Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File:                     mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier:          n2uuNfnPSrhv/BjdTJyeOFALQnWV+YSgE5vxl0Ggx/A=
Subject key identifier:   08:52:3A:EA:EE:1E:21:F4:27:EC:53:D6:90:C8:72:8E:2C:A8:E0:39
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer:       /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial:       01984C668CA994DAF57CC1DA021CE0DB4D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 15:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 15:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 15:00:45 +0000
Files and hashes:         1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: Zf+/LJ7vBvsFvswj2uGRQN3wgHI1yn/0w/xoQknC9UE=)
                          2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:66:8c:a9:94:da:f5:7c:c1:da:02:1c:e0:db:4d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
        Validity
            Not Before: Jul 27 15:00:45 2025 GMT
            Not After : Jul 28 15:00:45 2025 GMT
        Subject: CN=08523aeaee1e21f427ec53d690c8728e2ca8e039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:78:1d:31:5e:dc:72:1f:88:8a:d5:25:dc:
                    6b:d7:78:9d:0d:f0:6c:8c:a3:a6:eb:f4:1e:b8:83:
                    67:7d:b4:cd:92:cc:2b:c1:dd:10:d0:b6:d2:e5:e3:
                    55:a3:e5:87:ae:b1:08:56:64:22:58:8d:09:7b:b7:
                    22:84:4d:ef:e4:c8:c0:d4:07:82:23:ca:21:0c:cc:
                    91:b7:79:a1:6f:98:63:e6:3f:63:27:90:86:a1:91:
                    5c:f5:a5:a3:e6:7b:cc:bd:18:d5:38:c7:78:4f:8a:
                    70:a4:3d:5a:87:b3:c3:17:ce:d1:05:c7:86:61:73:
                    ea:11:f4:f9:1c:e5:4c:e8:92:98:25:44:ca:77:f4:
                    db:bd:23:58:ab:3c:f8:7d:32:df:36:33:49:c4:15:
                    17:38:0c:de:52:f5:c0:1c:20:17:41:16:4c:65:0a:
                    93:d7:63:49:09:f6:6b:81:53:fb:a5:ad:f8:3f:98:
                    8e:93:39:b6:a6:3d:62:98:f0:cc:ed:c4:18:ec:5b:
                    3f:97:52:9e:4b:f7:00:3f:42:65:8a:00:73:7b:0c:
                    2f:5f:3d:f7:75:96:0d:22:2b:ff:5c:5f:78:61:f3:
                    65:c6:6a:d3:f3:bf:31:1f:55:cf:63:25:ec:44:ae:
                    82:24:05:72:b2:51:5d:c3:6e:70:55:02:2f:f6:4b:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:3A:EA:EE:1E:21:F4:27:EC:53:D6:90:C8:72:8E:2C:A8:E0:39
            X509v3 Authority Key Identifier:
                keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:69:f2:52:6c:bd:b2:81:e0:78:b2:35:e2:53:32:60:9a:49:
         2c:d9:ce:fb:95:ba:b2:f4:7a:b0:4c:1a:4a:83:1a:61:72:3e:
         3c:f6:f8:8a:a2:a9:b7:d8:d7:58:61:d0:fc:67:07:a1:1f:a3:
         6a:cc:d4:5d:0e:4f:68:ba:52:95:5b:d3:10:03:88:c2:54:e6:
         3e:0d:96:c8:4f:02:34:e8:ed:7a:ac:3a:f4:2c:71:f3:29:d3:
         cd:93:1b:3b:4a:2b:d5:1a:18:59:98:01:69:67:df:d0:97:e0:
         3c:0f:3d:22:ac:13:f1:83:32:04:79:b9:f0:1b:21:6e:05:e4:
         db:17:a3:38:32:4c:8a:2a:ab:f9:b3:0c:cb:5f:37:4b:79:df:
         0f:b3:87:3e:3c:3f:b6:3a:d9:4a:9a:ab:07:10:c0:31:6c:1a:
         ba:3e:13:e9:a5:fd:62:70:6e:81:f3:bb:68:fd:72:ed:8f:77:
         f8:60:11:3e:7d:e1:b2:4b:0a:32:2d:74:5c:c9:d3:b3:bb:66:
         08:33:f7:3c:ed:d3:9f:2a:f6:c8:e5:e2:ce:d8:d0:fe:79:ee:
         f9:ce:d6:67:d7:3c:ff:4c:57:13:6e:3a:4e:fe:98:cb:be:99:
         37:3e:60:63:6c:b3:6d:a0:71:dc:b1:9b:f9:54:7a:53:67:05:
         dd:6a:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:34:38 2025 by rpki-client