Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          qSj7MNsYKr4zG/Ec3cwQRljUgV8pe8lqFtM+fP4TyLQ=
Subject key identifier:   78:DB:A5:92:9D:AD:9F:7E:22:56:69:6D:21:14:3D:D2:5E:D8:2C:86
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019F837A4DD6A43EF813AE68F73D48FAB95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0DC0
Signing time:             Tue 21 Jul 2026 07:00:58 +0000
Manifest this update:     Tue 21 Jul 2026 07:00:58 +0000
Manifest next update:     Wed 22 Jul 2026 07:00:58 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
                          9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
                          11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: BO1lnp3TlUi4rQ1WDXsfL5VT0dmcltbqw91BEvFap+g=)
                          12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          20: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (hash: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=)
                          21: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
                          22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          23: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
                          24: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
                          28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
                          31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:7a:4d:d6:a4:3e:f8:13:ae:68:f7:3d:48:fa:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jul 21 07:00:58 2026 GMT
            Not After : Jul 22 07:00:58 2026 GMT
        Subject: CN=78dba5929dad9f7e2256696d21143dd25ed82c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:33:2e:89:c4:49:ed:f4:b1:91:e6:b7:34:
                    2b:a4:5a:00:0f:65:87:32:79:4e:7a:db:41:81:e4:
                    02:13:d0:46:8f:83:55:61:d0:ad:82:e2:a1:82:c6:
                    db:66:85:ac:df:89:e7:c4:b1:7a:5d:dd:f6:02:19:
                    67:cc:27:88:5e:eb:b6:2a:2f:b5:7b:14:5c:f4:42:
                    1c:a2:16:b6:56:05:32:bc:fb:8e:ce:3f:7c:30:ac:
                    7f:5f:20:40:7f:d3:a9:e8:95:e3:d6:8c:2b:fd:7f:
                    7b:82:d3:d2:dd:cd:d0:d3:6e:d8:03:11:21:f3:51:
                    40:dd:7c:4c:bf:0a:a2:e2:14:fb:72:d9:0c:ad:c4:
                    a3:ac:63:bf:9e:d9:db:dd:fc:9c:98:a6:27:85:61:
                    03:d0:9e:1f:e1:35:31:43:76:fd:8f:04:c1:42:22:
                    a0:70:23:51:35:35:b3:00:a9:b9:4f:e5:55:39:d2:
                    72:46:8f:95:88:99:8c:de:8f:4f:fc:ce:5c:18:30:
                    7f:cc:70:6e:07:62:fb:cc:8b:34:e8:8f:a9:6c:40:
                    ab:59:7a:70:d9:3e:43:29:02:2b:c1:6e:17:f3:e8:
                    1a:b6:54:40:44:98:a5:13:23:6d:58:ab:96:fa:df:
                    04:1b:3b:4a:25:08:d8:18:7b:1a:a9:9a:d5:67:fd:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DB:A5:92:9D:AD:9F:7E:22:56:69:6D:21:14:3D:D2:5E:D8:2C:86
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:14:73:c4:e1:22:88:cd:58:60:5c:9c:26:30:87:12:f3:42:
         8b:a0:ef:d7:f3:e4:a3:1b:78:55:d0:89:dc:af:3f:42:86:02:
         75:30:cc:0b:11:13:7c:62:68:34:ef:7d:28:2a:3f:a1:4a:36:
         03:40:04:e2:33:3d:3a:60:68:36:bd:dc:3d:95:b2:8e:51:ca:
         aa:b8:50:c2:4e:0f:c7:28:d7:78:62:38:61:5d:11:44:54:b7:
         a5:a3:62:bf:b3:0e:dc:5d:c6:22:aa:cc:68:65:53:b3:b4:01:
         df:dd:d1:83:cc:09:67:84:41:ff:d6:b5:89:b7:c7:f4:66:b8:
         a6:6b:c5:34:f8:74:f1:48:0c:01:33:31:22:e5:00:a2:ef:f6:
         2c:94:02:e1:0d:2c:43:6b:86:aa:de:13:8c:2c:54:34:9a:3b:
         8a:2e:ff:99:53:8a:72:4c:34:27:ff:8d:e7:cb:20:fd:90:26:
         83:56:e1:e1:06:0e:31:fa:fb:92:bb:db:0a:4c:b4:a6:e2:02:
         e4:96:7a:0e:e9:90:de:b6:77:6c:26:c0:77:a6:6e:81:d0:1d:
         a7:b2:f8:02:89:77:ce:65:f8:4e:e1:a8:e4:59:4f:f5:be:37:
         3b:41:e0:a9:96:c1:1a:17:ac:1f:3f:b6:a8:87:05:72:10:98:
         97:ed:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:03:04 2026 by rpki-client