Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
File:                     m68_mAUHK2KmX7676P-cfz3Exkg.mft (raw, json)
Hash identifier:          khK0epYfGI/eISo5mhazRg395dCvELz2Yqxp69Rcc7U=
Subject key identifier:   8E:AC:FD:06:62:EB:AB:BB:A4:D3:22:A7:F2:8C:F0:7F:65:0D:5F:25
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Certificate issuer:       /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial:       01A0C28E44A1881B17B8E2FBDC57C1478795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
Manifest number:          DE
Signing time:             Mon 21 Sep 2026 06:01:38 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:38 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:38 +0000
Files and hashes:         1: 2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa (hash: CEAXX5mqYY2Wkxusm8evjr7/BwzXhUq4xYYUlmXLYkM=)
                          2: 3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa (hash: zo9xHzueo8NovnOEW+G83mDr5PhnmcU3M85VuJGKIVI=)
                          3: 3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa (hash: ePkwL8jRxNgBjdyYJ+ctG2Zs6spWExZYEY3n7zyAbrg=)
                          4: 4a-6Myx88SNnwqAV6_kUrhah66s.roa (hash: DnJD3Lx7WxmbM8kO9UbPm4uaYEZJWyxQDtK9FM8fABE=)
                          5: 6SnIkEtZFVBLdSTOIU6tviuoiVk.roa (hash: 2JU8mQnQnUntfGgBvsw+hNifJXLV5MKemaOmSAhzUSo=)
                          6: 7c1lqx4Oouj7dqM97v-9_pwnkIU.roa (hash: sVtwOXZrWx6PYIkTITAB6OkiSzlpDEdd/j0bOXBcd60=)
                          7: 7wKdAo80Z_sEoW6sBfsot7QHbM8.roa (hash: hqc+EiLeY65TYKhJZ76+RFtBz2LudbeK6fkhWVIaR1M=)
                          8: CTfHnIrdvYpaDQLTnhtGR5sEQY0.roa (hash: TuOR66F4kl70Ko38yMpv93lGnxXYLojMbFEJoGKVCcw=)
                          9: Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa (hash: FY+vBarsIaJB5ftPCZVbsKi/8RotX5Ic5N5leCczObY=)
                          10: EqvqPCW5Ky65lZ54qBOyNwid5xw.roa (hash: 1c3iHkMEYFedczV+gaGVb+OMATiIDNixPdaJ8E952+Y=)
                          11: O1_wUijdkUnhfNNSqA2HmfU7NoM.roa (hash: YPe/MGGFEUUBlyFEL2bcnbcftehgD8So60aDYQncEEI=)
                          12: OgbMC02D93xqe5mUbyasmoVI--Y.roa (hash: i/lAE0j5qfOwcGtNVIq2E3RzauVqhDq9YLv6haynUsU=)
                          13: RUlKyAtrhzpzaxZt_jgXesjD4k4.roa (hash: 4mFrzzsV7AFlQNDOrzTu4PPsdM2Zh8RCpg0JXBKcvsg=)
                          14: WJj--uUsyJ2fD-tKkZGxI2CpudE.roa (hash: ziovVpwCj3diZ+dRt6j83E+wDrmoF//JhY0BGWJR1Rc=)
                          15: ZHmVRYMixuE63pM1yr6NYsj7c_o.roa (hash: ECWLwgwsUl1kRJa2elFpotrc13sMtMcg9jik4C7yvdw=)
                          16: hiFbE8V8__LP1zJRLXvGbY5MMhQ.roa (hash: eZW4rz6hDsgJwJ3tOUtDg5XbyYpQAcu4MEf+qCwnKR8=)
                          17: iPTiMKAJsFZ0jAfznmSFyRxC97k.roa (hash: avlWvJQKnzNmnXgb+h9GyKsIp+jYee6FGxe6zzpgoHI=)
                          18: m68_mAUHK2KmX7676P-cfz3Exkg.crl (hash: hZWikl0SjLClBZu3DOP2UU6tJTOKIqySItiu65A1UcU=)
                          19: o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa (hash: fRZlzhSQMVg6bKsTXfriyM4kD+yF0gFm89zq2eDjTlA=)
                          20: rhUkaUS7wsZtel5WXM2aT6dYM6o.roa (hash: VSceswv5RCR9d0CwvEgA9fr7NsXHF8BveeOk7rkmGDA=)
                          21: sMp4PvvMOMfY9d5zvU7QU27V56A.roa (hash: jcGvWscyQTE+fFXfpX+ODKz1jq1sberOohhcSwiczMk=)
                          22: tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa (hash: 8MLETIprJtCC0X4OlEW6BIoF/6D5/21IB4fqK78H/sY=)
                          23: yLZra5J-Xep07UfsTDT7QREIQos.roa (hash: L3CD0+L3ANuoE6aRAW5Sq4p7rzQBXPSW45Qnm117lo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8e:44:a1:88:1b:17:b8:e2:fb:dc:57:c1:47:87:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
        Validity
            Not Before: Sep 21 06:01:38 2026 GMT
            Not After : Sep 22 06:01:38 2026 GMT
        Subject: CN=8eacfd0662ebabbba4d322a7f28cf07f650d5f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:6a:df:c9:24:3f:0f:f0:ea:2e:c6:07:14:
                    40:25:b1:88:66:bd:eb:37:ff:7f:b8:33:db:56:6e:
                    7a:ff:57:bf:0e:10:7e:5a:f0:05:d2:3c:18:f7:f8:
                    25:ca:91:c2:10:66:d8:3d:d1:9a:04:c7:6d:e9:36:
                    a8:7e:50:13:8d:dc:85:c8:dc:a7:2d:1a:fb:ad:2f:
                    a6:e5:5e:8d:89:fe:b0:36:9a:2d:08:a8:0c:f5:20:
                    53:c7:d3:6c:94:2f:10:19:3d:7b:14:4d:02:e8:56:
                    3b:6d:1e:23:9c:2c:af:8b:65:db:33:f6:20:59:96:
                    f7:42:14:31:95:8d:e7:db:d4:3e:5f:ce:31:0c:8e:
                    e4:f9:a1:46:74:4d:9d:61:1a:72:b8:1d:ac:84:7c:
                    c7:d6:5b:19:86:87:fd:63:55:45:c4:64:71:91:dd:
                    77:73:fc:6d:14:0a:08:88:cd:a9:d5:36:dd:43:ea:
                    1f:cd:aa:f8:d3:99:da:b7:9b:8b:2a:68:f0:40:08:
                    6c:fa:26:d7:46:5d:e6:7e:1d:6b:de:2b:b9:bf:37:
                    80:e9:d5:bc:99:6f:bc:4e:8e:06:6e:f0:6c:23:32:
                    ca:96:49:1c:ae:37:90:f7:82:e8:b0:b2:3a:66:2b:
                    56:7e:78:00:1b:10:f8:5f:41:4e:63:dd:44:d5:64:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:FD:06:62:EB:AB:BB:A4:D3:22:A7:F2:8C:F0:7F:65:0D:5F:25
            X509v3 Authority Key Identifier:
                keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:d3:02:e2:d7:97:90:f9:0e:eb:ed:7d:72:91:be:3b:b2:
         1a:41:d2:37:39:4b:4f:50:5b:4f:43:72:57:3f:5e:47:88:c7:
         41:66:3d:d3:40:d4:c7:9e:64:65:33:82:b1:65:23:f8:15:ec:
         38:e9:9d:f4:6d:36:37:ee:25:a9:fb:de:3d:43:c7:49:4f:d9:
         cf:32:80:a1:4c:9a:07:65:39:1b:72:41:d7:bf:c2:f7:e6:6e:
         55:42:28:36:86:24:14:cb:ad:b5:c0:d3:6a:cf:a1:4d:70:52:
         af:65:69:92:fc:99:5c:2a:1b:42:03:db:a4:1d:a8:b6:b7:f6:
         37:89:34:93:7d:8f:c7:c4:73:69:04:be:8c:af:ad:58:5e:87:
         c0:06:6c:f8:93:fe:b9:22:cf:67:f7:af:51:a6:05:ee:ba:84:
         2e:1e:d3:04:36:e1:1f:e9:6f:28:ac:6b:53:26:f8:fa:3f:1e:
         ff:2b:ca:60:82:50:b7:46:8a:ed:d9:70:b7:e4:b5:6f:4d:af:
         71:d1:16:04:61:6a:a0:6b:83:41:62:91:f1:8f:c5:cc:c2:7b:
         c2:29:c2:d3:a7:e3:d4:9e:dc:a7:6e:cd:c8:5f:da:e3:5e:4c:
         14:80:41:34:b8:67:88:39:b3:56:96:f4:48:51:f6:30:5e:30:
         59:8d:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:20:14 2026 by rpki-client