Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          cRHy2yUNiDjHHc1/pwRr6DWHVk+tgbTgYdeRI3oYA3A=
Subject key identifier:   2B:A2:97:FF:31:1C:BB:58:37:86:6F:7F:CA:1C:67:72:52:59:18:F8
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019EBE8011C8A05EFBE0A4A92EEDE5353026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0D57
Signing time:             Sat 13 Jun 2026 01:02:04 +0000
Manifest this update:     Sat 13 Jun 2026 01:02:04 +0000
Manifest next update:     Sun 14 Jun 2026 01:02:04 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
                          10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: Hu6NaP5KOr8AqJMpMwxIAk/idGaxJFUS6i9CUJSt6JQ=)
                          11: CW_HvDbYBYbAWofKdwrPvNngefc.roa (hash: K/4MSIpNMGgHpqP6TSqdislusd1GbJIGCOT0ARGA4SE=)
                          12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          20: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
                          21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
                          23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          24: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          25: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          26: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
                          27: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          28: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          29: oGTKpjneUlwgag5M-NjvKwIlYUI.roa (hash: 9QB4KV0rJF2RbXiIhAXA3LJl4e6VKrx30tyi94M4whg=)
                          30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
                          31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
                          32: wEL0m2xnUOqnoMR4hx1-9e2xVoA.roa (hash: nuXzyo66+OQCGgqLPo+DoTkH/Kbc2R0P29NuQqSwjQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:80:11:c8:a0:5e:fb:e0:a4:a9:2e:ed:e5:35:30:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jun 13 01:02:04 2026 GMT
            Not After : Jun 14 01:02:04 2026 GMT
        Subject: CN=2ba297ff311cbb5837866f7fca1c6772525918f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:9c:18:7e:7b:7b:c7:ae:7c:6a:25:00:85:
                    55:6a:ec:aa:51:26:5f:96:89:63:7c:01:87:87:7e:
                    bb:2b:3d:3f:7c:37:c3:2c:7f:50:13:94:a8:11:1d:
                    c8:5e:61:24:c3:cc:ea:45:a6:93:cf:5f:5b:22:1c:
                    ae:be:37:62:7c:4f:50:2a:f3:05:65:bb:2f:51:06:
                    55:95:94:db:8d:20:86:8e:3e:ae:02:83:3c:7b:5d:
                    e4:02:b1:b1:a1:ea:24:b2:50:28:35:ed:ee:5c:46:
                    f7:cc:86:c1:ab:08:cd:ec:f2:b7:12:aa:2a:1d:2e:
                    32:4d:e5:a0:df:25:f7:23:d5:f0:c8:1a:8d:aa:17:
                    09:3c:fa:ae:57:7a:a2:aa:cf:48:88:41:98:9b:91:
                    c0:33:c8:54:8b:9c:3b:7a:48:3d:4c:79:37:af:d0:
                    85:66:0d:29:e8:d1:7f:45:0c:60:fa:34:04:2d:02:
                    42:0f:f6:4b:78:2a:24:a2:4d:ca:46:21:a4:c9:ac:
                    04:63:6e:00:76:40:e8:0d:f9:f6:9d:85:cc:01:f6:
                    b4:06:30:55:1a:de:95:9a:1e:bc:0b:a6:61:eb:b8:
                    8f:5f:64:6c:95:cb:85:78:e1:b8:f0:01:33:46:fa:
                    98:3b:88:62:3d:a8:c8:a0:bb:10:57:28:61:e1:eb:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A2:97:FF:31:1C:BB:58:37:86:6F:7F:CA:1C:67:72:52:59:18:F8
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:6f:39:36:89:e1:82:ab:8d:df:6e:86:4d:67:17:8b:42:
         f3:b3:07:95:3e:d5:f1:59:28:1e:92:0a:2d:d5:ff:cc:bf:c0:
         8c:ed:ed:ea:94:18:db:86:4e:38:da:12:28:fd:81:43:26:af:
         b7:d4:a2:d6:fe:f8:95:39:a1:32:4b:26:e2:c1:f4:2e:6c:b8:
         2b:eb:7a:31:25:98:e0:68:26:a3:2f:39:d7:fb:39:6a:5e:e4:
         da:d4:d6:8b:56:9b:dd:67:19:31:77:27:93:6e:df:b7:af:1e:
         90:b0:1f:7d:47:07:e3:f2:b7:23:d0:d5:1c:2a:d4:fb:a7:df:
         ac:a4:8c:11:d2:b7:6c:d2:2c:89:9d:b2:17:aa:89:ab:15:5b:
         b6:a3:37:6c:c2:aa:d9:b6:16:fd:ec:68:1f:4e:b2:98:e3:b6:
         13:ab:68:88:20:09:f2:0d:27:72:65:e6:12:f1:ec:37:61:e5:
         90:50:7d:1d:dc:1f:12:5b:b2:82:41:a7:90:13:1e:21:0b:7c:
         e3:ea:42:51:1d:f9:d1:41:f7:75:a7:7c:fd:c3:70:12:b1:81:
         f5:bc:6e:97:91:27:d0:b4:36:e9:07:b7:d7:c3:69:95:0c:5a:
         ef:ff:dd:53:d1:cd:63:fe:66:92:17:2c:34:5c:2c:03:e0:e2:
         0a:66:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:29:07 2026 by rpki-client