Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File:                     uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier:          Ljo3c57/pf1vV4l6/jJEbH1lu5jN46RFbwCd+dn5LuQ=
Subject key identifier:   15:9F:E1:B6:7D:4F:DC:83:E3:F1:1B:25:33:70:37:AF:B5:05:B0:AA
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer:       /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial:       019922FA719C861EF89E7C30A20707B5ABB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number:          092E
Signing time:             Sun 07 Sep 2025 07:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:02 +0000
Files and hashes:         1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
                          2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: jmQuZml0QzYFjhMSCkvT5BBFLG89hkbBASLqtVMVTFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:71:9c:86:1e:f8:9e:7c:30:a2:07:07:b5:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
        Validity
            Not Before: Sep  7 07:01:02 2025 GMT
            Not After : Sep  8 07:01:02 2025 GMT
        Subject: CN=159fe1b67d4fdc83e3f11b25337037afb505b0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:ac:57:ad:f3:e9:9c:ab:58:8c:60:2b:18:
                    c4:44:5e:f6:a8:4b:d2:81:56:b2:ba:11:b2:9c:28:
                    42:ab:f2:71:c8:37:05:98:51:1f:23:b5:26:ed:f4:
                    2e:9d:a4:a5:ff:19:ff:91:ae:a0:6f:78:fc:2f:36:
                    05:80:68:49:ea:32:c5:32:fc:53:50:18:17:f0:81:
                    ec:9e:6e:ed:0a:37:bc:ef:01:e4:d2:06:f5:5c:6a:
                    7c:54:ec:09:cd:b0:76:57:3c:bd:c8:08:f3:d6:49:
                    11:66:04:c6:7b:3e:2b:79:b2:df:e4:54:c6:ae:c6:
                    ec:7a:0f:be:7a:ad:6f:d1:da:67:1a:41:e3:8b:81:
                    0c:c0:ab:5c:8f:d1:dd:37:d1:9f:2b:b9:15:1b:4a:
                    28:98:21:dd:73:1d:43:1f:a8:7c:fc:9a:8a:0a:66:
                    99:60:c3:48:58:5a:a1:84:ec:ab:4f:4e:48:65:b3:
                    46:8a:32:67:ff:b3:13:8c:32:2a:ba:a9:9b:a1:bd:
                    ec:f9:cf:a4:96:48:da:77:db:0d:c8:ba:d2:1e:8f:
                    16:06:02:04:14:23:9d:4d:69:6d:56:d1:e6:af:27:
                    a2:fb:68:aa:4f:9e:05:39:45:8c:29:26:3a:a2:96:
                    85:23:13:e4:c1:67:9d:8b:1f:4b:9a:bb:37:6b:72:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9F:E1:B6:7D:4F:DC:83:E3:F1:1B:25:33:70:37:AF:B5:05:B0:AA
            X509v3 Authority Key Identifier:
                keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:3f:c8:71:1a:aa:32:b0:9b:3f:a7:d3:37:e1:6b:ca:59:
         50:cd:b4:c4:a4:7e:68:9b:ac:fc:cf:7b:89:e1:a7:1d:8d:7c:
         f5:6e:9a:67:e0:2c:90:db:e8:f5:8c:73:44:82:c6:f8:19:96:
         4c:7d:54:16:a9:1f:15:91:dd:9c:fe:91:d1:97:77:af:46:88:
         ad:44:ee:f6:84:81:ae:53:f2:15:a7:76:07:ea:28:a1:79:76:
         1c:3e:7b:02:65:a9:bb:c6:46:d0:14:e5:1e:97:45:5c:b1:33:
         c3:f2:34:45:14:7b:9c:94:da:b6:b9:d9:f0:5e:fb:e9:f3:13:
         82:4e:df:c0:2f:c6:c9:ee:79:93:5c:10:f5:da:e4:b1:14:e7:
         5b:ae:e5:37:8c:eb:0e:08:dc:c6:c2:6f:76:7d:97:56:5e:7c:
         07:7e:51:ad:ed:5b:bb:77:39:a0:f2:32:b9:de:69:2d:67:2f:
         49:b1:22:92:e6:ee:87:e7:b0:d1:d9:14:a9:02:ab:9e:00:4a:
         c8:3a:e6:43:2b:dd:0f:55:a4:44:a4:ba:4a:2e:f8:7d:a9:35:
         21:13:6c:c6:57:5e:97:43:c2:e2:d1:7e:e5:c1:d6:33:16:39:
         a6:4c:65:42:54:70:85:6a:0b:a7:04:fd:69:d5:7f:a1:51:ea:
         78:fc:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:34 2025 by rpki-client