Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File:                     Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier:          K/vY8BnxdMY823QvgtQ+Ydo2zNsCc0xVhbt0FEwRmPU=
Subject key identifier:   9B:D5:07:13:8A:79:94:E5:60:DE:C2:98:79:AA:4F:07:49:7F:EC:91
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer:       /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial:       019F38973446AF920400FD3110FC64D712F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number:          1924
Signing time:             Mon 06 Jul 2026 18:01:01 +0000
Manifest this update:     Mon 06 Jul 2026 18:01:01 +0000
Manifest next update:     Tue 07 Jul 2026 18:01:01 +0000
Files and hashes:         1: 88YpHUQ6fLDeh74-HidaPCz4rbs.roa (hash: caUHmlgsNHqTmPixxtDsM5vYCINLVzDzb2yA6/5Oj2Y=)
                          2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: 3LN3bg+4e7740vfQ3ZsIMx99ypOCvMbGMK1xtrB4H/4=)
                          3: XQgaYP5gY1ydpVbiWsv5P-EB5-A.roa (hash: nsvwY1vJ7ktI1eOY0M7VmsNoL86xHPAjslqQYSwiEGI=)
                          4: q5X3A9QxxaMfhQJ9_S68lKxgE18.roa (hash: 3Tt3Peef5oCnG41VEJmUc1HvZqruzEcLYyX+uQDFDk4=)
                          5: yqfYAhxKzEU-xZc4dSsVxVRn1xQ.roa (hash: x2ct4zFMCc0boyM7X2ctiDqfrOIuQWGhxoimZFBvzz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:97:34:46:af:92:04:00:fd:31:10:fc:64:d7:12:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
        Validity
            Not Before: Jul  6 18:01:01 2026 GMT
            Not After : Jul  7 18:01:01 2026 GMT
        Subject: CN=9bd507138a7994e560dec29879aa4f07497fec91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:33:17:7b:40:3d:61:9f:e4:4c:11:d6:c9:
                    75:91:a1:78:0b:23:6f:a4:0f:ef:d8:65:1b:a6:f2:
                    3e:92:8f:bc:62:86:de:8c:fe:89:51:f2:f7:14:1f:
                    2c:41:41:bf:35:f7:54:46:0d:b2:58:d7:59:53:cd:
                    e6:f1:8f:cf:11:30:c6:ae:1c:dd:e4:9c:2d:f7:fe:
                    b5:d7:fb:2a:7e:c6:84:3b:d2:d0:6b:da:f2:dc:5a:
                    b4:5b:23:e5:2f:92:d7:ff:f1:b6:e7:cb:c3:45:55:
                    44:36:b0:84:cf:ce:93:a1:e3:e4:b8:41:71:61:8e:
                    bd:e6:b2:9d:68:81:34:84:dc:64:85:59:e2:7f:e1:
                    8a:2a:22:d5:96:f0:12:33:ee:d5:4c:93:25:e8:a6:
                    ea:8b:82:ac:c7:90:31:36:52:83:c6:32:ca:10:64:
                    46:e2:b3:08:9a:b9:13:32:9a:28:47:c0:a0:07:0f:
                    b3:4a:8c:3d:e3:ba:af:2c:29:84:f1:f9:c7:f5:2b:
                    22:b9:0e:33:65:06:0d:fc:fd:36:9a:e6:da:57:4c:
                    4a:c5:a8:c8:90:14:c9:b6:ed:16:f4:4c:ec:e6:d1:
                    22:22:a2:6c:59:fc:aa:f7:da:13:f8:9e:d9:43:e9:
                    2c:d4:34:9d:68:71:dd:24:6d:3e:c1:f2:12:4e:3e:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:07:13:8A:79:94:E5:60:DE:C2:98:79:AA:4F:07:49:7F:EC:91
            X509v3 Authority Key Identifier:
                keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:34:f5:28:5b:ba:65:48:76:c3:da:4b:03:ee:2c:8d:73:
         3c:3e:37:a1:73:f0:fd:e5:c5:01:7e:8a:59:c2:62:3d:f6:71:
         ed:58:25:f2:24:75:d3:e4:11:ff:14:33:25:9e:4a:e7:da:58:
         63:b1:e8:bd:0d:79:26:6d:23:cb:be:bd:70:9d:01:16:c2:4e:
         18:12:1a:89:b3:ee:13:1f:32:74:f2:40:57:07:b1:10:72:7d:
         92:05:2d:65:84:f1:17:5d:2e:50:e6:2c:e3:e5:f0:69:26:b4:
         f7:48:db:33:b8:ae:65:1a:e4:1f:ac:74:74:23:48:5e:14:15:
         fd:1c:19:73:d8:3b:b7:51:a8:b9:5b:9a:7d:69:8d:72:76:f7:
         bd:1b:b4:3e:33:01:8c:9d:b5:34:65:0b:14:24:32:b7:74:28:
         5b:57:99:1e:22:55:7c:5f:78:46:95:e6:97:2e:8d:22:3d:f9:
         8f:73:f1:a4:24:b5:40:aa:14:a7:80:f5:77:82:5b:14:f1:3f:
         d0:b3:68:ed:58:9d:3d:58:d7:d2:2c:b7:92:7b:a7:ea:66:ae:
         85:c9:5d:be:e9:f7:f4:a6:b8:2f:5f:90:a5:af:50:2a:27:9c:
         d8:af:95:85:90:e5:bb:55:69:be:b1:f9:49:7a:01:8f:91:95:
         09:8c:54:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ84lzRGr5IEAP0xEPxk1xL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjYwNzA2MTgwMTAxWhcNMjYwNzA3MTgwMTAxWjAzMTEwLwYDVQQD
Eyg5YmQ1MDcxMzhhNzk5NGU1NjBkZWMyOTg3OWFhNGYwNzQ5N2ZlYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbszF3tAPWGf5EwR1sl1kaF4CyNv
pA/v2GUbpvI+ko+8YobejP6JUfL3FB8sQUG/NfdURg2yWNdZU83m8Y/PETDGrhzd
5Jwt9/611/sqfsaEO9LQa9ry3Fq0WyPlL5LX//G258vDRVVENrCEz86ToePkuEFx
YY695rKdaIE0hNxkhVnif+GKKiLVlvASM+7VTJMl6Kbqi4Ksx5AxNlKDxjLKEGRG
4rMImrkTMpooR8CgBw+zSow947qvLCmE8fnH9SsiuQ4zZQYN/P02mubaV0xKxajI
kBTJtu0W9Ezs5tEiIqJsWfyq99oT+J7ZQ+ks1DSdaHHdJG0+wfISTj50HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvVBxOKeZTlYN7CmHmqTwdJf+yRMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi409Shb
umVIdsPaSwPuLI1zPD43oXPw/eXFAX6KWcJiPfZx7Vgl8iR10+QR/xQzJZ5K59pY
Y7HovQ15Jm0jy769cJ0BFsJOGBIaibPuEx8ydPJAVwexEHJ9kgUtZYTxF10uUOYs
4+XwaSa090jbM7iuZRrkH6x0dCNIXhQV/RwZc9g7t1GouVuafWmNcnb3vRu0PjMB
jJ21NGULFCQyt3QoW1eZHiJVfF94RpXmly6NIj35j3PxpCS1QKoUp4D1d4JbFPE/
0LNo7VidPVjX0iy3knun6mauhcldvun39Ka4L1+Qpa9QKiec2K+VhZDlu1VpvrH5
SXoBj5GVCYxUXA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:14:12 2026 by rpki-client