Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
File:                     m68_mAUHK2KmX7676P-cfz3Exkg.mft (raw, json)
Hash identifier:          wDyXqtf8oEvsnON4mEG3yvraNXGihrahSDt8TQobAro=
Subject key identifier:   32:01:82:22:22:7D:A3:BC:78:95:EE:54:EC:39:7D:FF:41:59:F9:AF
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Certificate issuer:       /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial:       019F916CA2EE101EBF3D9901A86D350B5370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:43 +0000
Files and hashes:         1: 2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa (hash: CEAXX5mqYY2Wkxusm8evjr7/BwzXhUq4xYYUlmXLYkM=)
                          2: 3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa (hash: zo9xHzueo8NovnOEW+G83mDr5PhnmcU3M85VuJGKIVI=)
                          3: 3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa (hash: ePkwL8jRxNgBjdyYJ+ctG2Zs6spWExZYEY3n7zyAbrg=)
                          4: 4a-6Myx88SNnwqAV6_kUrhah66s.roa (hash: DnJD3Lx7WxmbM8kO9UbPm4uaYEZJWyxQDtK9FM8fABE=)
                          5: 6SnIkEtZFVBLdSTOIU6tviuoiVk.roa (hash: 2JU8mQnQnUntfGgBvsw+hNifJXLV5MKemaOmSAhzUSo=)
                          6: 7c1lqx4Oouj7dqM97v-9_pwnkIU.roa (hash: sVtwOXZrWx6PYIkTITAB6OkiSzlpDEdd/j0bOXBcd60=)
                          7: 7wKdAo80Z_sEoW6sBfsot7QHbM8.roa (hash: hqc+EiLeY65TYKhJZ76+RFtBz2LudbeK6fkhWVIaR1M=)
                          8: CTfHnIrdvYpaDQLTnhtGR5sEQY0.roa (hash: TuOR66F4kl70Ko38yMpv93lGnxXYLojMbFEJoGKVCcw=)
                          9: Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa (hash: FY+vBarsIaJB5ftPCZVbsKi/8RotX5Ic5N5leCczObY=)
                          10: EqvqPCW5Ky65lZ54qBOyNwid5xw.roa (hash: 1c3iHkMEYFedczV+gaGVb+OMATiIDNixPdaJ8E952+Y=)
                          11: O1_wUijdkUnhfNNSqA2HmfU7NoM.roa (hash: YPe/MGGFEUUBlyFEL2bcnbcftehgD8So60aDYQncEEI=)
                          12: OgbMC02D93xqe5mUbyasmoVI--Y.roa (hash: i/lAE0j5qfOwcGtNVIq2E3RzauVqhDq9YLv6haynUsU=)
                          13: RUlKyAtrhzpzaxZt_jgXesjD4k4.roa (hash: 4mFrzzsV7AFlQNDOrzTu4PPsdM2Zh8RCpg0JXBKcvsg=)
                          14: WJj--uUsyJ2fD-tKkZGxI2CpudE.roa (hash: ziovVpwCj3diZ+dRt6j83E+wDrmoF//JhY0BGWJR1Rc=)
                          15: ZHmVRYMixuE63pM1yr6NYsj7c_o.roa (hash: ECWLwgwsUl1kRJa2elFpotrc13sMtMcg9jik4C7yvdw=)
                          16: hiFbE8V8__LP1zJRLXvGbY5MMhQ.roa (hash: eZW4rz6hDsgJwJ3tOUtDg5XbyYpQAcu4MEf+qCwnKR8=)
                          17: iPTiMKAJsFZ0jAfznmSFyRxC97k.roa (hash: avlWvJQKnzNmnXgb+h9GyKsIp+jYee6FGxe6zzpgoHI=)
                          18: m68_mAUHK2KmX7676P-cfz3Exkg.crl (hash: XYH8ZFMMqDK1/rrMD2u9kuHlkQJHl+uLmwxinv2Wk3M=)
                          19: o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa (hash: fRZlzhSQMVg6bKsTXfriyM4kD+yF0gFm89zq2eDjTlA=)
                          20: rhUkaUS7wsZtel5WXM2aT6dYM6o.roa (hash: VSceswv5RCR9d0CwvEgA9fr7NsXHF8BveeOk7rkmGDA=)
                          21: sMp4PvvMOMfY9d5zvU7QU27V56A.roa (hash: jcGvWscyQTE+fFXfpX+ODKz1jq1sberOohhcSwiczMk=)
                          22: tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa (hash: 8MLETIprJtCC0X4OlEW6BIoF/6D5/21IB4fqK78H/sY=)
                          23: yLZra5J-Xep07UfsTDT7QREIQos.roa (hash: L3CD0+L3ANuoE6aRAW5Sq4p7rzQBXPSW45Qnm117lo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:a2:ee:10:1e:bf:3d:99:01:a8:6d:35:0b:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
        Validity
            Not Before: Jul 24 00:00:43 2026 GMT
            Not After : Jul 25 00:00:43 2026 GMT
        Subject: CN=32018222227da3bc7895ee54ec397dff4159f9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:67:0e:ac:88:28:30:a2:a5:03:19:0f:0f:
                    3f:35:4a:38:26:5b:d0:b3:a5:52:8e:27:26:0f:a9:
                    36:4c:88:97:61:18:44:8e:da:1e:99:17:f8:27:a4:
                    00:fc:ed:9d:99:22:4a:e6:51:4b:86:0c:1c:65:ab:
                    eb:dd:3f:40:f1:76:86:4b:d1:f3:43:e6:2e:17:dd:
                    f5:bd:84:7e:51:46:f7:bf:8b:4f:ca:89:84:97:cd:
                    6b:e2:f2:b9:5d:91:7d:42:bd:f6:e3:8d:f6:3b:f3:
                    fe:ea:4a:ab:3f:74:77:f4:c1:1a:8a:56:dd:40:99:
                    f2:6e:db:a2:0e:fa:bd:b5:5b:2f:61:14:64:e6:8f:
                    81:6a:a1:5d:aa:c5:c6:17:67:4e:cc:6f:33:1f:65:
                    c0:06:1f:4f:07:5c:8f:33:00:46:29:34:89:3d:59:
                    8e:46:5a:9e:9e:15:a7:81:e7:1f:47:2f:d1:2a:b3:
                    a7:5b:4a:49:2f:f0:6f:b5:40:6b:8c:af:d9:2f:8d:
                    69:dd:58:95:ba:eb:33:fb:3b:87:76:9b:11:50:9c:
                    98:fb:07:09:57:67:36:09:44:79:e2:9e:20:13:6f:
                    1c:94:5f:3d:d7:03:85:ac:b2:e5:de:5e:77:21:ce:
                    f1:4a:0c:53:d4:c0:bc:87:f6:5c:e4:25:cc:57:ef:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:01:82:22:22:7D:A3:BC:78:95:EE:54:EC:39:7D:FF:41:59:F9:AF
            X509v3 Authority Key Identifier:
                keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:42:46:c5:91:cc:42:2a:54:57:29:f0:24:52:30:e8:3e:
         7f:c8:91:be:51:1a:8e:9f:67:ba:88:37:21:de:15:1d:37:4a:
         40:23:60:50:99:51:7a:05:d7:46:2e:74:75:9d:f5:f5:b8:2e:
         87:38:0b:bf:b0:fe:df:4a:26:49:49:e6:06:b5:ab:0d:8a:4e:
         3c:1d:a8:26:e1:df:a3:43:03:8d:4b:bc:1e:d9:fb:fb:d5:3e:
         7b:48:41:8d:1e:9f:0d:2a:6e:d1:2c:fe:c9:87:55:be:17:a9:
         73:ce:1c:e0:88:6c:1a:a9:7f:25:cb:d2:15:11:68:4b:51:ff:
         cf:10:0f:61:38:9a:72:aa:cb:69:d0:d3:46:5c:40:12:79:fe:
         bd:ac:9c:20:8b:b1:8d:76:4c:15:8e:c3:86:67:bc:14:ed:e3:
         da:62:e4:51:59:25:48:12:8b:2b:b1:ce:53:af:f1:3a:7a:91:
         15:95:43:69:14:0c:ed:ca:41:89:8f:97:6d:35:04:c6:a6:69:
         29:b0:8b:3e:54:a4:16:f6:48:fd:3a:39:95:a6:da:e6:e9:93:
         55:31:aa:35:fb:83:48:2a:ef:c1:20:94:43:b4:bf:9f:7f:b1:
         98:81:3b:1e:79:a5:05:e5:95:78:86:ad:b3:92:25:5e:aa:83:
         86:a6:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:16 2026 by rpki-client