : Mar  3 03:00:57 2026 GMT
        Subject: CN=faf1389b25f8a6df84eb51985a21bae5806c82b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:48:7f:c0:88:12:76:47:9e:52:ea:69:8a:
                    79:e6:4c:85:07:8d:29:29:08:7a:ca:ed:e3:bb:b5:
                    20:ab:d1:90:ab:b9:8c:06:36:41:5d:f6:28:55:d3:
                    a0:38:f2:10:e0:64:80:e1:c0:7b:ff:17:47:83:04:
                    4e:15:aa:13:bb:e1:0b:a9:dc:a7:fc:3c:fa:0c:97:
                    fa:3c:ad:97:3c:9a:8c:5d:b0:39:56:f8:6a:3f:d7:
                    4a:47:4c:5d:d4:ad:d8:10:ce:ad:99:50:31:4f:f7:
                    b0:f6:23:73:05:5b:47:74:39:c7:06:7d:1b:cb:75:
                    18:3b:b3:fe:6b:be:c1:8b:2a:d5:21:40:44:69:a1:
                    28:86:da:2e:25:6f:40:fc:09:1c:6b:a9:70:4d:60:
                    69:df:f3:bd:dd:00:e0:d2:5e:b2:ff:9d:be:04:8b:
                    b6:cc:d0:2c:1c:44:4b:a4:f1:0d:67:cb:30:0c:0b:
                    61:96:f0:93:cb:e9:f7:88:4c:65:ac:29:ce:bf:16:
                    eb:e4:9a:ea:5b:b2:e2:fc:57:f7:37:76:b9:7e:fe:
                    f3:e0:fb:c2:86:45:c0:e9:11:25:51:f0:95:04:c2:
                    f7:7f:a7:f3:9e:d4:02:97:2f:4e:cc:30:9d:9f:ba:
                    f6:4c:96:17:58:6e:75:7d:ee:a8:cf:99:ce:50:0f:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:38:9B:25:F8:A6:DF:84:EB:51:98:5A:21:BA:E5:80:6C:82:B3
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:78:a0:c9:65:41:21:0b:9e:1a:c8:22:fc:49:df:d2:12:
         7d:91:02:aa:16:2d:38:89:22:f3:67:8c:ab:13:fd:e1:c8:0e:
         d0:58:67:1f:f6:ef:84:71:98:3d:46:6e:cb:90:db:1e:32:e8:
         37:7d:38:a3:cb:ee:c6:ea:93:de:66:69:e3:3d:ec:76:8d:c1:
         42:53:3b:09:9a:bb:d7:ad:27:eb:38:9e:23:f3:fb:b2:56:9f:
         37:1a:41:b3:b7:37:2d:b1:82:10:6a:c7:0c:5e:f7:05:4d:5d:
         92:88:b6:29:37:40:f0:b0:64:36:b8:d8:a4:1c:05:60:10:69:
         e4:e3:3c:29:f9:65:d7:4d:ad:4c:64:d5:88:2c:a1:44:e6:d4:
         42:35:27:6c:4d:be:96:e5:b9:c9:5e:20:6f:d4:ce:5c:1b:cb:
         ef:fc:32:d1:16:3b:e6:19:db:8f:c8:06:35:df:c5:bb:7a:37:
         f0:ef:46:84:47:4f:9f:a3:20:6c:b4:49:f7:68:f5:bf:f9:6a:
         2a:bd:e6:0d:0f:7c:64:6e:b4:87:88:f7:80:b6:f6:82:64:42:
         e4:86:fa:26:57:bd:0e:60:2a:0f:f3:5f:0a:48:dd:72:db:d8:
         8e:55:aa:7e:24:61:7a:ba:d1:af:e5:bb:c2:71:a2:8b:4f:ef:
         22:6c:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:24 2026 by rpki-client