Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          nJF8g3c456SSLiSKQ3ZkrlftCp0aknuCIVFSqFbi5/k=
Subject key identifier:   77:B1:4D:32:18:A2:81:84:53:E3:6F:AD:7E:D0:71:24:F4:03:17:DA
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       0196A7D44502A2C390E59A9F1A35DB14969D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          08E8
Signing time:             Tue 06 May 2025 23:00:28 +0000
Manifest this update:     Tue 06 May 2025 23:00:28 +0000
Manifest next update:     Wed 07 May 2025 23:00:28 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: bLYFr/tzG66i0rLPoeHRAksMwYkfkpQzPR61o5kdZrk=)
                          9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          10: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          11: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          12: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          13: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          14: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=)
                          15: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          16: TVkYtOBX4jlPadPB8EN37oM_ejY.roa (hash: t9s/wGBhF7eWwaYIxIzGF9nQ4YCwfq2jMNA0hkpmxHY=)
                          17: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          18: XlFQTjC7481aLM5EMChR3qT8AcE.roa (hash: f0DnksinMMergPKlFXbJU92z0zwQyKjG50p2FrrrbAU=)
                          19: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          20: cUnPVNczJN7mcd6WzIaNCU_I1Og.roa (hash: POlAUnHt1/Z4AKOvf92VMFTs3jliQGtxg7+xGq8ORNE=)
                          21: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          22: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          23: oDni1EJm1ojLAR69a31uPncLns8.roa (hash: Vg8O7m2AgHh60b93FLyO9wy8Nzk9z4F/YYUyXCnmzmk=)
                          24: oL3-_6pqYdpSPuSTN2GkwZaneN0.roa (hash: o/fwSGo3+i4YRX9/IGl/K4XHnL01gJ3TF73Zb1RldpA=)
                          25: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          26: pq7pcdWVikTQ-KOe2gcv9i1f2qY.roa (hash: Y8V4SfgPnXyIoDPEtSOpbGM1xvThRgl/bKwf/VdzxaU=)
                          27: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          28: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          29: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:d4:45:02:a2:c3:90:e5:9a:9f:1a:35:db:14:96:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: May  6 23:00:28 2025 GMT
            Not After : May  7 23:00:28 2025 GMT
        Subject: CN=77b14d3218a2818453e36fad7ed07124f40317da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:61:3e:e9:0e:4d:d3:f8:15:cf:9b:ad:1d:
                    33:17:9a:f0:b9:05:dc:88:71:d0:68:fa:c8:c8:ee:
                    21:4d:b4:cc:e8:7b:53:54:11:99:77:8b:d3:03:7b:
                    a6:50:6d:0a:89:a5:28:e7:aa:b2:5b:cc:4c:98:0b:
                    9b:46:e2:d4:65:6f:8c:cc:0a:f7:96:50:32:8b:67:
                    07:5c:c2:c4:b1:56:a3:0c:2a:a3:15:80:2b:fa:21:
                    5b:ae:3e:44:2a:c2:ad:8d:86:68:01:b9:b2:04:54:
                    32:d8:af:59:5b:11:e6:26:d9:77:3a:34:bf:aa:cb:
                    08:ad:23:6f:a3:92:b2:a8:18:d9:b6:29:b2:b0:09:
                    3e:df:77:98:bc:54:21:60:b7:ce:40:c2:0f:de:41:
                    a6:e7:65:0d:8d:35:98:15:20:1a:a2:46:d1:ae:e5:
                    e7:2b:b5:5d:a4:66:b0:49:49:7a:4f:ae:72:96:81:
                    f5:62:cd:d2:57:ed:88:fe:cf:0f:fd:e7:e8:60:3c:
                    ba:8b:7a:b6:4e:7b:02:c7:5c:a6:cb:2a:52:77:d9:
                    5f:05:12:d6:0e:4e:05:dc:25:e3:88:11:32:6e:67:
                    2b:29:5f:80:92:5d:d4:f9:ae:50:60:92:8d:8c:74:
                    c4:78:b1:3a:aa:b1:4b:9c:3f:1d:c2:e8:a6:65:a0:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:4D:32:18:A2:81:84:53:E3:6F:AD:7E:D0:71:24:F4:03:17:DA
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b9:6c:56:67:ae:7e:00:04:9d:7f:51:54:02:a8:4b:89:64:
         17:63:ef:ee:0d:66:0a:3c:72:b0:69:8a:36:a1:68:e5:31:23:
         d8:14:25:4f:22:2c:e3:76:bd:9f:6a:4f:01:95:8d:0a:9d:ff:
         cd:cf:d3:ca:d9:36:78:0e:b6:85:d3:37:97:9d:16:e4:2c:31:
         e2:66:4d:d6:3c:fc:90:7a:58:00:de:06:63:10:9a:19:cf:ba:
         06:47:c4:37:3a:6f:83:6f:a7:f3:4d:89:48:22:c2:e0:6c:ea:
         0a:f2:41:14:4e:18:fc:da:8d:53:39:2e:87:81:50:00:8c:96:
         58:2b:52:97:bc:5c:61:5a:1e:29:86:32:08:90:fc:0d:3d:0b:
         32:3f:f4:2c:19:38:7b:3a:6b:88:fd:5e:47:2f:f4:d0:aa:89:
         85:47:1e:9d:2d:26:b8:f3:2b:98:ce:b1:e9:1b:08:df:11:34:
         c6:29:dd:5b:e1:f6:01:43:04:5a:0d:04:d0:33:1f:df:62:11:
         f6:af:cc:2a:75:e4:43:02:59:b7:24:f3:7a:9f:d2:c1:53:23:
         42:ab:cc:45:e2:51:43:ce:05:2b:0a:d0:eb:b0:c2:76:1f:91:
         80:0b:a4:20:c0:11:d1:60:8e:ec:50:b4:13:5e:17:e5:08:f8:
         4f:95:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:05:49 2025 by rpki-client