Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          vUKR83ORF5ofSqOAtYEv6uOE8f9LtCZmafFqObGHYuk=
Subject key identifier:   99:CF:21:E4:66:4B:6C:94:F5:C5:A2:0B:54:55:83:78:C8:41:18:29
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       019D9A070CD9AA5BE7220B7D8E6287D9C6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          15F1
Signing time:             Fri 17 Apr 2026 06:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:46 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: FiNcfBhT8RxxuFcw5/5E0NonshEmki5mQTM/h1PuZy4=)
                          2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
                          3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
                          4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:0c:d9:aa:5b:e7:22:0b:7d:8e:62:87:d9:c6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Apr 17 06:00:46 2026 GMT
            Not After : Apr 18 06:00:46 2026 GMT
        Subject: CN=99cf21e4664b6c94f5c5a20b54558378c8411829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:fe:ec:c2:1b:45:a0:ab:f7:1d:e8:22:1f:
                    6a:cf:25:e0:bb:e6:c2:20:58:99:78:6f:c3:f2:5b:
                    61:16:32:c3:38:db:c4:c6:04:88:bb:05:ab:14:14:
                    4d:45:4e:4e:01:a4:55:25:b0:87:f9:f8:f6:2b:c0:
                    5e:28:e0:19:94:f1:ac:7b:b2:55:8a:a7:9e:c2:be:
                    98:5f:5a:21:df:05:e2:58:8b:52:0e:55:02:78:d2:
                    ef:36:1e:fc:6b:11:5a:f4:7c:1b:c4:e1:4e:16:f8:
                    c4:98:a8:bc:be:fc:a6:18:2c:66:e0:92:da:b8:d4:
                    fa:2a:b3:de:51:14:16:c6:99:34:bb:25:1b:d7:dc:
                    33:b9:f5:a9:6a:91:ee:d9:cb:04:b8:77:05:b8:f0:
                    76:ba:4a:1a:b8:57:16:78:43:30:18:e8:4c:52:b9:
                    f4:e8:86:1d:6f:89:dd:a6:7e:59:7d:4a:46:19:f0:
                    b6:b4:f4:16:25:13:2e:09:a5:31:d5:dd:7a:77:c8:
                    0c:d5:9d:28:9b:d1:ce:96:da:71:ed:fa:88:15:d0:
                    97:76:69:75:22:c5:32:19:f8:c4:64:80:c2:5b:da:
                    5d:58:17:7a:de:9e:4b:ae:81:22:0d:cc:63:1b:35:
                    03:39:b8:44:ee:e6:68:bd:8f:b5:83:bf:38:51:ae:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:21:E4:66:4B:6C:94:F5:C5:A2:0B:54:55:83:78:C8:41:18:29
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:e8:88:2c:df:55:08:6d:c8:76:1a:5a:3e:df:c3:a0:b8:
         8f:63:cf:33:37:03:bd:a9:c0:e9:14:66:74:7f:86:09:b3:f6:
         9c:60:e0:10:f0:d8:6e:f8:9a:f9:4f:b3:48:dd:9d:4f:1a:af:
         c9:8d:6a:7f:66:76:e5:5a:c1:90:b8:8c:65:0a:56:df:98:e0:
         4a:fd:0f:ab:7b:3f:bc:4b:d0:ad:6b:a4:a1:1a:92:e6:89:f4:
         75:b8:10:97:6f:5d:33:97:c2:3e:8d:a3:57:9d:0e:c2:d8:db:
         b3:6b:80:09:d6:90:70:ff:06:70:fe:74:e1:b4:87:3c:a8:5d:
         e7:4c:63:40:a1:bf:b7:00:0d:be:49:16:ef:bf:bc:f4:9c:95:
         6b:b5:f3:89:94:ed:71:69:ee:ea:80:c1:90:c2:8c:de:27:6c:
         57:5f:93:4e:84:5d:25:f2:ce:c9:86:ff:be:2d:fb:e9:32:c3:
         5c:ba:a7:70:46:64:51:c4:64:be:5b:a0:6d:8f:07:54:b8:91:
         fe:86:ce:6b:c0:74:e7:4e:6e:31:42:f8:61:bb:d6:37:7d:a5:
         62:dc:ca:d3:62:ee:2f:1a:f3:b3:77:3b:c2:48:da:b9:d3:77:
         98:b3:77:57:16:18:26:af:00:4c:c7:66:22:83:aa:54:31:c6:
         c7:b5:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:00 2026 by rpki-client