Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          n4X/rchpSG7jaALEHjnS4KciBp+mtOf0hiB2hAC9GyQ=
Subject key identifier:   16:1A:5F:66:0D:C4:36:63:A2:79:4E:E5:48:9B:A5:78:75:53:B8:3E
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       01A0CAEB3479C57862498B2FA83CA2D6549F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          1798
Signing time:             Tue 22 Sep 2026 21:00:07 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:07 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:07 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: NJ+fy35+o92PUhoFKKHk1LXC7JcULSxHe5oJPM8T5eY=)
                          2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
                          3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
                          4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:34:79:c5:78:62:49:8b:2f:a8:3c:a2:d6:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Sep 22 21:00:07 2026 GMT
            Not After : Sep 23 21:00:07 2026 GMT
        Subject: CN=161a5f660dc43663a2794ee5489ba5787553b83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:76:6a:ff:d0:6f:73:f2:3d:32:91:0f:f6:79:
                    14:31:22:42:89:0e:51:9a:5f:7f:2f:52:a4:a9:95:
                    07:a8:21:27:c7:51:bc:db:54:cf:7f:01:5b:db:6a:
                    ee:46:47:37:80:dc:bd:60:be:8e:13:53:fe:e3:37:
                    3c:c4:63:5c:62:96:b0:d0:b6:27:80:9a:f9:6e:a1:
                    94:de:4e:b8:a8:ef:f7:31:d5:90:76:65:9c:17:a9:
                    62:a0:17:19:ef:94:8a:ae:8f:ae:9c:db:45:96:50:
                    d8:db:95:25:c7:d8:ed:1b:cf:46:ae:6b:cf:c2:89:
                    01:eb:60:74:5e:97:ed:7f:5c:05:ad:b6:1b:fb:ba:
                    bf:f0:2e:de:bd:1f:5f:5a:1f:05:33:9d:ba:80:2a:
                    c3:fa:b0:5b:06:51:db:af:ae:c8:2b:ec:bf:a4:80:
                    52:50:3d:d3:3d:c7:20:5e:99:2b:3f:8e:bd:6c:7c:
                    31:dc:ab:9d:44:69:6a:7f:b4:0f:88:3c:c2:d0:d9:
                    c7:ad:03:25:90:c6:3e:98:65:47:9a:13:85:f1:0f:
                    74:ad:da:b0:e2:2e:50:cd:e3:d4:48:ac:27:84:a3:
                    bf:80:18:8e:4f:83:f2:c3:67:66:d4:79:5c:d1:0c:
                    de:32:0f:48:1e:14:1e:73:a5:8e:08:7e:5d:28:df:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:5F:66:0D:C4:36:63:A2:79:4E:E5:48:9B:A5:78:75:53:B8:3E
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:ac:83:9b:71:55:11:8d:f2:bf:97:ac:08:0d:b6:3f:4b:
         a6:9a:29:ec:21:1b:7d:c8:d9:75:58:c1:5f:75:f2:b3:a7:f4:
         bb:fd:ec:e8:70:86:e3:13:29:d4:19:2f:8b:38:01:eb:68:8c:
         24:16:5f:f6:2b:c2:b9:eb:e4:80:9e:45:16:ed:43:2e:7e:17:
         b3:33:57:ce:2d:a6:07:0a:67:5c:8e:d7:0c:9b:33:bd:df:8d:
         ca:68:d0:54:aa:e3:d4:1b:84:69:eb:c1:54:43:37:0f:7a:c6:
         66:54:25:5d:ad:86:38:ba:b8:9d:61:f4:07:52:3a:94:f0:96:
         91:be:45:f5:36:21:19:66:78:67:fb:b5:ba:12:d0:0f:cf:11:
         b9:75:81:73:fb:97:41:42:ea:96:5e:9f:e2:85:cc:e4:b9:08:
         83:79:4b:27:65:98:9d:ed:a6:c8:15:8a:ae:dd:cd:49:ad:04:
         ba:ee:06:fb:4f:24:a6:c6:4b:16:3b:af:08:9d:d7:88:5a:07:
         f8:8c:74:4a:e7:92:89:63:49:63:7d:76:da:3c:04:e2:d6:8a:
         06:c1:47:99:c2:c6:35:7e:d9:f4:37:83:fb:62:9a:77:ae:02:
         ac:21:0f:e9:55:be:cd:5a:e6:d1:18:5c:94:55:76:ae:cf:2f:
         3a:98:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:09 2026 by rpki-client