Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          eFIDWDzAWrgerF/kW2kpQ6VVFRpM3jqoq6nuqIPdnMQ=
Subject key identifier:   3B:D6:3D:D4:1D:61:2B:08:36:AC:FB:7F:12:F6:38:FE:A1:27:03:F4
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       01973B0818D428609194FBCECC66B282D452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0938
Signing time:             Wed 04 Jun 2025 13:01:15 +0000
Manifest this update:     Wed 04 Jun 2025 13:01:15 +0000
Manifest next update:     Thu 05 Jun 2025 13:01:15 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: lniZ/JzCjG4Oph2kazum+ne/2dFj/Rejm2ZrlmSMXhI=)
                          9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          10: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=)
                          11: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          12: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          13: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          14: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          15: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=)
                          16: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          17: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          18: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=)
                          19: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          20: cUnPVNczJN7mcd6WzIaNCU_I1Og.roa (hash: POlAUnHt1/Z4AKOvf92VMFTs3jliQGtxg7+xGq8ORNE=)
                          21: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          22: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          23: oL3-_6pqYdpSPuSTN2GkwZaneN0.roa (hash: o/fwSGo3+i4YRX9/IGl/K4XHnL01gJ3TF73Zb1RldpA=)
                          24: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          25: pq7pcdWVikTQ-KOe2gcv9i1f2qY.roa (hash: Y8V4SfgPnXyIoDPEtSOpbGM1xvThRgl/bKwf/VdzxaU=)
                          26: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          27: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          28: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3b:08:18:d4:28:60:91:94:fb:ce:cc:66:b2:82:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jun  4 13:01:15 2025 GMT
            Not After : Jun  5 13:01:15 2025 GMT
        Subject: CN=3bd63dd41d612b0836acfb7f12f638fea12703f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:87:f7:e1:51:be:6e:65:5b:5d:37:78:87:
                    98:84:4f:25:70:ae:b1:42:5d:2c:0a:1b:8d:6c:a7:
                    ff:bc:68:2c:e4:49:08:69:9d:c4:15:76:23:f6:ef:
                    22:1a:40:1c:a1:ed:a2:7e:ce:07:ae:43:c1:3d:eb:
                    64:ce:0c:47:17:a9:0e:11:eb:f5:1f:57:fd:d0:b2:
                    39:aa:a5:19:8f:7d:c1:99:8a:59:c2:7a:49:b1:86:
                    5b:fb:e4:d7:18:06:81:0d:11:67:19:05:53:86:4d:
                    70:b9:c0:1a:7e:7d:95:84:0c:62:5e:f1:09:f4:12:
                    15:60:71:a7:95:00:a0:3f:a1:63:85:d8:8e:d0:d1:
                    1a:b6:6f:db:61:82:a7:aa:2b:76:74:56:56:35:42:
                    0d:14:2d:7e:a5:f9:9d:c6:50:03:20:c2:77:87:71:
                    21:10:77:d4:8d:42:ea:2f:0f:b3:3c:1f:fe:b1:e2:
                    58:72:03:2b:19:0a:8b:23:aa:ee:29:fc:5f:20:d2:
                    b1:df:9b:42:d0:d9:cf:a7:e7:6f:1a:3f:d9:57:2f:
                    82:8b:bc:bd:79:ae:8b:1d:23:9b:91:b3:fe:4b:00:
                    b2:e2:39:86:f9:96:ce:4c:43:a0:af:69:6f:e8:04:
                    32:87:d0:63:aa:5c:e3:10:77:d1:3e:ac:2b:ad:14:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D6:3D:D4:1D:61:2B:08:36:AC:FB:7F:12:F6:38:FE:A1:27:03:F4
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:04:51:8b:86:ea:19:0e:e0:d9:d4:ae:9f:66:20:dd:50:e0:
         18:99:b7:7d:93:7f:ee:da:02:3d:f6:9f:c3:8a:6f:4b:bc:01:
         c7:ae:86:3e:d0:aa:7f:4e:50:24:79:8b:fa:20:77:2a:65:1f:
         e6:4e:5d:e8:09:ca:a8:83:a4:bf:1e:04:b8:ac:39:0d:90:d8:
         b3:d5:c1:3f:7e:4e:69:ba:41:95:8d:1b:fd:36:21:fe:0c:db:
         58:5f:a7:99:e8:fc:45:cd:0a:24:8e:27:85:37:f4:f0:bc:17:
         dd:7b:10:0d:2a:4b:8c:cf:d3:23:bf:fc:ee:25:62:a1:0c:24:
         c6:bc:4b:f2:b1:e6:8d:2f:b5:01:41:e7:2c:7d:c3:43:27:21:
         5e:fe:48:da:40:db:20:cf:30:54:5a:b8:37:02:06:d6:5d:0a:
         21:12:6c:d1:78:7b:56:bb:8e:59:fd:c3:87:59:3f:76:f7:33:
         7a:4f:81:fe:41:c8:aa:8e:ea:99:1d:d4:75:e0:56:45:f2:3a:
         49:c2:04:30:d5:c1:63:48:1e:1a:94:e0:2d:8e:65:05:c6:4a:
         e4:1a:b2:9e:9f:78:49:24:aa:18:b4:95:19:8a:44:c6:4d:4e:
         44:3f:fe:01:29:a3:f4:45:b6:0b:62:8c:1a:e9:43:92:f6:83:
         78:d9:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 21:56:07 2025 by rpki-client