Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File:                     soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier:          SGrFuWh32zdcOnZEyvd8JEck5rbew5LVRSDAxVt0LLk=
Subject key identifier:   00:7E:2E:9F:67:0F:65:C1:F2:C4:3B:A9:56:51:DB:A3:E7:B8:69:AF
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer:       /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial:       019849D340CD81D0A8CE89B74E2DA4C94A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number:          0EF1
Signing time:             Sun 27 Jul 2025 03:00:38 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:38 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:38 +0000
Files and hashes:         1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
                          2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: Iw6FkEKGTJW/J/491F9qgh9F0SMmlrjvMWEfIhiZhqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:40:cd:81:d0:a8:ce:89:b7:4e:2d:a4:c9:4a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
        Validity
            Not Before: Jul 27 03:00:38 2025 GMT
            Not After : Jul 28 03:00:38 2025 GMT
        Subject: CN=007e2e9f670f65c1f2c43ba95651dba3e7b869af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:80:9d:a9:8b:c5:a8:aa:90:0b:6c:a4:c2:
                    90:5c:a1:ad:f2:09:8e:b9:aa:4d:f0:bd:1d:2c:85:
                    07:5b:77:e9:4a:10:57:58:30:36:11:d7:d4:48:3c:
                    b1:e3:0a:e4:2d:4a:9c:eb:63:95:1d:7a:12:5f:77:
                    d4:bd:6a:f3:fd:40:88:f0:0e:1e:15:a1:c8:0a:bf:
                    52:d4:78:e0:97:76:92:76:18:9a:9a:2a:c8:82:26:
                    69:8f:36:db:f5:ac:69:65:d3:53:f0:41:5e:57:66:
                    9e:fc:b2:05:fb:37:26:dd:6b:46:e2:d3:43:0c:42:
                    32:91:fe:46:4e:39:34:16:4a:ee:9f:89:a3:9b:29:
                    3f:94:3a:bb:3b:8a:0a:4e:92:aa:31:40:44:57:5a:
                    ed:ca:4f:e0:38:ce:60:cd:43:64:eb:c9:76:d8:86:
                    0a:0b:eb:b3:d5:da:ba:1a:c9:1d:4c:09:a3:6c:af:
                    d0:f1:fc:16:b5:ce:9e:83:c6:d1:c7:cb:9d:8b:3d:
                    99:c0:51:e8:e2:4a:e5:75:1d:75:a3:f0:6b:1f:1a:
                    a0:c9:4a:f8:97:2a:52:89:b8:d0:09:f0:ec:59:8a:
                    09:8a:62:70:a4:21:ef:16:b8:0b:33:e2:58:c8:05:
                    6b:ba:0b:2e:e7:a8:b4:27:90:b2:e1:25:f2:b2:4a:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:2E:9F:67:0F:65:C1:F2:C4:3B:A9:56:51:DB:A3:E7:B8:69:AF
            X509v3 Authority Key Identifier:
                keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:91:98:94:22:ed:e6:b6:ff:bb:b0:8d:81:ac:57:55:60:23:
         2c:49:d9:41:6e:45:49:31:d7:89:f7:13:54:3a:8f:d5:86:b9:
         13:7a:7d:e5:b2:68:82:23:af:e7:02:04:09:51:85:d1:2b:83:
         21:eb:9c:48:7b:3a:86:1f:83:d4:c6:e6:38:0b:cf:6f:8e:53:
         21:bb:33:c1:0f:52:05:88:f9:5a:5b:f2:68:8e:40:12:bb:de:
         84:3c:9b:f2:fd:eb:2b:f0:1d:b7:f7:83:a0:0c:c0:c1:63:4d:
         4c:3e:bd:9c:59:7a:e8:8f:b5:61:07:a6:53:2c:6a:06:52:22:
         eb:b9:f4:45:b7:dd:71:53:2b:2a:42:73:45:e8:8c:26:ca:f6:
         13:78:9a:ac:e0:48:c3:4c:e7:e3:5e:91:8f:ec:94:48:e5:5f:
         e0:47:36:1a:05:dd:3c:5f:93:df:ca:cb:3f:74:f4:76:98:f6:
         78:53:b4:b6:08:f7:13:8a:53:b5:ed:71:02:ab:2d:da:d1:10:
         b4:3c:17:76:69:ee:49:38:2f:76:69:93:e9:9d:80:7b:c5:25:
         8c:e5:d5:2a:d8:9d:3e:96:d0:5a:9e:3d:be:46:81:6d:44:71:
         34:be:f3:d0:e7:c7:8d:d5:78:b2:ef:75:01:01:63:34:cc:2b:
         7a:5b:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:25 2025 by rpki-client