Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          9897BP6Xdx66WPeHyQfXggNmDdt2GMtA37nv1NwwflY=
Subject key identifier:   D4:EE:16:EF:1B:4B:30:04:2B:9A:FD:F1:46:92:FE:9C:A3:A2:26:75
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       0198D54E437C9C05AED42F7C38A7D8E2B738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0A19
Signing time:             Sat 23 Aug 2025 05:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:12 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: 7qa40nir5wFq2isGcTz2sDzsh0E.roa (hash: P1yq7a1eR7Cp2asOxbQ/DVqg+NZ3IgYJdW9DNRFrZbc=)
                          9: CIRls3stTp9BOjHce35suioz25Y.crl (hash: DqEEt1/hZpKBytO6nUEt/7Yjpj4yxsx2GcdXBIaizmM=)
                          10: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          11: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=)
                          12: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=)
                          13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          16: Ky7-IIoUxS2nkoMTtc2TskJ66E8.roa (hash: aBQvir0AeVNqf2KXlMbnVl1gTuEzmgYVgZi2Q3VfSPw=)
                          17: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          18: ODe-si4o2NeEMrjJt-yos-mYsdA.roa (hash: 9SIcybriqERXEkNXTZbEEpNeoZYJSTz3U3cpSm3Fpeg=)
                          19: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=)
                          20: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          21: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          22: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=)
                          23: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          24: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          25: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          26: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          27: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          28: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          29: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:43:7c:9c:05:ae:d4:2f:7c:38:a7:d8:e2:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Aug 23 05:02:12 2025 GMT
            Not After : Aug 24 05:02:12 2025 GMT
        Subject: CN=d4ee16ef1b4b30042b9afdf14692fe9ca3a22675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5e:26:7c:1c:b7:02:3d:48:ef:39:3f:77:d3:
                    12:94:e5:2c:8c:7e:b1:f8:7f:6f:21:37:6d:16:d8:
                    be:0f:9d:81:72:86:c1:aa:14:21:50:6d:44:ca:6e:
                    77:a6:18:9b:cc:89:ce:33:c4:3f:15:b9:15:58:c9:
                    01:68:f2:e3:0d:11:76:6f:e7:7c:ce:e1:7c:2b:7c:
                    b9:31:25:23:92:fa:e8:99:40:3c:d9:f5:2b:74:7b:
                    8a:01:ba:00:10:f3:35:92:1a:35:38:66:70:23:69:
                    01:c5:01:27:bf:0d:a2:05:b0:44:56:e9:10:45:e5:
                    5c:ae:4f:6b:ac:68:c5:2e:79:2c:32:d6:26:f8:c7:
                    b1:67:28:c3:e0:84:f4:f4:b3:ab:d3:fc:e0:f0:c9:
                    0a:2f:bd:57:20:04:75:62:0f:f4:d5:b5:7c:69:dd:
                    62:22:ff:04:a2:a0:cc:f5:5b:43:96:38:49:1b:a6:
                    d2:34:ae:96:19:70:05:ba:22:1a:b4:42:69:cd:c3:
                    39:cc:15:bf:3b:7d:f6:18:49:52:65:04:12:2c:c0:
                    c0:6d:e1:dd:41:22:89:af:63:ee:82:d6:4a:a4:ff:
                    d2:da:2d:65:a2:6e:39:44:ea:97:ab:29:e3:f2:f7:
                    81:d4:74:2a:e0:e9:fa:c7:fb:01:c5:78:6d:d3:18:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:16:EF:1B:4B:30:04:2B:9A:FD:F1:46:92:FE:9C:A3:A2:26:75
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:21:f2:dd:f7:2c:f9:51:0d:2b:07:09:b1:d5:cd:f1:ed:af:
         f2:a1:9f:4e:9d:2e:21:fc:30:ef:e0:75:42:a9:9f:19:1a:d3:
         43:a6:eb:5b:64:d7:b4:25:96:85:e3:6a:b7:cf:ba:4f:01:4a:
         04:61:37:91:37:9f:97:8f:6c:4a:ab:7e:1f:32:54:11:e3:8e:
         bb:bb:c5:fa:f4:42:88:6d:a5:08:41:19:98:e1:88:7e:d8:2b:
         32:94:15:68:07:af:2d:a3:ef:35:44:67:1d:99:7f:9d:13:7f:
         93:95:3d:65:91:86:73:ef:bd:e8:60:d4:bf:4d:68:c3:8d:fe:
         60:1d:0c:69:71:cc:01:04:05:12:c0:6d:e8:d1:8a:f2:f2:d3:
         2c:e6:88:c6:6c:e9:f0:b6:1d:12:c3:17:bc:3f:7d:6e:a0:cd:
         58:ed:65:f6:22:30:f6:94:e2:ac:55:26:74:18:1d:81:d1:48:
         42:00:b7:c5:68:de:09:47:1c:95:83:21:6d:79:d9:91:45:89:
         cf:2a:19:85:d3:a8:75:76:04:0e:ef:eb:28:64:8a:13:0f:06:
         42:17:47:a5:03:00:39:ea:09:df:31:1e:d1:e5:7a:6e:74:c6:
         88:d0:f5:81:a5:a5:9a:75:38:0d:55:7c:6f:6b:e2:4f:1f:17:
         a4:9e:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:02 2025 by rpki-client