Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          hQf5G4ZfwTZ2Sgep0vVVLtPBQlNrpq9heWmIkIBM1Dc=
Subject key identifier:   5B:19:B2:17:6F:51:DD:BE:7F:49:2F:69:89:57:19:E4:D4:F6:A1:08
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       01A06D270FAC322C2F747ED214CAA63E1771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0E39
Signing time:             Fri 04 Sep 2026 16:01:11 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:11 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:11 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
                          9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
                          11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: WGqPRNXdPvmFF8x8tdB9YWIu52aSFh/2CTetuNmp2KI=)
                          12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          20: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (hash: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=)
                          21: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
                          22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          23: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
                          24: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
                          28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
                          31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:0f:ac:32:2c:2f:74:7e:d2:14:ca:a6:3e:17:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Sep  4 16:01:11 2026 GMT
            Not After : Sep  5 16:01:11 2026 GMT
        Subject: CN=5b19b2176f51ddbe7f492f69895719e4d4f6a108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:f8:23:db:95:4f:c8:b6:a5:60:67:e9:f3:
                    fc:f4:33:a3:a5:90:41:3c:8c:17:12:02:1a:1a:dc:
                    e1:d4:92:8c:30:90:e9:b0:fb:6b:cb:c1:bc:73:5d:
                    16:b1:49:24:eb:9c:c3:54:b7:52:a8:3f:53:4c:d2:
                    02:26:88:86:64:7e:a5:11:55:7a:54:91:4e:71:a4:
                    cc:dd:a3:c3:d9:c4:44:27:ef:0b:b0:2f:42:57:32:
                    65:51:55:a3:0f:16:11:6c:0a:89:37:ce:96:06:24:
                    e9:a7:e5:f4:62:c0:09:ee:68:2e:8b:51:27:02:ad:
                    7e:41:0f:b4:f1:80:6c:d6:db:7e:9d:cd:10:7a:97:
                    8e:31:8d:39:ef:50:20:3f:50:b3:02:01:0e:9c:e7:
                    c9:fc:46:07:ed:be:06:b2:dd:e8:ca:d1:e0:94:92:
                    55:62:5b:54:ed:66:c0:61:8c:db:32:72:8d:62:17:
                    01:ef:84:31:55:85:ba:96:62:22:4c:3b:f1:64:75:
                    84:f0:81:9f:5c:83:ac:60:6f:cc:9b:1e:d5:42:ca:
                    80:44:a8:db:dc:fa:28:c3:3f:d7:fb:64:10:af:4c:
                    a0:db:de:7c:ec:20:f5:85:79:f5:63:63:13:9c:aa:
                    63:52:30:d9:a6:44:7f:3c:fa:35:ce:38:5c:3a:38:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:19:B2:17:6F:51:DD:BE:7F:49:2F:69:89:57:19:E4:D4:F6:A1:08
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:df:20:e7:a4:86:a0:39:7c:c4:b4:7d:e1:10:a9:06:18:
         f9:0b:a5:d7:c3:16:b6:b3:76:2d:a3:4c:8e:9b:90:6f:44:91:
         fc:bd:bb:35:68:c8:81:7b:c8:95:09:5e:f8:bd:68:54:42:93:
         cc:f3:75:76:ee:44:fe:eb:a1:01:0a:e0:6f:84:23:03:9c:33:
         f7:ec:48:fb:fe:46:15:37:84:23:ff:65:fa:94:68:7b:d5:7e:
         5e:4a:37:39:c9:ae:61:ae:8a:9d:00:4f:c8:5e:63:f3:ba:cd:
         7e:1f:2e:ee:4e:03:ca:18:b6:a2:c8:35:a0:0e:5e:c1:93:38:
         1b:39:15:81:a1:11:28:1c:f3:80:fe:93:95:36:1a:fd:01:e4:
         3b:49:1e:4b:13:09:4e:5c:81:c8:9c:28:6d:86:7c:bc:62:99:
         58:db:ef:06:ec:06:40:45:82:35:73:e5:8b:7c:b6:0e:4f:32:
         48:9d:82:b1:b8:86:41:89:7e:21:b4:82:1c:70:93:c0:6b:3a:
         79:8d:51:48:5b:d0:48:24:c5:a7:56:63:31:5b:cf:2b:3c:db:
         16:42:76:3d:f4:c7:15:34:df:b1:ca:7e:c7:80:c2:09:5e:bb:
         f9:63:28:81:f5:29:24:0c:9b:8e:b0:38:e8:db:c2:14:80:99:
         58:09:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:11 2026 by rpki-client