Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          XwUBBjf70EpD6yVFz4Zew7gh03ud+MTLPuCip8o9JzY=
Subject key identifier:   1F:3C:D5:81:18:D3:54:12:FA:9E:09:FD:FD:42:08:EF:A0:00:32:7C
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       0198819E34ABC6F45ED617EE3CF08C4AD9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          134D
Signing time:             Wed 06 Aug 2025 23:01:25 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:25 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:25 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: h+ARbMfiVamJnalOqd9axcuxn/xszh2GRlJ6gpddR04=)
                          2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
                          3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
                          4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9e:34:ab:c6:f4:5e:d6:17:ee:3c:f0:8c:4a:d9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Aug  6 23:01:25 2025 GMT
            Not After : Aug  7 23:01:25 2025 GMT
        Subject: CN=1f3cd58118d35412fa9e09fdfd4208efa000327c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:d4:c0:77:97:0f:26:69:49:a9:e1:b6:e2:
                    7a:d6:72:10:99:e4:e9:dd:b0:0a:16:da:2d:a7:6a:
                    0c:1f:5d:5f:ee:4e:f6:21:f7:87:45:69:97:20:6b:
                    b2:bd:64:e7:27:55:93:04:03:ef:ad:92:69:b8:c3:
                    b7:6b:00:97:e6:cd:98:c1:c2:04:a5:25:5f:a7:5a:
                    87:d5:e7:e6:8e:8b:82:b0:1a:48:40:17:3b:17:be:
                    5a:4c:44:c5:95:08:4e:b2:88:19:ae:18:19:6a:79:
                    a0:d3:2e:a8:bd:20:98:d9:20:7e:bf:73:68:1f:07:
                    78:b6:95:7b:00:19:35:02:9e:79:2a:1b:e0:ba:66:
                    44:98:c9:bc:4c:87:71:7e:0e:ae:9a:da:24:e5:76:
                    48:43:81:3d:b0:60:df:64:a0:2b:e6:93:78:b6:73:
                    d0:90:a6:87:9d:12:e6:a1:b7:2e:dd:43:05:33:ee:
                    ad:42:05:ff:fc:4b:30:60:c4:87:99:5a:ea:40:25:
                    8f:11:94:0c:d8:f1:d4:09:89:74:c2:2b:11:1e:74:
                    a4:42:ff:33:2a:39:bd:eb:39:a2:aa:d3:f8:9a:7c:
                    03:fd:00:29:6d:a0:15:f2:11:eb:33:f0:26:e8:91:
                    f1:9a:2e:16:aa:05:29:00:56:9d:4d:87:2f:03:49:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:D5:81:18:D3:54:12:FA:9E:09:FD:FD:42:08:EF:A0:00:32:7C
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:46:e6:d3:30:f9:e2:52:9c:ae:15:c6:fb:9d:a3:d3:eb:74:
         59:27:50:3d:dc:36:ca:6d:28:d6:43:69:85:fd:29:a2:24:08:
         de:b9:fb:98:c7:69:9b:ea:75:5c:73:a6:a0:28:c3:d1:2b:ff:
         ce:c7:cd:ff:a4:d0:45:00:e8:45:ec:29:e3:e4:07:ab:25:94:
         c5:9d:73:63:a4:2f:95:1f:57:45:5b:a2:d9:1a:a7:fc:41:4d:
         2f:90:fd:a9:86:4f:04:34:06:04:62:3f:64:d9:25:93:6d:bb:
         6d:e3:16:a0:1d:5f:29:ec:fa:08:08:80:8e:47:c5:19:ba:27:
         8c:09:a9:36:9c:f4:9e:7e:d5:f5:a0:6c:57:db:d0:b9:a3:ca:
         e9:fc:72:e0:72:76:3a:97:36:89:a4:70:c9:b4:36:2a:08:62:
         ab:dc:b3:89:79:8f:fb:5c:8a:14:d8:77:2a:d4:b1:d7:8c:5e:
         4b:6a:0f:3c:85:3f:89:57:98:02:2c:ec:3c:43:f2:1b:53:05:
         06:31:72:76:d7:da:00:66:99:a1:08:13:38:31:57:9e:fd:ab:
         6b:9d:62:77:52:f5:4c:22:fc:f9:33:5f:7b:0f:77:d7:52:4b:
         24:dc:f3:7c:e7:1c:64:f1:16:bb:e1:4a:8e:ab:82:53:e7:51:
         74:64:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:41 2025 by rpki-client