Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File:                     mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier:          XxKRdzsPJ/U6qlHRHMWxgsRH4v9hECtYL35uAO5z2Gg=
Subject key identifier:   A6:3F:B0:DF:35:5D:D1:1D:84:C7:27:6D:80:1E:5B:43:55:19:77:7B
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer:       /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial:       01993612D5CF603369F75722A172F2C064F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number:          167E
Signing time:             Thu 11 Sep 2025 00:00:27 +0000
Manifest this update:     Thu 11 Sep 2025 00:00:27 +0000
Manifest next update:     Fri 12 Sep 2025 00:00:27 +0000
Files and hashes:         1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: qIkBAyn97TXjSIBPUgbIYaImARB88DJPP3/+aCFvlNw=)
                          2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:12:d5:cf:60:33:69:f7:57:22:a1:72:f2:c0:64:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
        Validity
            Not Before: Sep 11 00:00:27 2025 GMT
            Not After : Sep 12 00:00:27 2025 GMT
        Subject: CN=a63fb0df355dd11d84c7276d801e5b435519777b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:ac:8f:71:5e:23:de:85:1a:29:86:aa:75:
                    f5:7b:39:09:4c:77:82:58:ed:01:0e:aa:a7:08:c8:
                    74:38:f5:95:34:81:86:74:87:d9:11:4c:a4:1c:aa:
                    a6:7b:59:49:b7:48:cf:94:26:05:0e:59:69:0b:e2:
                    bf:af:2c:ca:03:e8:72:93:a3:c5:55:a4:23:3f:10:
                    f5:96:eb:cd:12:ee:97:65:53:ee:08:60:cd:ce:0e:
                    32:16:1b:77:6f:6b:08:95:ee:d5:76:4f:94:6e:f1:
                    0d:ed:be:26:7b:94:bd:f7:5d:bb:d4:33:bb:0b:ce:
                    24:5e:e4:69:c5:51:d8:0a:2d:2d:ab:ff:5c:92:da:
                    c7:8e:1a:be:07:ea:8e:2c:1b:2a:7d:67:a7:77:06:
                    8a:09:3c:7b:2e:09:02:d9:71:d2:37:e1:16:ac:03:
                    07:9f:77:ee:ed:19:bb:36:b5:d7:ab:a9:eb:b4:7a:
                    18:67:c5:7f:56:d7:04:c0:df:ee:52:3b:2a:71:06:
                    22:08:8a:12:b7:d0:49:85:98:12:ec:3d:c8:85:52:
                    df:b3:5d:b2:34:8f:0d:b0:dd:75:1e:89:81:83:1b:
                    06:7c:bb:86:cc:d8:d4:6f:f0:f0:d1:62:52:b3:4b:
                    65:84:2d:d4:2b:6a:4f:8e:41:ed:c8:f0:47:d5:ce:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:B0:DF:35:5D:D1:1D:84:C7:27:6D:80:1E:5B:43:55:19:77:7B
            X509v3 Authority Key Identifier:
                keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:51:a2:54:fb:ce:a3:f2:13:c4:73:ca:d0:8c:61:cf:7e:5a:
         c9:23:c3:fc:c5:c3:ab:27:3e:61:0e:c0:bb:67:2e:16:c0:39:
         a2:d0:7f:1b:96:7f:15:9e:e8:4f:23:c7:ce:25:fc:5d:0c:41:
         40:5d:30:4b:d8:ab:c5:a7:4b:a4:31:30:49:6c:b1:ab:24:e1:
         e9:81:9b:43:7a:2e:c1:e0:84:94:0e:82:42:a5:ba:b9:95:1b:
         cf:60:50:72:be:1c:9f:e2:aa:a6:3c:0a:5a:07:33:0c:0d:27:
         d3:01:69:29:bf:ec:02:60:25:83:71:29:2d:46:3a:5e:31:53:
         fb:7f:4b:c5:c9:ba:88:5f:67:1a:43:65:33:bd:9a:38:7b:8d:
         4c:2f:83:fb:07:26:68:e3:ee:5c:06:0e:ca:8d:2a:ad:1b:ce:
         94:f2:ad:1e:52:11:ff:d0:bf:84:0d:26:99:78:cc:77:e6:66:
         71:98:38:7a:55:a6:a6:ec:92:1d:46:dd:75:37:20:e1:f6:e7:
         82:92:95:44:fc:84:20:3a:50:cb:a6:07:3b:d5:52:47:ad:82:
         15:fd:16:c8:c6:e2:a1:f5:21:e0:15:44:ba:6c:ce:88:dc:6d:
         4e:c9:2e:93:df:2e:5a:82:1b:84:bb:32:c4:0d:0e:71:37:c8:
         a6:ab:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:50:03 2025 by rpki-client