Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
File:                     m68_mAUHK2KmX7676P-cfz3Exkg.mft (raw, json)
Hash identifier:          vs/EP5SvGKxrEBTI0G9ARYZXsCjL9ucWUM5iQiTjP1c=
Subject key identifier:   13:2F:35:0D:16:DD:80:DB:7D:E3:5B:1A:C6:AC:44:4C:15:6A:78:4D
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Certificate issuer:       /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial:       019FA8998B40B1F08A847BDB2532AF59031A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:02 +0000
Files and hashes:         1: 2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa (hash: CEAXX5mqYY2Wkxusm8evjr7/BwzXhUq4xYYUlmXLYkM=)
                          2: 3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa (hash: zo9xHzueo8NovnOEW+G83mDr5PhnmcU3M85VuJGKIVI=)
                          3: 3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa (hash: ePkwL8jRxNgBjdyYJ+ctG2Zs6spWExZYEY3n7zyAbrg=)
                          4: 4a-6Myx88SNnwqAV6_kUrhah66s.roa (hash: DnJD3Lx7WxmbM8kO9UbPm4uaYEZJWyxQDtK9FM8fABE=)
                          5: 6SnIkEtZFVBLdSTOIU6tviuoiVk.roa (hash: 2JU8mQnQnUntfGgBvsw+hNifJXLV5MKemaOmSAhzUSo=)
                          6: 7c1lqx4Oouj7dqM97v-9_pwnkIU.roa (hash: sVtwOXZrWx6PYIkTITAB6OkiSzlpDEdd/j0bOXBcd60=)
                          7: 7wKdAo80Z_sEoW6sBfsot7QHbM8.roa (hash: hqc+EiLeY65TYKhJZ76+RFtBz2LudbeK6fkhWVIaR1M=)
                          8: CTfHnIrdvYpaDQLTnhtGR5sEQY0.roa (hash: TuOR66F4kl70Ko38yMpv93lGnxXYLojMbFEJoGKVCcw=)
                          9: Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa (hash: FY+vBarsIaJB5ftPCZVbsKi/8RotX5Ic5N5leCczObY=)
                          10: EqvqPCW5Ky65lZ54qBOyNwid5xw.roa (hash: 1c3iHkMEYFedczV+gaGVb+OMATiIDNixPdaJ8E952+Y=)
                          11: O1_wUijdkUnhfNNSqA2HmfU7NoM.roa (hash: YPe/MGGFEUUBlyFEL2bcnbcftehgD8So60aDYQncEEI=)
                          12: OgbMC02D93xqe5mUbyasmoVI--Y.roa (hash: i/lAE0j5qfOwcGtNVIq2E3RzauVqhDq9YLv6haynUsU=)
                          13: RUlKyAtrhzpzaxZt_jgXesjD4k4.roa (hash: 4mFrzzsV7AFlQNDOrzTu4PPsdM2Zh8RCpg0JXBKcvsg=)
                          14: WJj--uUsyJ2fD-tKkZGxI2CpudE.roa (hash: ziovVpwCj3diZ+dRt6j83E+wDrmoF//JhY0BGWJR1Rc=)
                          15: ZHmVRYMixuE63pM1yr6NYsj7c_o.roa (hash: ECWLwgwsUl1kRJa2elFpotrc13sMtMcg9jik4C7yvdw=)
                          16: hiFbE8V8__LP1zJRLXvGbY5MMhQ.roa (hash: eZW4rz6hDsgJwJ3tOUtDg5XbyYpQAcu4MEf+qCwnKR8=)
                          17: iPTiMKAJsFZ0jAfznmSFyRxC97k.roa (hash: avlWvJQKnzNmnXgb+h9GyKsIp+jYee6FGxe6zzpgoHI=)
                          18: m68_mAUHK2KmX7676P-cfz3Exkg.crl (hash: 6a+Qz7/stjauiAk7/cGJ/PYj7R4c6oHsYXtoHQmoy64=)
                          19: o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa (hash: fRZlzhSQMVg6bKsTXfriyM4kD+yF0gFm89zq2eDjTlA=)
                          20: rhUkaUS7wsZtel5WXM2aT6dYM6o.roa (hash: VSceswv5RCR9d0CwvEgA9fr7NsXHF8BveeOk7rkmGDA=)
                          21: sMp4PvvMOMfY9d5zvU7QU27V56A.roa (hash: jcGvWscyQTE+fFXfpX+ODKz1jq1sberOohhcSwiczMk=)
                          22: tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa (hash: 8MLETIprJtCC0X4OlEW6BIoF/6D5/21IB4fqK78H/sY=)
                          23: yLZra5J-Xep07UfsTDT7QREIQos.roa (hash: L3CD0+L3ANuoE6aRAW5Sq4p7rzQBXPSW45Qnm117lo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:8b:40:b1:f0:8a:84:7b:db:25:32:af:59:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
        Validity
            Not Before: Jul 28 12:01:02 2026 GMT
            Not After : Jul 29 12:01:02 2026 GMT
        Subject: CN=132f350d16dd80db7de35b1ac6ac444c156a784d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:d9:fa:f8:91:7d:3b:24:8a:23:1d:b6:fa:
                    9d:61:88:2f:54:97:43:08:64:4a:8b:3b:4c:98:44:
                    18:3c:6d:b9:57:29:be:2e:83:22:ff:6d:57:3d:fe:
                    cf:66:38:fb:e8:f2:04:4d:49:bf:8f:ae:b5:6e:a8:
                    17:a9:a3:50:d2:f0:34:a3:67:e3:7c:85:19:e4:21:
                    ef:09:82:89:e9:3f:1e:2c:21:b9:8f:a2:05:cf:f6:
                    9f:d4:2d:e1:c3:d2:e5:e4:ca:a1:58:d7:c2:af:d8:
                    a8:86:c4:12:b1:a4:a9:9a:e3:65:a2:09:1c:14:c6:
                    31:86:1f:3f:ab:12:8e:15:10:52:ad:87:3b:f6:0d:
                    78:52:ae:60:36:54:95:f7:cc:14:7f:f7:91:fa:81:
                    ca:27:19:78:c7:2a:a5:e3:0a:b9:2d:89:fa:52:37:
                    63:47:34:a5:47:76:47:8d:e0:7e:fa:6e:05:41:8a:
                    11:3f:b0:14:14:23:0c:fc:4c:9e:0a:bd:0c:dd:d6:
                    64:5c:23:0f:6b:16:f1:23:f5:86:74:34:6a:14:95:
                    81:af:1a:31:81:29:9f:ed:58:c1:3b:75:17:e5:b0:
                    42:e8:4b:63:06:2e:0c:9a:85:76:41:2a:58:32:50:
                    8a:29:da:91:4b:7f:1f:f4:c0:1c:8f:74:57:f6:5e:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:35:0D:16:DD:80:DB:7D:E3:5B:1A:C6:AC:44:4C:15:6A:78:4D
            X509v3 Authority Key Identifier:
                keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:86:6e:5a:6b:0c:21:cf:62:0f:e9:30:21:bd:3f:2f:0f:54:
         5c:e7:1d:83:8b:88:21:1f:1b:eb:37:24:a7:49:fe:79:e2:eb:
         3f:8c:fb:f0:b3:79:2d:cf:01:aa:60:09:8e:61:ac:26:24:68:
         97:ba:ce:5d:50:b1:d9:8d:e8:88:b8:a8:ca:2a:30:99:fb:d5:
         5a:73:39:a2:f8:26:d6:67:cf:69:ed:8c:16:8a:65:c9:a6:91:
         80:05:b2:a3:70:e5:35:14:7c:6f:0c:3a:78:c8:6e:12:3f:63:
         b5:1d:f6:02:92:0c:14:5d:1b:cd:23:8e:93:fd:9c:6a:49:4d:
         b6:ea:16:a7:82:9f:83:19:e1:15:61:5c:be:02:8e:07:2d:00:
         ab:8e:65:1c:96:ec:8a:0e:d0:cf:6f:7f:ae:37:8e:25:61:bc:
         b8:85:07:6a:29:9e:7b:24:5a:62:79:29:4f:56:42:e9:82:bf:
         bb:51:0d:53:23:41:90:cf:65:01:94:bf:c3:49:d6:c7:14:51:
         f7:03:28:56:dd:6b:45:72:db:a9:1e:9e:b9:76:e5:c2:12:d5:
         83:b8:cb:18:b1:99:8b:79:03:3e:21:55:dd:ab:03:3f:12:49:
         98:3d:8c:7c:05:bf:3b:1a:4b:40:be:de:b3:e3:d6:7e:d2:fc:
         00:e8:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:25 2026 by rpki-client