Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          v/hn/UnNEBRcTn4nGQ9QgCmh51+ZhnNPF3AruFDSlpo=
Subject key identifier:   79:1D:5B:B4:6A:1E:C1:C3:D9:FD:C8:89:58:F6:84:BB:E8:3C:ED:E6
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       0197B5FC06EA3CCE439B7FADEDDA42E17F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          097D
Signing time:             Sat 28 Jun 2025 10:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:22 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: 7qa40nir5wFq2isGcTz2sDzsh0E.roa (hash: P1yq7a1eR7Cp2asOxbQ/DVqg+NZ3IgYJdW9DNRFrZbc=)
                          9: 9cwRCCrU60-E-VgKBmC1MSI7my0.roa (hash: aFXS0GRHCRE/FoBB0jc86qrKoKflec2agZZ6iJFtN7k=)
                          10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: qX4zx2ATAdRRnokKVbXT0+i2WmloNelHjp4LhNroJ6A=)
                          11: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          12: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=)
                          13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          16: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          17: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=)
                          18: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          19: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          20: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=)
                          21: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          22: cUnPVNczJN7mcd6WzIaNCU_I1Og.roa (hash: POlAUnHt1/Z4AKOvf92VMFTs3jliQGtxg7+xGq8ORNE=)
                          23: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          24: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          25: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          26: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          27: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          28: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:06:ea:3c:ce:43:9b:7f:ad:ed:da:42:e1:7f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jun 28 10:01:22 2025 GMT
            Not After : Jun 29 10:01:22 2025 GMT
        Subject: CN=791d5bb46a1ec1c3d9fdc88958f684bbe83cede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:9a:1a:ce:ee:2b:2c:06:c3:8f:7f:f7:81:
                    35:0b:e1:ab:5f:cb:00:75:e7:24:06:d8:ba:fb:18:
                    a8:79:0f:d2:5c:88:02:09:70:91:ed:07:ac:3c:08:
                    70:9e:03:12:d9:b1:5a:42:fe:fa:27:c2:3e:e4:13:
                    d9:41:f1:60:b8:93:1a:2e:0f:fd:bf:a6:21:b0:ca:
                    9f:09:a3:ca:b4:79:bb:d6:8f:db:d1:60:fd:87:32:
                    0d:5d:8c:39:37:b6:77:ce:17:70:a7:16:bb:0e:28:
                    2c:7f:78:c0:fc:87:c9:8c:b0:21:50:c4:86:4e:6e:
                    0b:ba:2a:e5:cb:f2:30:34:d5:ee:1a:61:71:3d:d1:
                    bf:21:fa:96:e9:42:fc:d8:11:c2:c0:d8:e8:43:1a:
                    91:02:c6:7e:83:fd:e8:2b:7e:aa:d0:c6:59:93:32:
                    1f:3a:c2:8d:fd:fb:40:8a:77:b4:25:c6:e9:61:15:
                    ae:17:3e:fb:09:0f:52:86:c7:61:8d:a8:ad:ec:ff:
                    15:2a:97:6f:62:98:47:51:25:0e:7b:d0:a1:77:7e:
                    ea:01:fc:fc:8c:15:41:e3:76:b1:e8:b0:f3:61:71:
                    c7:9b:7e:7b:ee:a4:47:20:5a:3a:06:1b:bd:37:c7:
                    36:f8:fc:ec:fa:34:52:4b:9b:ad:52:a3:92:d2:ef:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1D:5B:B4:6A:1E:C1:C3:D9:FD:C8:89:58:F6:84:BB:E8:3C:ED:E6
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8f:9d:1b:6a:b4:bc:8f:b7:e4:65:be:be:c2:2e:cf:ec:cf:
         73:5d:aa:48:41:70:cd:76:d1:f0:3c:c5:c4:97:b9:ca:8e:bf:
         78:f6:65:72:28:1e:f0:93:58:1c:4b:04:5c:06:63:48:6e:9f:
         f3:c6:bf:0a:ce:25:e2:ef:c1:be:e0:2e:96:a5:47:cf:ee:1e:
         9e:de:e8:84:1c:3d:6c:e9:52:6d:5b:2c:f9:25:25:4b:6c:bb:
         18:cb:17:ab:12:b6:47:56:68:5e:a2:53:10:91:23:2f:18:94:
         52:f5:3d:8a:37:53:7d:bc:d6:32:68:ec:3d:f2:7e:32:6e:0d:
         b4:ac:f4:c4:6f:53:c1:32:16:f0:22:f9:58:9d:48:00:0a:62:
         80:42:7e:f2:05:11:50:0c:9b:b6:8b:54:54:1b:f6:85:a4:24:
         ab:28:c1:d8:4b:08:cb:48:13:48:a9:5e:f4:04:ea:7d:18:de:
         1c:45:72:1b:60:79:76:51:ea:d2:ff:0e:57:fd:b9:10:70:aa:
         c4:c5:9c:e1:35:73:fc:18:c7:90:85:a3:3d:53:18:ac:7e:b1:
         8f:9e:7f:57:6b:f1:81:9f:26:bd:2f:da:2a:f1:7b:c4:3d:40:
         9f:12:31:4e:b2:2b:16:57:57:8f:1c:fe:69:1e:8f:c9:4c:1a:
         52:30:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:42 2025 by rpki-client