Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File:                     mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier:          5LyxOgJDZNspOCpJey2buqhx51JDYFcalYkDiXY5Wl0=
Subject key identifier:   34:2E:BF:CC:EA:55:02:5A:E0:60:17:42:AB:9C:5A:32:45:17:D8:F9
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer:       /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial:       01987E9C7905160CF9262E133F935134A65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 09:00:40 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:40 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:40 +0000
Files and hashes:         1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: X3rZVZwX8GIzSD2dDCJl69TcDg92bigLKPdRlP6WJgs=)
                          2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:79:05:16:0c:f9:26:2e:13:3f:93:51:34:a6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
        Validity
            Not Before: Aug  6 09:00:40 2025 GMT
            Not After : Aug  7 09:00:40 2025 GMT
        Subject: CN=342ebfccea55025ae0601742ab9c5a324517d8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:45:49:b9:39:e1:72:e2:cd:37:83:e0:69:
                    34:9b:10:bc:66:17:0b:0c:7b:bf:96:ff:42:1a:7f:
                    b5:61:f0:c4:2b:50:b3:a2:c4:43:7c:f4:fe:2a:5f:
                    d4:1a:dc:00:9d:9f:38:1a:bb:94:e9:50:93:6c:0a:
                    e8:c7:fe:e5:d8:80:fa:e4:43:ad:24:ae:eb:2d:f2:
                    b9:b6:e3:96:a8:1d:4e:0a:51:c4:b4:9e:4b:49:45:
                    07:9e:db:2d:5e:9a:b5:32:08:6e:eb:0b:e0:74:ea:
                    33:1d:09:d9:5b:90:fc:79:f3:80:f2:28:34:49:f9:
                    d9:63:e2:c4:0b:8c:3c:02:14:29:a9:da:66:65:a6:
                    7d:eb:ae:95:4e:0c:8e:ff:56:30:61:df:a8:89:3c:
                    09:24:b0:98:89:62:36:0b:fc:1c:32:f9:5a:d3:7c:
                    d2:29:9a:17:85:1c:45:2e:4c:14:12:7e:01:be:92:
                    19:c7:85:ef:75:1a:de:0a:e7:b7:ee:95:bf:b6:33:
                    af:b9:01:13:18:1a:42:bd:d6:16:17:12:6d:03:dc:
                    35:bd:5f:06:da:26:70:33:48:23:42:c1:1d:25:a3:
                    d7:f9:c9:d9:e3:10:21:37:9c:f3:a1:58:11:77:f5:
                    7d:19:02:99:65:dd:de:f3:91:2d:21:87:9b:3b:56:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2E:BF:CC:EA:55:02:5A:E0:60:17:42:AB:9C:5A:32:45:17:D8:F9
            X509v3 Authority Key Identifier:
                keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:91:b9:e4:ce:e7:e2:b4:c0:41:4d:06:f8:84:ec:e0:f1:c7:
         fc:66:25:30:ee:04:ea:67:d4:51:4d:b6:34:60:1c:7c:04:78:
         90:25:30:f8:02:23:4e:f1:2a:b1:99:05:75:6f:d8:b1:91:18:
         23:b8:00:81:6a:ba:50:88:f9:2a:25:70:44:e9:e0:55:78:e3:
         2d:38:88:44:f1:58:e2:de:fe:34:81:4e:f6:a5:76:a0:21:cd:
         3d:2f:9a:2d:35:05:73:d6:e8:bc:7f:fb:9c:0c:26:5e:60:96:
         9a:15:84:40:66:48:a4:20:cd:41:3e:7d:7c:24:ff:72:95:bb:
         9b:08:32:99:da:04:87:6a:f2:b3:32:ef:4a:a4:6c:0e:08:c8:
         73:c3:df:b6:df:31:db:44:d6:c2:ac:d5:79:c1:cf:ce:3b:68:
         38:ac:8d:22:ad:5a:59:29:42:92:16:69:43:a9:65:0d:a0:f3:
         44:b1:7b:87:53:b2:c5:ec:f2:52:89:ce:da:46:25:71:5d:dd:
         c5:cb:20:c0:dc:80:c6:bc:d8:b3:df:bc:69:c9:43:b1:1a:75:
         8d:26:31:4c:56:e3:05:e5:2b:24:db:e6:fb:83:76:66:bd:c6:
         0f:69:4f:6f:02:11:8c:1d:17:83:2a:fa:cc:b0:60:e4:2d:82:
         77:27:cf:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nHkFFgz5Ji4TP5NRNKZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OWJhZGZkMmExN2ZjYTNiOTM1YTM2OGUyZTAzYWQ1NmQ2
ZTNiNjIwHhcNMjUwODA2MDkwMDQwWhcNMjUwODA3MDkwMDQwWjAzMTEwLwYDVQQD
EygzNDJlYmZjY2VhNTUwMjVhZTA2MDE3NDJhYjljNWEzMjQ1MTdkOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rpFSbk54XLizTeD4Gk0mxC8ZhcL
DHu/lv9CGn+1YfDEK1CzosRDfPT+Kl/UGtwAnZ84GruU6VCTbArox/7l2ID65EOt
JK7rLfK5tuOWqB1OClHEtJ5LSUUHntstXpq1Mghu6wvgdOozHQnZW5D8efOA8ig0
SfnZY+LEC4w8AhQpqdpmZaZ9666VTgyO/1YwYd+oiTwJJLCYiWI2C/wcMvla03zS
KZoXhRxFLkwUEn4BvpIZx4XvdRreCue37pW/tjOvuQETGBpCvdYWFxJtA9w1vV8G
2iZwM0gjQsEdJaPX+cnZ4xAhN5zzoVgRd/V9GQKZZd3e85EtIYebO1arvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQuv8zqVQJa4GAXQqucWjJFF9j5MB8GA1UdIwQY
MBaAFJibrf0qF/yjuTWjaOLgOtVtbjtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQt
YTYyODUwZmVlYmI1LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQtYTYyODUwZmVlYmI1
LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJG55M7n
4rTAQU0G+ITs4PHH/GYlMO4E6mfUUU22NGAcfAR4kCUw+AIjTvEqsZkFdW/YsZEY
I7gAgWq6UIj5KiVwROngVXjjLTiIRPFY4t7+NIFO9qV2oCHNPS+aLTUFc9bovH/7
nAwmXmCWmhWEQGZIpCDNQT59fCT/cpW7mwgymdoEh2ryszLvSqRsDgjIc8Pftt8x
20TWwqzVecHPzjtoOKyNIq1aWSlCkhZpQ6llDaDzRLF7h1OyxezyUonO2kYlcV3d
xcsgwNyAxrzYs9+8aclDsRp1jSYxTFbjBeUrJNvm+4N2Zr3GD2lPbwIRjB0Xgyr6
zLBg5C2CdyfPDg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:27 2025 by rpki-client