Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File:                     s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier:          wystHrdcjZffQCUZGF5mKsPENwYvtWNcmNtY7bnk6/Y=
Subject key identifier:   0D:61:35:9F:E9:44:56:09:EA:54:BB:9E:6A:39:65:86:8D:13:FF:C8
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer:       /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial:       0196A954E6F4088D762F9D1DB8768AB0B461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number:          152C
Signing time:             Wed 07 May 2025 06:00:35 +0000
Manifest this update:     Wed 07 May 2025 06:00:35 +0000
Manifest next update:     Thu 08 May 2025 06:00:35 +0000
Files and hashes:         1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: eksgThGQEHw5Zq9/wfyxB6Zs3Ha1E6eK38do+D3qcw0=)
                          2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:54:e6:f4:08:8d:76:2f:9d:1d:b8:76:8a:b0:b4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
        Validity
            Not Before: May  7 06:00:35 2025 GMT
            Not After : May  8 06:00:35 2025 GMT
        Subject: CN=0d61359fe9445609ea54bb9e6a3965868d13ffc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:b2:ea:f1:14:2e:88:c0:44:30:ae:a6:ca:
                    7e:fc:50:84:89:32:ff:4c:d0:b1:f3:46:ee:c6:f6:
                    0e:39:43:78:b0:81:b5:bc:4b:3b:4f:1e:a9:51:f6:
                    ec:30:63:26:2b:3f:58:5e:f7:85:ce:d6:2a:7f:e2:
                    35:71:61:12:b8:e7:2a:69:75:69:20:a3:80:61:e9:
                    1d:72:fb:32:38:33:44:e5:30:75:65:22:8b:e9:fe:
                    9b:28:3a:e4:c5:8c:a2:93:19:10:18:a4:d0:da:b0:
                    68:96:c3:73:0e:7d:0c:ce:85:71:88:7f:39:03:87:
                    ae:f8:b1:9a:ba:69:6f:c2:61:cb:69:b8:1a:fe:10:
                    40:4e:a6:ab:c1:fb:18:b7:2c:fb:b8:b9:f3:f8:19:
                    ed:fd:39:ce:75:c0:9c:dd:36:b3:dc:83:b4:0a:c2:
                    99:c8:1a:23:2c:40:45:e3:25:e5:97:b6:2b:21:2c:
                    06:b4:79:37:3a:3f:36:be:e6:2d:8d:98:9d:d1:2a:
                    d4:3c:6c:f6:e1:af:a2:e1:e1:e3:91:ce:ec:14:35:
                    15:2a:5c:45:65:9c:4c:31:b6:5e:1b:94:b3:89:c6:
                    96:7e:26:46:90:25:bf:7e:2c:f3:13:a1:a4:43:43:
                    91:ec:91:c3:47:9c:b5:14:b1:9b:82:bb:ad:de:25:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:35:9F:E9:44:56:09:EA:54:BB:9E:6A:39:65:86:8D:13:FF:C8
            X509v3 Authority Key Identifier:
                keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:31:46:ca:ab:12:0b:94:05:5d:01:27:7d:4d:af:ca:0d:
         20:da:d5:15:a9:8b:06:3f:72:70:cf:43:30:e8:69:da:4d:a8:
         b9:95:1f:3f:1f:3e:18:4e:ce:ad:71:a1:84:e1:ac:05:7a:62:
         7b:02:24:56:0f:cf:af:eb:77:e4:94:07:d0:8d:a6:f4:21:b9:
         a0:a0:3e:11:70:14:91:26:a9:d3:64:79:4b:31:c2:87:fb:c0:
         06:57:62:09:89:69:0b:92:65:e5:39:6d:70:96:1c:74:4b:e2:
         89:bd:2a:31:8c:56:aa:3f:93:fa:61:5e:17:f7:17:ae:4c:fc:
         fb:b2:6a:01:22:71:21:63:21:2d:01:d8:71:4a:65:32:0b:04:
         af:53:47:8f:6b:d1:0f:de:2d:3c:a7:f2:90:ee:3b:e1:ae:a4:
         96:de:b7:12:8c:5c:fc:9c:bd:1b:d5:33:32:bd:e1:bc:bc:6f:
         f2:7e:6c:a5:b5:4b:3f:97:cf:bf:60:1a:26:5b:23:e0:64:91:
         b8:98:7c:65:86:d4:4d:73:9b:98:a2:b4:f6:fb:66:c6:31:db:
         ed:df:c2:eb:9f:96:38:af:86:42:7e:8a:10:c8:9c:07:ab:fc:
         88:7d:72:c4:7c:88:b2:0c:ca:2c:16:5f:77:a4:d0:ab:c7:d1:
         7d:82:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:36:41 2025 by rpki-client