Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          G0pg2lGbAcXiVwp7BuXGl+swwqo8NKBfuGCgHnBYaqo=
Subject key identifier:   DE:31:11:F4:39:70:F3:02:01:62:9E:76:6B:DC:8F:CD:E8:0F:A1:1A
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       0197748914B15AC50BFE16E37FA0CB40E01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0957
Signing time:             Sun 15 Jun 2025 17:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 17:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 17:00:30 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: FMQ5/4WWaA908j1rJ82i5t27eHUZMz7Q7PVlym3Wx8A=)
                          9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          10: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=)
                          11: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          12: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          13: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          14: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          15: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=)
                          16: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          17: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          18: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=)
                          19: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          20: cUnPVNczJN7mcd6WzIaNCU_I1Og.roa (hash: POlAUnHt1/Z4AKOvf92VMFTs3jliQGtxg7+xGq8ORNE=)
                          21: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          22: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          23: oL3-_6pqYdpSPuSTN2GkwZaneN0.roa (hash: o/fwSGo3+i4YRX9/IGl/K4XHnL01gJ3TF73Zb1RldpA=)
                          24: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          25: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          26: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          27: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:89:14:b1:5a:c5:0b:fe:16:e3:7f:a0:cb:40:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jun 15 17:00:30 2025 GMT
            Not After : Jun 16 17:00:30 2025 GMT
        Subject: CN=de3111f43970f30201629e766bdc8fcde80fa11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:91:d1:dc:b6:27:64:95:d5:ca:ac:cf:09:
                    9d:7d:69:af:38:3a:1c:0d:38:a1:54:0b:1d:08:1f:
                    40:30:f0:5f:87:f1:cf:86:3a:b6:ad:cd:04:8d:bd:
                    5c:9d:6b:0e:0e:2e:0a:08:6a:ec:31:57:6d:52:a4:
                    f3:b4:39:c7:56:31:62:ed:5d:15:20:bc:7b:4b:54:
                    5f:10:7e:62:4e:1e:3c:c1:ce:de:92:63:a8:89:da:
                    7d:b5:53:77:cb:24:5e:e2:39:48:fd:bd:7c:c8:c6:
                    d8:16:b6:07:63:df:ef:fd:88:2a:4b:8e:12:82:29:
                    e0:39:b2:5c:27:28:2b:51:b2:ed:98:43:19:83:61:
                    98:54:b0:7b:62:c4:c7:43:42:c0:e3:f8:be:dd:98:
                    5d:b5:7a:83:a0:f7:2e:36:8e:e8:29:78:74:f6:86:
                    cf:cb:88:28:44:aa:41:a3:fb:f0:6e:92:1e:ba:36:
                    19:2a:b1:49:a1:77:c3:e6:9a:35:34:49:6d:69:3f:
                    94:a4:c7:98:b5:90:34:00:96:15:8d:e9:08:02:cd:
                    61:3d:02:7b:a6:14:ce:95:13:7a:03:3b:71:b0:bd:
                    9e:ae:08:f4:75:10:18:0f:ad:b7:68:3b:07:87:17:
                    4c:2d:f1:68:df:ca:43:c9:5c:ba:32:c1:e3:b4:d0:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:31:11:F4:39:70:F3:02:01:62:9E:76:6B:DC:8F:CD:E8:0F:A1:1A
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:b7:99:20:56:e6:f6:b2:b7:21:85:85:46:2d:81:a4:d3:
         f0:49:69:53:c2:bc:d5:c4:ee:09:ce:25:2b:7c:1e:23:8a:90:
         cd:9e:af:88:76:db:88:28:89:fa:77:a9:f4:fd:f3:e2:4e:0f:
         69:ac:f5:61:a9:36:3a:ea:97:34:28:60:d9:68:2a:cd:cb:11:
         2a:c6:87:04:70:b9:b4:2f:86:af:a3:a6:6a:b7:4c:14:c3:76:
         0d:07:2c:bd:27:14:34:49:32:b7:47:98:27:b6:60:fa:86:84:
         ed:8e:7b:37:54:bd:dd:57:56:77:30:8f:7f:06:7a:2a:e4:e4:
         64:3e:3b:05:06:91:2f:b8:cb:ac:a8:28:7c:df:30:ca:91:66:
         0c:61:56:4a:11:b5:08:f4:86:5c:7c:50:a7:f0:cb:6c:04:e7:
         dc:db:52:2e:f5:7e:eb:99:a4:e0:46:e0:0e:67:38:a3:1a:af:
         37:d0:ab:29:c5:d7:6a:a8:3f:bf:d0:e5:27:c1:b2:d3:e5:71:
         a8:36:10:9f:13:3d:79:66:2b:1c:3a:11:dd:b7:df:66:80:a2:
         06:e7:63:c6:66:b4:dc:31:9a:d1:f6:b6:d8:42:c3:61:e5:44:
         a3:a6:69:f0:0c:ca:84:4b:02:1b:01:b4:64:d4:8d:d9:ae:24:
         27:79:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:58 2025 by rpki-client