Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
File:                     m68_mAUHK2KmX7676P-cfz3Exkg.mft (raw, json)
Hash identifier:          lFMU+zRqNzQ2KJXE+JKy26oL91OrUZ2l6bU2vmGmz7U=
Subject key identifier:   7A:2C:BF:EE:E0:01:11:6D:9A:80:BE:97:E5:62:74:5E:0F:17:1E:9E
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Certificate issuer:       /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial:       019F3A859DB0BFA069684722E82AC18224B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
Manifest number:          13
Signing time:             Tue 07 Jul 2026 03:01:02 +0000
Manifest this update:     Tue 07 Jul 2026 03:01:02 +0000
Manifest next update:     Wed 08 Jul 2026 03:01:02 +0000
Files and hashes:         1: 2ZKwqcQ0sj6ZB2RKV_gJjH2V5RY.roa (hash: CEAXX5mqYY2Wkxusm8evjr7/BwzXhUq4xYYUlmXLYkM=)
                          2: 3Mq7IrsqKCuZPz6di5KH_L8QoLY.roa (hash: zo9xHzueo8NovnOEW+G83mDr5PhnmcU3M85VuJGKIVI=)
                          3: 3W9GvJqlCnV-NKLJ9rVAOHtCNrU.roa (hash: ePkwL8jRxNgBjdyYJ+ctG2Zs6spWExZYEY3n7zyAbrg=)
                          4: 4a-6Myx88SNnwqAV6_kUrhah66s.roa (hash: DnJD3Lx7WxmbM8kO9UbPm4uaYEZJWyxQDtK9FM8fABE=)
                          5: 6SnIkEtZFVBLdSTOIU6tviuoiVk.roa (hash: 2JU8mQnQnUntfGgBvsw+hNifJXLV5MKemaOmSAhzUSo=)
                          6: 7c1lqx4Oouj7dqM97v-9_pwnkIU.roa (hash: sVtwOXZrWx6PYIkTITAB6OkiSzlpDEdd/j0bOXBcd60=)
                          7: 7wKdAo80Z_sEoW6sBfsot7QHbM8.roa (hash: hqc+EiLeY65TYKhJZ76+RFtBz2LudbeK6fkhWVIaR1M=)
                          8: CTfHnIrdvYpaDQLTnhtGR5sEQY0.roa (hash: TuOR66F4kl70Ko38yMpv93lGnxXYLojMbFEJoGKVCcw=)
                          9: Cs3SVjJJlC0cXRmjy7E0xkCrXpA.roa (hash: FY+vBarsIaJB5ftPCZVbsKi/8RotX5Ic5N5leCczObY=)
                          10: EqvqPCW5Ky65lZ54qBOyNwid5xw.roa (hash: 1c3iHkMEYFedczV+gaGVb+OMATiIDNixPdaJ8E952+Y=)
                          11: O1_wUijdkUnhfNNSqA2HmfU7NoM.roa (hash: YPe/MGGFEUUBlyFEL2bcnbcftehgD8So60aDYQncEEI=)
                          12: OgbMC02D93xqe5mUbyasmoVI--Y.roa (hash: i/lAE0j5qfOwcGtNVIq2E3RzauVqhDq9YLv6haynUsU=)
                          13: RUlKyAtrhzpzaxZt_jgXesjD4k4.roa (hash: 4mFrzzsV7AFlQNDOrzTu4PPsdM2Zh8RCpg0JXBKcvsg=)
                          14: WJj--uUsyJ2fD-tKkZGxI2CpudE.roa (hash: ziovVpwCj3diZ+dRt6j83E+wDrmoF//JhY0BGWJR1Rc=)
                          15: ZHmVRYMixuE63pM1yr6NYsj7c_o.roa (hash: ECWLwgwsUl1kRJa2elFpotrc13sMtMcg9jik4C7yvdw=)
                          16: hiFbE8V8__LP1zJRLXvGbY5MMhQ.roa (hash: eZW4rz6hDsgJwJ3tOUtDg5XbyYpQAcu4MEf+qCwnKR8=)
                          17: iPTiMKAJsFZ0jAfznmSFyRxC97k.roa (hash: avlWvJQKnzNmnXgb+h9GyKsIp+jYee6FGxe6zzpgoHI=)
                          18: m68_mAUHK2KmX7676P-cfz3Exkg.crl (hash: FqeV+FI+Fnbvg29aPQ33riNohUXF45dNnhrXXW+VLvY=)
                          19: o5zuyrOrfmfx5tMxbbzD2t6OFTc.roa (hash: fRZlzhSQMVg6bKsTXfriyM4kD+yF0gFm89zq2eDjTlA=)
                          20: rhUkaUS7wsZtel5WXM2aT6dYM6o.roa (hash: VSceswv5RCR9d0CwvEgA9fr7NsXHF8BveeOk7rkmGDA=)
                          21: sMp4PvvMOMfY9d5zvU7QU27V56A.roa (hash: jcGvWscyQTE+fFXfpX+ODKz1jq1sberOohhcSwiczMk=)
                          22: tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa (hash: 8MLETIprJtCC0X4OlEW6BIoF/6D5/21IB4fqK78H/sY=)
                          23: yLZra5J-Xep07UfsTDT7QREIQos.roa (hash: L3CD0+L3ANuoE6aRAW5Sq4p7rzQBXPSW45Qnm117lo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:85:9d:b0:bf:a0:69:68:47:22:e8:2a:c1:82:24:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
        Validity
            Not Before: Jul  7 03:01:02 2026 GMT
            Not After : Jul  8 03:01:02 2026 GMT
        Subject: CN=7a2cbfeee001116d9a80be97e562745e0f171e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:16:78:f4:a9:67:be:74:d8:ac:c2:8f:ef:
                    f3:23:73:ba:bf:68:91:e9:64:22:d8:ab:d0:b1:17:
                    34:a3:c6:86:bb:de:f4:f9:05:0d:95:bd:4b:8c:3c:
                    91:ae:b4:fa:21:a5:b6:11:3e:ff:7f:02:60:ab:ac:
                    cd:7b:6e:5e:81:23:e7:ce:b5:c4:ac:b7:9f:23:b4:
                    88:d9:0a:f5:02:88:20:10:eb:66:3c:bc:17:28:e1:
                    8f:7f:a3:06:c2:09:6c:a1:c2:fc:95:30:0a:b5:67:
                    ed:cb:75:2f:3c:58:53:7b:5e:18:0f:09:a5:7c:1d:
                    11:cd:ff:45:59:84:d5:fe:33:33:7d:55:2e:f0:8d:
                    2f:f7:3a:07:fe:1d:bd:d2:5e:72:a9:e4:4c:00:7f:
                    ec:f0:22:aa:6b:e5:14:7d:69:fc:0d:50:af:b6:38:
                    52:6c:f9:a5:59:4b:09:ae:0a:40:0f:2c:28:c7:4e:
                    3d:17:00:e2:e6:be:6e:57:70:07:d9:ac:05:90:02:
                    e8:75:5f:f8:e0:8b:91:02:5b:73:50:84:78:4c:1d:
                    39:74:11:06:ca:e3:ed:db:df:15:d1:da:90:86:11:
                    12:f8:93:3a:b5:19:e5:cc:db:a4:7b:8f:55:09:b5:
                    c0:53:cc:3f:26:10:4c:60:a1:b8:a2:a0:dc:7f:0d:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2C:BF:EE:E0:01:11:6D:9A:80:BE:97:E5:62:74:5E:0F:17:1E:9E
            X509v3 Authority Key Identifier:
                keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:d7:66:d5:b4:de:2a:67:ca:c7:b0:16:d0:52:1b:e3:83:
         0b:8e:8f:8a:ce:ff:ce:6a:7e:18:07:4c:3a:0e:41:ea:5e:1c:
         67:70:d1:c9:f0:62:2a:f4:09:76:ee:ee:03:06:2e:6a:ce:5f:
         ed:59:77:ee:51:d0:24:53:3c:07:2a:74:5b:d8:66:18:6b:fa:
         5a:55:aa:77:f5:c4:93:b4:15:8a:73:59:c1:a6:33:94:91:2b:
         11:59:11:6e:47:4a:71:f2:23:20:84:24:eb:0c:da:dd:e3:64:
         f2:7f:a3:9a:50:c8:60:28:25:8a:4b:90:25:b2:65:5c:f5:04:
         23:57:38:71:ce:16:69:8b:85:18:db:2c:e4:61:8b:f2:11:05:
         e4:3e:19:93:f4:aa:cb:55:ac:40:c2:9e:40:d4:f3:76:b4:79:
         3e:52:d8:ba:25:34:a0:48:bc:c5:63:4a:b5:de:bf:fa:38:ac:
         95:0c:87:01:1e:67:33:01:12:e5:fb:3c:10:8b:4a:ab:03:8e:
         c3:6f:af:43:57:e8:30:2e:32:2c:ea:d9:83:90:85:e3:fc:87:
         7d:af:81:5f:b0:d1:a7:58:22:de:2a:f3:c7:c2:ae:dd:20:a2:
         b0:43:65:19:c5:20:11:51:bc:ab:a2:9d:2e:07:b1:d2:84:2a:
         02:ac:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 07:48:22 2026 by rpki-client