Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          ghWnhaJxLx+k9GHEdXAvg+t425wweT/GfwWemWUUp6A=
Subject key identifier:   9E:5D:59:04:2D:B0:D6:8D:AE:58:38:FF:7E:80:8B:2E:90:37:AB:CE
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       0199221F2CE693A1DF5FBDFE0554C4730F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          092B
Signing time:             Sun 07 Sep 2025 03:01:32 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:32 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:32 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: B6TijgDvsIw057dLiP2RbBTWKoHI9yh9t9UOKDLSJOk=)
                          2: xKaI03GURyzSZb-rRcYioTYAybk.roa (hash: HlTvUY61ftuf4HfBCvEW2aFKorP77hcqRc1NgwCXzCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:2c:e6:93:a1:df:5f:bd:fe:05:54:c4:73:0f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Sep  7 03:01:32 2025 GMT
            Not After : Sep  8 03:01:32 2025 GMT
        Subject: CN=9e5d59042db0d68dae5838ff7e808b2e9037abce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:4a:89:a8:7a:c6:88:4e:ef:f5:a5:69:c9:
                    b9:02:a3:40:4c:88:8e:8c:45:8c:31:0c:03:ad:e9:
                    93:a9:5e:33:1a:7d:74:b6:72:23:cf:e3:2f:04:e9:
                    11:97:c1:28:d9:81:2f:3a:a8:44:45:6a:51:c0:ee:
                    17:d3:1c:1d:ab:1b:4b:eb:f4:c1:96:a5:d1:90:94:
                    57:9e:0a:22:44:2b:73:96:2d:31:94:6f:d6:3a:4f:
                    82:56:97:3f:09:f7:72:c0:46:e4:5c:ff:8d:dc:6a:
                    71:c4:b4:8a:7f:e1:25:88:26:86:62:5a:f2:ef:80:
                    99:21:9f:8d:4a:2c:4c:0b:d6:3e:48:c6:63:2d:1c:
                    16:2f:b6:68:27:eb:10:09:e8:ca:73:c4:37:08:51:
                    f8:d6:f1:da:2c:0e:fe:e8:19:a1:82:57:f6:4f:39:
                    3a:d6:6c:77:67:87:03:de:d3:b8:08:1f:be:2c:ab:
                    63:85:79:2c:93:d2:53:82:2d:43:f3:7e:48:de:d8:
                    b5:45:6c:e0:35:98:08:a3:a5:3b:7a:44:36:0d:ec:
                    1e:15:0f:c4:ed:02:c7:0f:cd:4b:2b:1f:8b:1b:ab:
                    4d:11:e7:c9:1c:2c:9b:ba:a2:a3:a2:07:25:7d:12:
                    2f:cb:8b:d3:7d:a8:94:34:ae:15:d7:3e:e0:b2:29:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:59:04:2D:B0:D6:8D:AE:58:38:FF:7E:80:8B:2E:90:37:AB:CE
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:28:6e:17:b3:19:39:57:cf:67:f0:3b:a5:fb:7b:bf:86:
         11:ea:e3:4c:e6:40:3a:a2:b3:3b:f7:5d:06:7f:c9:31:60:9c:
         6a:3a:e1:56:6d:ea:4b:7b:e3:3c:ee:6a:4c:ea:bf:1e:50:4a:
         1f:29:a9:db:08:4f:d7:15:c1:c4:a3:ce:0c:85:d1:38:a5:bc:
         1d:09:d9:be:5d:d6:8a:20:6a:5c:00:83:21:f2:eb:5d:e3:e9:
         e9:38:3a:58:3a:d7:c8:56:58:e8:15:86:36:aa:4a:7a:e1:dc:
         26:7e:80:1c:46:0b:e6:9b:2c:97:08:09:c2:2f:ab:a6:eb:48:
         3a:52:00:91:8c:0d:30:94:42:a2:56:99:92:e9:9e:cb:5f:53:
         2f:1a:1a:71:4e:3b:bc:c7:1e:e7:1e:34:c9:e7:c7:cb:d2:ec:
         40:65:ce:b3:a5:3d:15:9b:e5:b5:b7:d2:31:f8:34:b6:17:79:
         38:5d:50:ae:9b:aa:26:ee:ae:e3:57:5a:da:94:f6:d3:a3:75:
         e3:b7:a2:cb:dc:fa:21:15:ca:a1:70:90:a4:8f:5e:76:0d:8f:
         5d:a4:d2:31:80:6e:16:12:7c:98:e0:30:53:1a:e9:f3:9f:b3:
         2b:3b:a4:ef:96:fe:30:0f:50:09:cc:30:68:85:3c:0a:a7:66:
         13:e2:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:06 2025 by rpki-client