Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          2thA3C0ge/S5m4C8mMMQhx2WuWi1LgxjL9NWWmPCizQ=
Subject key identifier:   A2:15:97:DD:99:DD:13:4A:28:65:71:6D:DB:42:5B:87:F7:4B:16:DC
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       01A0C444DEC7D92BF92ED78ADF27E84F08B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0E68
Signing time:             Mon 21 Sep 2026 14:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:42 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
                          9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
                          11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: i8CMnFGy+DCh9sMeJ/GugI8XYu8KmNu/MPVr5BvoGd0=)
                          12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          20: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
                          21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
                          23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          24: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          25: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          26: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
                          27: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          28: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          29: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
                          30: x4y5JxDrafwxKhlG-r82-29DIO4.roa (hash: 76ZeinJEZXAt5CMu/llzcYQkuoMHqW1kwWUZsBr+knU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:de:c7:d9:2b:f9:2e:d7:8a:df:27:e8:4f:08:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Sep 21 14:00:42 2026 GMT
            Not After : Sep 22 14:00:42 2026 GMT
        Subject: CN=a21597dd99dd134a2865716ddb425b87f74b16dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:97:3e:15:c8:86:96:c4:d8:80:9f:d2:86:
                    4b:9b:9e:52:73:b8:0a:3c:44:df:b3:45:35:90:ca:
                    e3:17:f8:a7:2d:02:cf:3e:7e:34:91:d8:36:0c:5d:
                    21:fb:96:e6:1d:01:fe:2b:f1:29:6b:f2:59:34:c8:
                    24:6e:c9:be:e4:d3:b0:48:e8:ae:1f:db:e4:12:e7:
                    ff:e3:1b:43:31:48:b8:4f:14:c1:46:f4:89:f5:14:
                    eb:17:03:d6:0c:8b:e3:e8:f0:9b:1e:60:22:42:99:
                    93:c2:8e:66:07:0c:3d:ff:c0:e7:9f:de:81:7c:4a:
                    c6:0f:51:4e:8f:13:5f:fa:10:5b:6e:a5:47:b3:b2:
                    b6:a2:d2:e0:ed:a5:9d:51:81:e2:05:80:78:03:5b:
                    c3:e9:a5:9c:04:a2:8c:07:5c:b2:6c:62:ad:b8:23:
                    27:e1:70:2f:39:60:10:c0:65:82:a5:2d:8a:e6:3a:
                    a6:af:9c:21:96:ce:58:72:a6:6c:8f:4c:87:50:c5:
                    2b:16:11:72:b2:87:d1:f5:41:f2:70:53:4e:7d:ff:
                    6a:16:0a:94:9a:fe:be:ce:7f:42:bc:3b:5d:96:af:
                    e9:84:be:15:36:aa:82:bb:9b:ff:59:62:93:3a:0b:
                    51:71:46:e4:9e:44:f7:d5:39:ef:d6:f3:a1:71:aa:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:97:DD:99:DD:13:4A:28:65:71:6D:DB:42:5B:87:F7:4B:16:DC
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:b9:c1:a3:26:5f:be:18:a3:a8:ef:9a:62:a2:0a:44:7a:
         41:92:10:76:a7:f3:35:c9:a0:3f:80:b9:26:ae:f5:3d:e1:5f:
         3c:bc:f2:b4:52:a9:53:c3:02:01:c1:4a:ab:a9:1b:32:88:50:
         40:87:e1:28:c2:8b:e2:10:6e:05:69:ca:9e:20:e9:47:10:8d:
         de:61:5c:33:b9:c1:0e:19:aa:3d:e4:d4:93:24:5f:21:06:12:
         6a:73:bb:bc:63:48:d3:60:20:93:f7:4d:1b:c1:e1:3a:dc:42:
         97:62:13:bd:c9:1b:a3:67:55:00:d5:59:fe:c7:48:38:df:a9:
         ee:e9:af:d7:f4:51:80:65:e2:78:30:a0:b0:78:bc:18:5c:41:
         62:2b:4d:ea:f1:4b:0b:d6:27:8b:b8:98:56:9b:fd:64:8e:d4:
         f2:28:fb:ca:c2:03:de:08:c6:a8:3d:af:e2:e1:56:6b:84:5e:
         24:a3:70:ef:4d:a2:42:65:bb:cf:14:1c:d5:75:02:f7:59:a4:
         b6:11:8d:89:1c:fd:25:df:77:3d:d1:e0:d5:dc:7b:2b:13:67:
         d9:2d:74:7e:74:18:25:aa:ae:75:e7:09:08:c0:e6:5a:14:4f:
         ce:f3:37:70:f8:2b:4a:e1:40:11:40:aa:f6:06:7e:c1:d4:99:
         20:e8:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:43 2026 by rpki-client