Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          xGQPMqocETFrWN2wA2FItq1xLSLEN47I0HNs4PiOyqU=
Subject key identifier:   FF:C1:17:D4:AA:CC:27:FD:AC:2F:5D:85:7E:36:A6:13:29:5D:1D:59
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       019EBF91A5B585670698907C9B3CE1F289A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          1689
Signing time:             Sat 13 Jun 2026 06:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:53 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: jwYWCzmErYP3AYTQv1BYuiLTts9roLtVXuMF+SavgBQ=)
                          2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
                          3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
                          4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:a5:b5:85:67:06:98:90:7c:9b:3c:e1:f2:89:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Jun 13 06:00:53 2026 GMT
            Not After : Jun 14 06:00:53 2026 GMT
        Subject: CN=ffc117d4aacc27fdac2f5d857e36a613295d1d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:7f:6c:fe:68:44:54:c6:5a:06:74:5d:60:
                    bd:30:ca:7b:6a:c6:25:04:2a:de:65:11:cc:91:49:
                    5a:77:cd:23:73:36:2a:2c:21:3f:91:06:8e:25:7f:
                    7b:5d:51:3f:34:ed:48:08:af:4f:cf:06:d5:6c:ed:
                    fe:b0:87:c6:0d:32:58:92:b5:d1:a9:70:39:f2:06:
                    55:8b:e3:64:fe:aa:9c:65:39:54:37:44:33:f2:69:
                    43:69:d0:6a:ab:3c:20:ee:0c:2f:70:38:9c:ca:1a:
                    3e:9c:ab:f8:46:4c:a5:93:3b:98:f7:96:b4:9b:44:
                    f1:1b:11:09:a6:02:7c:77:57:fa:6a:e9:9e:6e:62:
                    3b:dd:c2:62:9b:15:cf:cc:9b:d1:b9:e2:26:52:cb:
                    cd:37:a0:1b:ed:54:3f:e9:b3:14:73:da:2e:24:8c:
                    e7:e7:8b:a6:26:79:cc:ad:7e:c7:02:42:96:54:e0:
                    ca:b1:22:2c:1b:cf:c4:7d:10:fd:21:d2:d5:cd:67:
                    7b:13:e8:82:29:ee:4f:17:5f:cc:e3:7e:77:0e:ac:
                    8a:40:40:2a:e7:1a:dd:12:ea:1b:35:56:f3:c2:3d:
                    8c:a2:55:fa:de:c0:b1:8d:3b:1e:3d:75:7a:3d:22:
                    af:76:63:db:48:96:3b:7d:13:58:8e:bb:6f:35:b8:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C1:17:D4:AA:CC:27:FD:AC:2F:5D:85:7E:36:A6:13:29:5D:1D:59
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:75:20:54:43:b2:5f:a4:72:d4:1c:68:29:bb:60:7b:f4:a8:
         b7:2d:8b:d3:e7:47:b9:7a:33:9c:1f:73:72:cf:23:28:7d:cf:
         79:26:ab:36:17:a5:28:71:90:cf:22:dd:5c:a2:f8:d2:28:68:
         66:67:7f:d5:1e:53:47:11:a9:cb:5b:ce:e2:e1:18:6e:1b:ba:
         f3:46:d8:4c:30:8d:ae:d0:91:0f:ec:0a:e9:aa:b7:a1:49:d4:
         31:7c:d3:82:c6:f1:48:59:33:fb:38:ff:d6:f6:df:f9:43:7c:
         8f:b8:bc:e5:ff:6a:8b:28:2e:3b:62:40:36:e4:df:fb:ab:6b:
         33:69:50:62:4e:45:6f:40:a6:16:6f:8e:6d:d6:ab:8b:25:2f:
         82:25:20:bf:19:23:c4:26:41:cf:06:04:f9:6b:ef:3f:2a:7b:
         eb:da:76:c6:5f:36:16:a0:4e:27:01:57:9d:30:61:e6:9e:01:
         45:8a:9b:fe:3d:90:21:b6:b3:43:b2:84:19:51:da:45:20:3a:
         c4:c0:75:54:ec:b4:47:b1:d9:71:67:33:d5:6d:c3:16:a5:02:
         c8:49:ef:2d:09:2d:a2:65:4f:c9:a1:69:ce:34:c0:f6:ce:e5:
         c4:f1:c7:60:28:f2:ae:aa:8f:8e:4e:c3:b5:c0:d7:ca:bf:0b:
         2a:4d:fa:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6/kaW1hWcGmJB8mzzh8omnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy
OWQ2MjQwHhcNMjYwNjEzMDYwMDUzWhcNMjYwNjE0MDYwMDUzWjAzMTEwLwYDVQQD
EyhmZmMxMTdkNGFhY2MyN2ZkYWMyZjVkODU3ZTM2YTYxMzI5NWQxZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVt/bP5oRFTGWgZ0XWC9MMp7asYl
BCreZRHMkUlad80jczYqLCE/kQaOJX97XVE/NO1ICK9PzwbVbO3+sIfGDTJYkrXR
qXA58gZVi+Nk/qqcZTlUN0Qz8mlDadBqqzwg7gwvcDicyho+nKv4RkylkzuY95a0
m0TxGxEJpgJ8d1f6aumebmI73cJimxXPzJvRueImUsvNN6Ab7VQ/6bMUc9ouJIzn
54umJnnMrX7HAkKWVODKsSIsG8/EfRD9IdLVzWd7E+iCKe5PF1/M4353DqyKQEAq
5xrdEuobNVbzwj2MolX63sCxjTsePXV6PSKvdmPbSJY7fRNYjrtvNbiSdwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP/BF9SqzCf9rC9dhX42phMpXR1ZMB8GA1UdIwQY
MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx
LTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ2L2RlN2VmNi1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0
YjIvMS8xLVFONTg2X1pUQThtdG5fX28wMXVsR3dwMWlRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXUg
VEOyX6Ry1BxoKbtge/Soty2L0+dHuXoznB9zcs8jKH3PeSarNhelKHGQzyLdXKL4
0ihoZmd/1R5TRxGpy1vO4uEYbhu680bYTDCNrtCRD+wK6aq3oUnUMXzTgsbxSFkz
+zj/1vbf+UN8j7i85f9qiyguO2JANuTf+6trM2lQYk5Fb0CmFm+ObdariyUvgiUg
vxkjxCZBzwYE+WvvPyp769p2xl82FqBOJwFXnTBh5p4BRYqb/j2QIbazQ7KEGVHa
RSA6xMB1VOy0R7HZcWcz1W3DFqUCyEnvLQktomVPyaFpzjTA9s7lxPHHYCjyrqqP
jk7DtcDXyr8LKk360w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:57 2026 by rpki-client