Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          NB1UBFasNQyE1skNrjajYHOnTdPb49SpEfttPhxufEo=
Subject key identifier:   60:83:00:16:90:14:A9:7A:EB:43:6A:EA:BE:0E:46:29:C2:A4:29:F4
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       01A08B314AEAFA9C6F272F22A8E697821628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          1777
Signing time:             Thu 10 Sep 2026 12:00:58 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:58 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:58 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: /slEK1louecJGu7p8X4Y09WpAH0Of26lF9yrw0FN3rU=)
                          2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
                          3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
                          4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:4a:ea:fa:9c:6f:27:2f:22:a8:e6:97:82:16:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Sep 10 12:00:58 2026 GMT
            Not After : Sep 11 12:00:58 2026 GMT
        Subject: CN=608300169014a97aeb436aeabe0e4629c2a429f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:fa:97:50:5f:93:7b:0e:05:18:66:d9:c7:
                    6d:bd:42:62:69:e7:6a:ba:95:34:60:be:8d:52:fc:
                    02:cb:9f:b1:25:d2:c1:d3:ec:6a:8b:13:b4:a9:a0:
                    43:8c:a9:c2:64:87:ed:d5:b4:d5:d4:c4:fe:bc:31:
                    34:a4:22:27:0e:b5:18:54:89:e8:8a:e1:a0:4e:1c:
                    72:6d:5c:bb:b9:16:89:8d:cf:a9:44:88:8b:ea:1a:
                    d3:48:a6:14:53:e1:39:33:4e:c2:2d:b4:df:ac:c8:
                    5d:f5:d4:e4:1e:b9:84:eb:28:17:11:39:0d:a2:90:
                    6b:4f:b3:e5:ed:db:17:ca:40:b5:01:c6:51:1c:3e:
                    62:a1:3b:8c:29:52:09:18:10:05:4d:e9:8e:f9:2e:
                    af:3c:a1:20:02:dc:a2:78:6f:37:e6:18:9e:ac:7a:
                    1e:73:68:ae:5c:21:60:76:b7:f8:09:b7:c4:f4:94:
                    df:5b:94:e3:38:5a:de:79:0c:f6:c1:a8:c2:49:bc:
                    3d:59:cb:b3:4c:28:cd:62:00:e5:94:78:f3:9f:06:
                    1b:62:bd:b2:71:7e:a0:30:fd:73:71:3b:eb:2a:0f:
                    95:44:db:c8:62:1b:1d:34:8d:a4:60:dc:ce:72:58:
                    5d:49:c3:ca:3e:64:4e:8c:f2:84:d8:97:9f:72:75:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:83:00:16:90:14:A9:7A:EB:43:6A:EA:BE:0E:46:29:C2:A4:29:F4
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:db:6f:35:41:5f:a1:25:ac:d9:6a:72:22:e6:41:ff:da:
         7a:62:53:4c:ae:f6:ac:5b:69:11:f0:ca:b4:64:5c:c5:38:1c:
         57:3c:c5:f8:fd:91:44:22:85:c1:8f:59:97:2e:e2:ec:b4:6c:
         80:76:ad:ed:91:bb:66:62:6f:ca:85:83:b4:d8:02:9a:8b:1f:
         7d:d1:a8:d6:9c:92:2d:13:0f:8a:8e:05:94:b2:d5:0b:91:d4:
         dc:e8:a3:a0:d1:ad:15:4c:e9:99:87:05:5a:bb:ec:61:6e:75:
         46:97:7a:e8:98:60:13:ff:77:9e:02:51:5d:07:e6:61:48:dd:
         34:b0:f8:14:d6:ea:f3:24:e3:c8:8d:83:09:50:97:15:c7:d3:
         35:ed:06:f0:ba:f7:30:b0:7d:c3:e8:b2:23:ae:63:a1:0b:72:
         f7:06:a4:a7:43:e6:e7:05:b8:18:1d:d5:18:af:77:39:c5:0f:
         5b:ed:6b:27:52:e3:f4:50:89:09:fb:39:e2:47:b6:03:90:78:
         20:ba:85:0a:83:a5:ae:28:21:90:0c:07:68:3f:5c:9c:53:a4:
         0d:90:cf:ae:21:5d:3d:92:35:e7:af:db:72:59:64:3b:9e:25:
         88:44:07:00:a9:13:8b:2d:b2:30:42:26:3e:48:7b:bf:ac:2b:
         78:9e:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:33 2026 by rpki-client