Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          fC5eRx27zrKysyplSZ1nYxfPQARuOjDsgPst7KxSHSk=
Subject key identifier:   1D:8F:F9:46:56:67:B0:CF:72:6E:FD:FD:C1:40:D3:57:1B:DE:16:D6
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019826A47A47CB875109E94B16A38579125E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          09BA
Signing time:             Sun 20 Jul 2025 07:02:49 +0000
Manifest this update:     Sun 20 Jul 2025 07:02:49 +0000
Manifest next update:     Mon 21 Jul 2025 07:02:49 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: 7qa40nir5wFq2isGcTz2sDzsh0E.roa (hash: P1yq7a1eR7Cp2asOxbQ/DVqg+NZ3IgYJdW9DNRFrZbc=)
                          9: CIRls3stTp9BOjHce35suioz25Y.crl (hash: UWtQx97gIcA43zPgn2t0QLQkMIc3UUd/92vE6C9CkBY=)
                          10: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          11: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=)
                          12: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=)
                          13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          16: JHyoQGfQfm2oIA6TznoPsdfAhVw.roa (hash: 6hdBLTpJKu+a91LFvhQLYo+qjB5p0SyUWysXPdpa6kE=)
                          17: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          18: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=)
                          19: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          20: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          21: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=)
                          22: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          23: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          24: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          25: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          26: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          27: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          28: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 06:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:a4:7a:47:cb:87:51:09:e9:4b:16:a3:85:79:12:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jul 20 07:02:49 2025 GMT
            Not After : Jul 21 07:02:49 2025 GMT
        Subject: CN=1d8ff9465667b0cf726efdfdc140d3571bde16d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:50:f5:2f:fa:0c:8e:13:0f:42:86:72:19:
                    3e:d8:c0:ef:11:29:f6:3d:c5:b1:26:d0:d1:99:0e:
                    fa:75:9d:06:8e:0d:89:cc:8e:0f:a6:f9:80:ed:5b:
                    e2:09:f8:18:ba:26:a4:82:11:7b:2f:34:6d:d6:a3:
                    eb:3a:70:51:8c:6d:c5:52:0a:f4:55:a1:71:b2:18:
                    e3:81:30:72:fa:a9:72:6d:99:82:a9:7c:f6:c9:61:
                    25:3f:8a:03:3f:fa:c6:76:e2:03:de:44:fa:ea:b7:
                    f6:72:b9:9b:14:ce:5c:58:04:bf:da:af:11:13:93:
                    47:70:3f:27:1a:2a:1a:98:fc:d8:0f:d8:cb:b5:e8:
                    d9:3b:00:5d:b0:2a:52:21:e6:93:d3:bc:07:3f:2c:
                    48:ff:a5:da:ea:c8:36:8e:6c:62:13:e0:85:ad:f4:
                    36:ca:3d:00:b4:94:5f:57:09:f9:43:ca:6a:9f:05:
                    41:ea:9a:38:6d:3c:8a:74:39:8a:b0:ed:5c:be:cc:
                    8b:28:d1:11:61:b2:bf:86:0a:0c:0e:a4:bf:29:6e:
                    43:24:f5:ca:3b:7f:23:a7:07:99:f0:ea:ec:09:ee:
                    ec:17:b1:e5:fd:b8:12:a9:30:44:64:a0:7e:84:f5:
                    69:c5:20:2b:e8:38:ca:94:9a:64:fc:77:60:56:31:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8F:F9:46:56:67:B0:CF:72:6E:FD:FD:C1:40:D3:57:1B:DE:16:D6
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:12:17:a5:e7:1a:34:35:4a:bf:15:e0:91:ac:fe:08:5d:
         ed:21:e2:f5:02:e4:18:48:54:b8:fe:d6:5f:6f:7f:d0:f7:5f:
         23:85:20:66:80:36:c7:ad:4e:a4:6c:46:51:62:6a:14:7a:58:
         4e:34:e3:ff:e9:1d:e2:30:ce:61:d3:da:67:72:e0:2f:dc:8f:
         af:3f:16:b7:27:85:2d:f2:4d:55:88:77:25:d8:33:30:ce:e3:
         c8:6d:85:7a:67:63:05:55:65:3a:96:b4:ae:ee:4f:26:d3:05:
         80:c0:4d:aa:dc:b2:d0:05:8d:41:2f:21:f1:e2:c3:5e:cd:f6:
         63:53:05:b4:aa:d3:07:85:35:94:74:08:bf:9b:bb:5e:39:0c:
         b9:fc:f3:f9:f2:54:2c:aa:c0:60:d0:64:b6:42:1b:70:12:d4:
         40:0d:ff:74:ca:b3:e9:d6:3f:48:16:50:35:d7:08:c6:0c:77:
         86:3b:ff:cd:66:4c:de:58:0e:1b:4e:e0:82:cc:5e:cf:a0:2b:
         bb:8e:04:cc:0a:fb:32:42:16:a2:68:81:8e:30:3d:fe:fb:a8:
         bf:af:f1:10:3c:85:0f:7d:31:02:55:c8:2b:5a:07:68:30:4f:
         81:37:8a:ef:6e:c0:65:64:72:b8:f2:91:30:4c:b5:37:cd:ab:
         08:1d:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:10:02 2025 by rpki-client