Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          gUWvSskC7ckHux7HAVQeO2fYiOblYhC+JT7pKxDfL0Y=
Subject key identifier:   62:86:81:71:27:6A:ED:2B:DD:3C:E7:4A:ED:DC:C1:BF:40:65:2F:15
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019FA82B3AFA294398083AD5ECD4386CDB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0DD3
Signing time:             Tue 28 Jul 2026 10:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:33 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=)
                          9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=)
                          11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: BCBQDqIxVZtFVRsim8vHt9/NzlPRdVB0lJgyEWSial8=)
                          12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          20: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (hash: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=)
                          21: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=)
                          22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          23: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=)
                          24: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=)
                          28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
                          31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:3a:fa:29:43:98:08:3a:d5:ec:d4:38:6c:db:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jul 28 10:00:33 2026 GMT
            Not After : Jul 29 10:00:33 2026 GMT
        Subject: CN=62868171276aed2bdd3ce74aeddcc1bf40652f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:c1:78:9b:d3:dc:d2:62:c7:a0:26:9b:ca:
                    91:c7:07:51:e2:00:b7:a7:95:01:8a:da:b1:60:81:
                    f4:c9:9a:e5:05:d7:57:ec:b8:9c:09:75:3e:92:8c:
                    19:d7:cf:98:91:bf:47:74:35:be:3a:6b:18:9c:ef:
                    21:3d:d2:01:fd:07:bb:d9:a4:fc:bd:98:1a:81:28:
                    95:ff:f6:cf:41:1d:1f:27:0b:97:47:30:32:67:46:
                    b4:b3:f6:61:5d:e0:b8:dc:65:81:a3:87:b7:40:bf:
                    56:ba:74:c5:40:50:d3:16:62:ca:15:46:12:cd:68:
                    8e:dd:24:5e:b6:9d:25:55:7e:3b:2c:98:c2:fe:28:
                    cf:28:84:97:dc:2a:53:b3:94:6c:2a:8f:7e:ee:37:
                    27:6b:ce:bb:c1:0d:10:0a:62:9d:61:ea:dc:57:45:
                    bb:4e:a5:8d:d7:4c:7c:52:f1:53:fe:d2:ce:92:eb:
                    0f:a8:de:9a:42:a2:7f:e3:b4:58:03:9e:00:43:18:
                    8a:0e:99:fd:df:9c:df:22:4f:75:66:13:b0:e3:6f:
                    fb:c6:dd:7a:bb:16:48:d3:1e:f8:33:b0:12:d0:ea:
                    0e:a8:63:50:54:04:6c:b2:cd:24:7a:09:77:21:37:
                    c0:c6:c9:6d:e8:5e:7f:23:18:7b:59:ce:e1:38:56:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:81:71:27:6A:ED:2B:DD:3C:E7:4A:ED:DC:C1:BF:40:65:2F:15
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:28:a1:4e:0e:fe:20:7d:d2:cb:1f:4e:df:6b:0f:f2:6d:a9:
         3f:69:0b:d6:cb:4c:83:61:fb:96:53:b3:2e:df:f5:e5:35:80:
         b0:39:8d:9a:ae:28:54:60:9d:4b:ce:c8:68:72:ba:7f:11:d4:
         8f:e3:98:3e:71:10:b8:be:08:84:57:fd:ec:21:74:fb:c5:91:
         5a:3d:39:d7:4e:46:02:77:88:1f:de:4a:54:6b:66:05:53:f4:
         da:33:8e:96:ec:78:ff:ac:59:c0:8b:e4:10:5f:cb:7d:07:55:
         da:64:6c:25:93:c4:f0:5f:a4:f3:a9:a4:4e:7a:06:d1:bb:df:
         9e:e2:6d:7e:b6:75:38:d4:34:01:40:5c:f9:ef:68:cf:05:e5:
         49:e5:04:7b:39:b9:11:c4:24:a9:9a:78:e8:13:76:a9:24:15:
         34:47:3e:88:7d:7f:64:f8:ec:f7:20:ba:28:e6:9a:6d:74:ad:
         c8:4c:28:a9:c8:b4:a5:f5:7b:e6:ff:ca:6a:ff:7a:1b:be:86:
         36:67:f2:45:35:86:65:85:5c:ae:77:f8:ce:a5:26:26:a1:68:
         e1:ce:af:0f:e0:7b:fe:89:c6:52:a4:1a:5e:60:cd:a2:2d:8c:
         34:71:f2:ac:5a:cc:35:80:d4:1b:66:a3:30:43:c6:9d:1e:40:
         e2:12:8d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKzr6KUOYCDrV7NQ4bNsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjYwNzI4MTAwMDMzWhcNMjYwNzI5MTAwMDMzWjAzMTEwLwYDVQQD
Eyg2Mjg2ODE3MTI3NmFlZDJiZGQzY2U3NGFlZGRjYzFiZjQwNjUyZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n7BeJvT3NJix6Amm8qRxwdR4gC3
p5UBitqxYIH0yZrlBddX7LicCXU+kowZ18+Ykb9HdDW+OmsYnO8hPdIB/Qe72aT8
vZgagSiV//bPQR0fJwuXRzAyZ0a0s/ZhXeC43GWBo4e3QL9WunTFQFDTFmLKFUYS
zWiO3SRetp0lVX47LJjC/ijPKISX3CpTs5RsKo9+7jcna867wQ0QCmKdYercV0W7
TqWN10x8UvFT/tLOkusPqN6aQqJ/47RYA54AQxiKDpn935zfIk91ZhOw42/7xt16
uxZI0x74M7AS0OoOqGNQVARsss0kegl3ITfAxslt6F5/Ixh7Wc7hOFYc2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKGgXEnau0r3TznSu3cwb9AZS8VMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiihTg7+
IH3Syx9O32sP8m2pP2kL1stMg2H7llOzLt/15TWAsDmNmq4oVGCdS87IaHK6fxHU
j+OYPnEQuL4IhFf97CF0+8WRWj05105GAneIH95KVGtmBVP02jOOlux4/6xZwIvk
EF/LfQdV2mRsJZPE8F+k86mkTnoG0bvfnuJtfrZ1ONQ0AUBc+e9ozwXlSeUEezm5
EcQkqZp46BN2qSQVNEc+iH1/ZPjs9yC6KOaabXStyEwoqci0pfV75v/Kav96G76G
NmfyRTWGZYVcrnf4zqUmJqFo4c6vD+B7/onGUqQaXmDNoi2MNHHyrFrMNYDUG2aj
MEPGnR5A4hKNSg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:13 2026 by rpki-client