Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File:                     s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier:          +gxMjoz2tXjtGO6JzlQChf7cBPnzZ4MWDKniiagX/74=
Subject key identifier:   E4:15:B5:54:D9:F0:5F:15:40:72:09:CA:40:01:61:4C:AF:8A:10:00
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer:       /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial:       019848896233FC88E4A19DDCA21E29256912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 21:00:19 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:19 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:19 +0000
Files and hashes:         1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: fttt8kDvsVFrmPyMk9Bhtn4r8KJMVVUptR+AcIdm4Sk=)
                          2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:62:33:fc:88:e4:a1:9d:dc:a2:1e:29:25:69:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
        Validity
            Not Before: Jul 26 21:00:19 2025 GMT
            Not After : Jul 27 21:00:19 2025 GMT
        Subject: CN=e415b554d9f05f15407209ca4001614caf8a1000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:6d:4e:05:60:7a:be:5a:78:da:18:f8:d7:
                    ce:57:6a:b3:d2:37:e7:9c:dc:70:97:7e:7c:4d:f6:
                    87:72:1b:52:a9:57:ba:4d:78:77:f1:d8:75:5f:cc:
                    04:e5:11:2f:90:30:d0:4a:9b:2a:c0:d6:59:13:d1:
                    d0:12:b1:1e:f2:3b:99:7e:0c:c3:cd:aa:e0:56:52:
                    f5:69:6d:f6:6f:a8:68:b5:84:48:b7:5a:bf:90:c5:
                    38:ff:33:d6:e5:4d:53:03:8f:e9:6b:2c:72:95:14:
                    7d:17:a4:d2:1c:56:70:21:14:77:28:7f:72:1d:45:
                    b0:fd:e7:06:dd:36:b6:c4:02:83:91:fe:1e:95:c9:
                    1c:29:9e:d6:db:27:ff:5c:88:db:bd:14:8c:53:71:
                    6e:14:a5:de:45:a4:c4:f0:fa:8d:c3:13:60:b1:ac:
                    b4:76:c9:66:38:45:53:fb:56:a0:98:ea:f3:df:a9:
                    35:92:ba:93:bb:78:a2:ce:64:ce:ab:53:77:15:62:
                    14:2b:61:df:58:d5:e2:7e:bf:50:bd:b5:e1:d7:10:
                    cf:08:11:b9:5f:0a:fb:51:21:a0:b9:58:b4:1f:98:
                    fd:76:f8:27:a8:28:63:f1:2c:51:31:0a:af:99:12:
                    c2:c5:41:45:58:15:07:8b:74:9e:d2:8a:0b:f7:b2:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:15:B5:54:D9:F0:5F:15:40:72:09:CA:40:01:61:4C:AF:8A:10:00
            X509v3 Authority Key Identifier:
                keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:71:a8:75:d7:bf:f2:23:2a:85:d0:14:0e:ff:86:2c:85:
         4c:89:70:17:14:97:ae:a4:44:fb:81:c8:7e:c6:6a:da:65:52:
         6f:c9:ef:5b:0e:99:57:f7:e1:20:d6:0c:7d:68:57:94:73:b0:
         dc:5a:e4:07:90:b1:41:25:ab:85:fd:45:e6:cc:12:7e:3e:1e:
         2d:06:61:5e:e6:13:c3:7f:12:3b:b7:8d:cf:57:31:c7:2e:8c:
         e3:57:b5:6f:b8:b3:11:16:8e:ae:98:33:2b:8c:ae:7f:d0:b9:
         78:ce:26:67:9d:d6:7c:fd:7b:56:dc:db:42:03:2c:51:92:de:
         60:c3:1f:5d:09:6a:84:cb:45:92:31:c6:eb:66:03:74:28:85:
         81:b5:b6:cb:1d:d4:35:c2:b5:f1:fe:4e:f6:1c:24:eb:7b:f5:
         33:f3:80:f9:75:2e:c4:20:b6:ea:af:8e:29:a3:18:68:6d:45:
         ac:ae:61:27:f4:3c:9f:d7:2a:49:77:08:49:84:6d:ab:96:0d:
         8a:be:8a:44:bd:6f:7a:9b:ad:7d:32:b2:6f:a8:15:85:23:ac:
         47:d4:2e:aa:f1:c2:e8:4a:9e:fa:49:95:82:19:88:5b:99:f9:
         2b:c0:1a:09:13:56:65:62:7f:c6:0e:39:86:6c:f8:82:4c:4c:
         af:9c:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:45:31 2025 by rpki-client