Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File:                     mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier:          ALNCYmOcZ+ysQqw+JWu+pdaF2wHW8Py3kOveW3XhF5w=
Subject key identifier:   74:A4:7D:BB:F6:96:4D:81:B1:BA:D0:7D:37:63:F4:83:E1:24:B2:45
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer:       /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial:       0197499F5AD867F159E05266BCF566942AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 09:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:09 +0000
Files and hashes:         1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: sE8zEJrwJpGii9htluIdy/hyFdcCle5hjH4St3DC08I=)
                          2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:5a:d8:67:f1:59:e0:52:66:bc:f5:66:94:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
        Validity
            Not Before: Jun  7 09:01:09 2025 GMT
            Not After : Jun  8 09:01:09 2025 GMT
        Subject: CN=74a47dbbf6964d81b1bad07d3763f483e124b245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:ba:53:ca:a9:06:fe:a9:d7:89:ea:d8:19:
                    37:8f:f4:fa:82:59:b6:93:4e:d6:1e:28:16:ea:3c:
                    aa:39:88:51:aa:7b:61:63:72:f8:e6:d9:0d:02:0e:
                    f8:39:03:90:53:a2:2b:b5:22:e2:1d:ed:5b:41:51:
                    97:a7:83:c5:0e:1e:59:8d:ae:66:74:4b:ab:c1:85:
                    b1:ee:fc:a3:d6:57:b2:07:f8:13:52:79:f0:f8:82:
                    29:5c:42:bf:6d:ae:59:87:1a:30:27:ed:2b:68:7b:
                    99:86:c6:d6:02:f9:1f:76:63:d8:6d:32:0b:3f:34:
                    18:a1:bc:97:90:79:04:da:fc:c3:fa:2e:33:38:ef:
                    f5:77:83:31:40:6e:f5:fb:a7:bd:c8:0c:b2:1f:70:
                    43:b2:41:60:db:84:f7:45:95:d8:0f:91:c5:c1:ce:
                    e7:36:ec:85:0d:cf:a7:bf:a1:3c:ac:03:7d:bc:5a:
                    ec:f8:a4:c2:d4:10:e5:df:4b:c7:90:a5:1c:d4:93:
                    c0:63:dd:45:d9:be:82:59:12:86:5e:57:1e:eb:c5:
                    1f:69:f0:43:8c:5b:d7:b4:96:a0:4f:1a:e6:eb:56:
                    ca:34:56:fe:80:46:f6:0e:2a:58:a5:12:96:cf:08:
                    81:77:42:83:d5:7f:b0:e2:5b:7a:fa:5d:87:05:dc:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A4:7D:BB:F6:96:4D:81:B1:BA:D0:7D:37:63:F4:83:E1:24:B2:45
            X509v3 Authority Key Identifier:
                keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:8a:9e:84:35:2f:89:f6:1f:b4:f5:be:bb:e1:e1:f1:f2:
         73:b9:9e:f4:be:08:2e:78:d0:ab:53:eb:08:b3:35:43:69:dd:
         e0:01:d7:cb:ad:f6:d5:2c:45:62:c5:4c:4b:56:02:d7:24:73:
         04:a9:59:38:92:a9:04:38:f9:e4:5c:2c:9d:69:21:9d:2c:9a:
         cf:fe:aa:58:18:d3:aa:03:78:d1:ee:f3:e1:8a:2f:00:2a:0f:
         d8:dc:e4:9e:09:9d:da:5a:fb:27:43:e9:42:55:76:1e:69:3c:
         30:8b:43:7a:4a:b6:b5:27:d8:18:7d:34:3c:33:92:e8:95:89:
         92:5a:f2:b3:5e:b5:f1:5e:bb:df:90:64:29:f9:7e:6a:41:6b:
         7d:b4:91:41:17:3d:17:5d:7e:24:3a:06:88:e4:c9:64:bf:28:
         0e:5c:a8:d0:23:7d:99:b0:59:47:6e:bc:cb:12:80:3b:d0:88:
         7c:85:67:4e:10:02:a2:95:90:f0:b0:99:63:ee:cd:24:68:ce:
         44:a6:7d:04:f7:84:76:07:40:07:8b:d9:22:8a:ed:20:9b:f2:
         32:e3:42:8d:d7:8b:7f:46:93:67:94:3c:a0:98:15:8c:8d:78:
         dd:a8:a5:6f:01:7d:1e:93:08:04:02:15:7b:35:85:29:81:47:
         d5:f1:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:08 2025 by rpki-client