Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          T/IGK/oyLoiXNVvIVsuuj2OpZfZXPJr1S7rUizCY2YU=
Subject key identifier:   91:A8:C3:29:7B:92:2F:A7:6E:4E:05:32:32:00:A7:1C:ED:49:78:0E
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       0197B6D7BE08189E90046B323BD670576D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          12E4
Signing time:             Sat 28 Jun 2025 14:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:21 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: nYbHq4LkGKHN7SsL5dFppad3H+Vwj7EgBgHDE4kQXfA=)
                          2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
                          3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
                          4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:be:08:18:9e:90:04:6b:32:3b:d6:70:57:6d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Jun 28 14:01:21 2025 GMT
            Not After : Jun 29 14:01:21 2025 GMT
        Subject: CN=91a8c3297b922fa76e4e05323200a71ced49780e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ad:19:b1:42:b8:99:1b:5d:de:fe:0c:2c:ad:
                    8b:29:fc:58:43:3c:88:de:62:a0:9c:69:e0:5b:b3:
                    bb:56:5d:40:58:71:1d:e1:82:db:64:3c:b2:f4:f2:
                    32:f3:ce:2d:c6:cd:24:10:84:b5:96:fa:9b:a7:b2:
                    92:bc:91:83:ee:32:60:75:f7:75:c5:8d:b9:0e:2a:
                    5c:d0:97:6d:5a:21:36:c7:8d:1e:f9:53:c8:1e:53:
                    76:bf:51:00:bb:c2:d0:6e:8c:3f:ab:c7:36:01:b2:
                    3e:18:f7:86:ef:a9:ce:30:57:22:26:8f:d4:01:8b:
                    db:0c:60:af:87:07:1a:04:4a:c6:94:e2:e8:ec:d3:
                    95:a4:72:5b:7a:43:05:97:5a:67:fe:39:e0:bd:ea:
                    07:58:a2:4a:d4:5c:66:c4:03:17:73:94:13:8a:d0:
                    16:8a:87:52:69:63:5b:3c:ac:c8:c4:13:9b:c1:ba:
                    cb:54:6f:fd:49:ff:18:f7:90:00:15:69:90:ea:e1:
                    97:84:c9:29:e3:a4:03:f7:3a:d0:e2:be:58:81:a4:
                    f1:34:c0:44:dc:a5:1a:78:71:4a:c8:a9:80:94:87:
                    2e:70:59:61:7a:0d:64:1b:80:d2:d8:43:7c:aa:37:
                    e1:d0:aa:83:65:6e:23:fe:cf:11:e3:04:11:83:10:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:C3:29:7B:92:2F:A7:6E:4E:05:32:32:00:A7:1C:ED:49:78:0E
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:c0:25:97:29:7c:0d:91:a5:69:ee:70:48:7a:8a:c0:64:
         ad:e4:85:83:18:49:4b:5d:6b:55:42:40:e6:89:4a:22:a1:f6:
         ec:91:5f:b3:17:66:ec:31:44:9f:bc:58:02:91:53:e4:05:49:
         99:ad:4a:56:cb:0a:ae:0e:7c:e1:3e:03:43:af:28:32:2b:3d:
         48:bd:2b:ca:34:f7:f9:6c:0b:b7:8d:fa:95:e2:3c:87:51:3e:
         b6:0f:07:fa:87:3e:0e:4d:0d:60:a7:87:cf:c7:2b:35:19:93:
         8c:67:48:59:7a:a8:d2:b8:be:14:84:df:7e:fa:66:0e:e2:f1:
         13:3f:61:d4:76:5d:ae:8e:a0:8c:c3:b1:23:f2:9c:9f:67:93:
         e8:0f:5a:69:ef:8c:8c:21:fc:a7:aa:f3:7e:5e:52:e7:e9:37:
         91:96:1a:04:0b:bd:80:d6:51:ef:9e:80:f0:e7:97:f9:ed:84:
         2f:52:83:3e:43:5a:eb:fb:fd:44:e1:8c:9c:b4:f1:c9:55:5b:
         7a:33:47:73:5b:b7:b0:1d:ee:ae:f8:58:13:23:57:6c:46:c6:
         2f:0b:a3:fd:ff:2e:6a:c1:ad:38:aa:b2:be:02:f9:ee:58:7a:
         eb:63:e4:6c:a6:e2:f8:ba:85:54:03:f1:52:0f:dd:f6:7e:87:
         93:b7:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:21 2025 by rpki-client