Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          B7sK/vuF12OV+JYIeJgJxmbVRaKIecPCny6OXzC60CM=
Subject key identifier:   1A:B6:C0:B6:8B:CF:E2:30:D4:41:A2:4B:1D:97:CB:BA:B3:25:7E:41
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       01A0C70E73BBF26F27CCFD0559A7E51E7337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          1796
Signing time:             Tue 22 Sep 2026 03:00:08 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:08 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:08 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: aGsHCYGONHVcAJoOq5hW6NGMdjC3Nyl7GN+bOeGccHs=)
                          2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
                          3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
                          4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:73:bb:f2:6f:27:cc:fd:05:59:a7:e5:1e:73:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Sep 22 03:00:08 2026 GMT
            Not After : Sep 23 03:00:08 2026 GMT
        Subject: CN=1ab6c0b68bcfe230d441a24b1d97cbbab3257e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:a8:7f:3a:50:15:ef:40:df:fc:57:71:fe:
                    f5:27:56:2e:3b:ce:42:ad:5b:72:45:75:fb:7e:49:
                    d7:9f:f5:c4:5c:1c:87:44:64:c1:e9:c8:9a:39:fe:
                    ae:a7:2d:e0:c4:dc:3e:ba:31:df:97:09:24:32:96:
                    6e:47:6c:15:ed:30:2c:e4:d8:7a:19:42:7f:17:bb:
                    28:42:2c:34:79:64:5b:3c:de:b4:df:bb:1c:55:df:
                    1d:7b:89:cc:71:1f:84:ac:03:48:f7:12:c2:17:34:
                    5b:f1:5a:69:80:ca:88:77:cc:39:93:df:ed:a3:89:
                    9d:dc:6e:54:a6:28:a0:f9:ec:e7:eb:fd:c4:21:1e:
                    85:4f:2e:00:ff:90:d9:b0:74:09:e9:d1:a8:f8:28:
                    3c:62:b8:c9:41:66:85:f4:ee:01:01:4a:42:8a:62:
                    07:b9:6e:06:2d:43:5c:93:7d:51:2f:4e:fa:e9:90:
                    30:48:f2:72:ec:be:91:93:11:c6:20:3b:c2:b9:cf:
                    91:bb:a7:a2:23:58:64:06:5a:0f:ac:72:e4:a5:c2:
                    9f:6b:3e:82:df:7b:91:3e:65:a3:4e:88:16:3a:5d:
                    21:c2:7f:fb:fe:7a:ce:9d:32:1f:56:1a:bc:37:37:
                    45:a5:0a:41:af:6b:94:74:63:3c:ce:03:65:5f:c6:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:C0:B6:8B:CF:E2:30:D4:41:A2:4B:1D:97:CB:BA:B3:25:7E:41
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b7:70:da:47:04:cc:b5:14:26:6e:e2:dc:6c:17:ca:37:5b:
         00:c4:04:c1:0f:24:e3:1b:8d:62:7b:4c:14:b5:29:53:45:ec:
         1a:de:9d:a3:27:f5:dd:0e:89:49:f1:f0:d5:f6:37:b2:06:68:
         28:0c:e3:e8:54:b1:c9:9a:48:aa:3c:a2:ec:eb:06:a8:89:8d:
         df:ed:f1:2c:9e:5f:9d:f2:6e:e6:99:54:83:f5:b3:0e:60:f4:
         a2:fd:ca:df:a2:b9:24:26:f3:17:c3:0f:48:43:8e:52:fa:6c:
         16:24:0b:73:9c:7d:a3:9a:f6:5c:86:20:9a:91:95:50:be:fd:
         09:92:d8:4c:33:df:a1:d0:fe:08:0a:22:09:43:f4:a8:b1:4c:
         eb:c2:f6:20:fe:15:f8:d9:dd:4f:60:b6:33:ec:77:47:dc:ff:
         dc:32:75:29:fd:f0:c2:d0:7a:ef:c7:4c:a5:e6:38:ec:67:67:
         7b:ab:9e:6f:a5:f7:79:15:d5:84:ad:c8:ea:34:00:6e:2d:3f:
         8e:93:cf:e0:6b:a4:02:fb:cc:da:58:6f:08:62:d3:b5:11:15:
         46:63:c4:7a:c5:79:d4:81:a0:c7:11:80:b1:4a:4e:26:36:4a:
         26:e8:c4:b8:e2:01:21:e3:6e:7e:93:14:a7:c3:3b:12:d5:f0:
         47:cc:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:32 2026 by rpki-client