Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          0e8A0OriqiOgWWV2JasdKuQUyQAe9YgiW3xoh2kG0Sc=
Subject key identifier:   C1:5F:A3:F6:5C:1D:E6:C6:73:C0:4A:F8:A6:5C:75:F4:E9:EA:4B:E0
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019E9A7218A22737C405F8D6460F71F5440A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0D43
Signing time:             Sat 06 Jun 2026 01:00:29 +0000
Manifest this update:     Sat 06 Jun 2026 01:00:29 +0000
Manifest next update:     Sun 07 Jun 2026 01:00:29 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
                          10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: fJirEARGUnGWk4EhEWMHbHMrowLLWUdVrAFDXytevPA=)
                          11: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          12: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          13: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          14: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          15: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          16: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          17: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          18: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          19: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
                          20: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          21: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
                          22: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          23: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          24: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          25: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=)
                          26: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
                          27: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          28: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          29: oGTKpjneUlwgag5M-NjvKwIlYUI.roa (hash: 9QB4KV0rJF2RbXiIhAXA3LJl4e6VKrx30tyi94M4whg=)
                          30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
                          31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
                          32: wEL0m2xnUOqnoMR4hx1-9e2xVoA.roa (hash: nuXzyo66+OQCGgqLPo+DoTkH/Kbc2R0P29NuQqSwjQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:72:18:a2:27:37:c4:05:f8:d6:46:0f:71:f5:44:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jun  6 01:00:29 2026 GMT
            Not After : Jun  7 01:00:29 2026 GMT
        Subject: CN=c15fa3f65c1de6c673c04af8a65c75f4e9ea4be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:b7:6a:f4:e4:48:37:4f:58:51:72:a1:af:
                    c8:8f:33:0c:8b:56:68:35:f0:f4:5b:f2:41:19:4a:
                    ae:37:cd:4e:3a:7d:cd:86:d9:1e:e1:83:d9:ab:90:
                    a6:6b:51:8d:35:2e:e0:32:35:dd:aa:09:36:9a:8c:
                    84:40:3e:77:5c:3f:8b:37:a7:90:39:01:cb:8b:6c:
                    72:96:df:5d:86:36:ea:a6:c5:10:d8:1d:bd:2a:3a:
                    fa:91:dd:01:97:a2:11:79:a8:f6:07:52:0b:9b:cf:
                    06:89:a6:f9:ad:86:25:44:c6:a3:89:d1:e7:36:aa:
                    4a:0b:1f:6a:f8:02:8c:bd:41:a9:b5:90:ab:1e:3c:
                    43:67:f3:c2:1c:f7:2a:0e:be:72:59:3b:2f:22:5e:
                    ad:2e:39:d8:27:89:bb:28:8b:a3:c2:f3:dc:42:f4:
                    ac:df:4f:57:9c:02:6e:4b:15:6d:1a:7d:fc:8d:2c:
                    09:a4:b9:d5:5d:08:ff:07:ec:de:af:9d:3c:92:77:
                    37:71:e4:e7:39:3b:bc:f2:ea:e7:70:64:8d:3c:1e:
                    fc:81:73:81:0d:90:1c:68:cf:a0:73:93:dd:88:1b:
                    df:14:70:78:c8:8a:12:3c:1b:b2:b4:d9:6a:0e:cf:
                    80:4f:dd:ee:8f:e3:45:c6:c8:83:08:51:ce:c3:ee:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5F:A3:F6:5C:1D:E6:C6:73:C0:4A:F8:A6:5C:75:F4:E9:EA:4B:E0
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:2b:07:a2:a3:b0:86:cc:27:c7:6e:44:c7:b4:c5:e0:92:
         62:77:00:e0:be:03:3f:44:36:0a:72:d7:13:93:03:e9:7f:42:
         72:f6:b2:ce:e4:0a:9a:4c:17:37:98:02:4f:a8:98:38:93:94:
         dd:3f:ea:e0:cc:04:63:07:c1:55:5d:4e:71:20:7d:95:99:1c:
         7a:4e:7e:b7:86:50:25:37:1a:07:a2:6e:86:56:31:4f:60:68:
         bf:67:5c:d4:59:0b:9b:2c:7e:b8:84:7f:9a:a0:f2:dd:88:be:
         89:c3:f1:ee:80:2b:6c:66:2d:32:c7:92:52:6d:6c:50:08:de:
         74:62:52:3c:ea:a7:07:08:59:66:ca:62:db:a0:69:e4:71:0c:
         d2:48:fb:6b:5e:b4:3c:76:51:c4:b6:57:05:66:22:2f:06:a4:
         a5:e2:93:15:fc:02:0b:f2:fc:71:c0:97:a8:46:75:4f:3b:47:
         1d:c0:f5:25:18:f6:e0:db:5c:1f:27:fe:18:3d:25:23:dd:cd:
         f3:79:34:d4:66:49:a4:29:98:86:82:30:fb:9c:a0:f2:71:be:
         f6:1d:1a:51:37:3c:c3:e9:71:54:3b:dc:be:eb:b6:18:fd:aa:
         af:58:c9:09:0c:52:67:ce:53:83:b2:e5:84:1e:11:77:62:25:
         b2:05:99:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6achiiJzfEBfjWRg9x9UQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjYwNjA2MDEwMDI5WhcNMjYwNjA3MDEwMDI5WjAzMTEwLwYDVQQD
EyhjMTVmYTNmNjVjMWRlNmM2NzNjMDRhZjhhNjVjNzVmNGU5ZWE0YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofq3avTkSDdPWFFyoa/IjzMMi1Zo
NfD0W/JBGUquN81OOn3Nhtke4YPZq5Cma1GNNS7gMjXdqgk2moyEQD53XD+LN6eQ
OQHLi2xylt9dhjbqpsUQ2B29Kjr6kd0Bl6IReaj2B1ILm88Giab5rYYlRMajidHn
NqpKCx9q+AKMvUGptZCrHjxDZ/PCHPcqDr5yWTsvIl6tLjnYJ4m7KIujwvPcQvSs
309XnAJuSxVtGn38jSwJpLnVXQj/B+zer508knc3ceTnOTu88urncGSNPB78gXOB
DZAcaM+gc5PdiBvfFHB4yIoSPBuytNlqDs+AT93uj+NFxsiDCFHOw+6OrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFfo/ZcHebGc8BK+KZcdfTp6kvgMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp8rB6Kj
sIbMJ8duRMe0xeCSYncA4L4DP0Q2CnLXE5MD6X9CcvayzuQKmkwXN5gCT6iYOJOU
3T/q4MwEYwfBVV1OcSB9lZkcek5+t4ZQJTcaB6JuhlYxT2Bov2dc1FkLmyx+uIR/
mqDy3Yi+icPx7oArbGYtMseSUm1sUAjedGJSPOqnBwhZZspi26Bp5HEM0kj7a160
PHZRxLZXBWYiLwakpeKTFfwCC/L8ccCXqEZ1TztHHcD1JRj24NtcHyf+GD0lI93N
83k01GZJpCmYhoIw+5yg8nG+9h0aUTc8w+lxVDvcvuu2GP2qr1jJCQxSZ85Tg7Ll
hB4Rd2IlsgWZGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:05:38 2026 by rpki-client