Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File:                     mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier:          MMnVrGn8tyhcHUOWwkliaKp+XWZ2EGq+cnxksXv7edM=
Subject key identifier:   A0:6E:AA:A7:BA:01:44:09:9D:0E:03:FD:15:D6:25:98:03:AA:28:EC
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer:       /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial:       019F93921C5E6B6EE2746D05E163B6C6452E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 10:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:53 +0000
Files and hashes:         1: 6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa (hash: PnJoMCRg40MuZsT7+Fw5OTXBvqQLFkm5aYCcz/8c7Zc=)
                          2: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: MKjAuYzIpC0vPV6bHdVQDbp8qz8uNOmuZnaGBZPqLSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:1c:5e:6b:6e:e2:74:6d:05:e1:63:b6:c6:45:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
        Validity
            Not Before: Jul 24 10:00:53 2026 GMT
            Not After : Jul 25 10:00:53 2026 GMT
        Subject: CN=a06eaaa7ba0144099d0e03fd15d6259803aa28ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:87:15:77:87:ce:bd:9e:ae:a6:da:c8:09:
                    c1:91:bb:93:20:ac:a2:ca:67:20:91:33:17:42:99:
                    7f:15:08:14:25:38:ca:43:b6:d0:b7:4f:54:6e:a3:
                    f4:37:77:b8:07:36:4a:f6:89:62:08:12:af:55:96:
                    e1:13:0e:e1:94:7d:49:7a:a3:bd:68:f5:8a:0c:24:
                    a9:9b:8b:63:32:bd:b2:79:ef:31:f7:2c:4f:6c:75:
                    7d:5f:09:c4:f2:64:1c:39:74:39:e0:d6:3f:2b:8c:
                    ec:c5:0c:97:79:13:d5:4a:fb:3a:ab:18:c6:d0:ee:
                    3e:81:dd:87:12:f3:b9:5f:b3:82:c1:bf:1a:1a:db:
                    f5:82:5c:d3:2b:f2:1b:50:7a:d5:f0:e3:31:fc:69:
                    7f:23:05:22:76:1f:5c:d4:db:2a:90:92:98:9c:5c:
                    34:7c:6a:2e:4a:77:4b:ad:f5:99:59:fd:84:40:c3:
                    51:92:51:a4:50:50:32:47:a1:65:9c:1f:78:c1:04:
                    11:50:ef:15:6f:03:38:01:75:31:31:01:4e:9c:d1:
                    6a:74:96:d7:63:19:dc:e6:33:9e:4d:1c:fd:32:f7:
                    a6:e4:2c:4e:d1:35:a3:84:0f:4b:67:a3:03:37:27:
                    09:d6:65:51:c7:c7:fc:4a:fd:2c:31:b4:0c:19:94:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6E:AA:A7:BA:01:44:09:9D:0E:03:FD:15:D6:25:98:03:AA:28:EC
            X509v3 Authority Key Identifier:
                keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:32:ff:f0:3c:59:6c:d1:94:1e:a0:e3:ef:f8:2f:b5:67:
         9d:92:3f:99:34:b6:ff:23:9a:39:08:8e:79:b8:be:c8:16:ac:
         7c:5d:f0:87:c4:8c:4c:8b:75:57:c9:8e:35:04:29:22:97:cc:
         56:81:06:35:bc:4d:65:0d:71:28:39:cf:c4:72:ed:c6:68:ce:
         e8:d5:c7:15:93:62:63:f4:91:aa:89:53:e7:73:5a:40:c9:eb:
         e6:42:9b:55:7d:15:3b:b1:62:55:21:4e:45:1c:34:85:92:6f:
         a9:4c:59:21:e4:5a:59:49:f2:9b:fe:1e:5c:59:01:bf:ec:70:
         82:33:57:e2:9d:46:40:a7:76:6d:71:b5:c1:63:db:b1:d6:f3:
         6b:4b:86:00:48:09:b4:ff:a7:bf:db:b5:59:aa:4e:93:a4:24:
         c9:d1:fe:f2:7f:99:d4:5f:70:34:b4:ba:0b:54:40:a3:d8:cc:
         a1:a6:13:6b:18:e1:72:3c:22:e1:45:f3:f9:ca:da:5c:24:06:
         52:00:4d:2f:16:49:d9:14:e7:b4:6e:83:ee:1c:17:a1:b4:51:
         52:b3:58:78:d9:87:90:30:5e:18:d0:45:11:f0:7a:40:54:6a:
         ac:fc:56:42:35:e4:90:1f:e9:f3:f8:99:e4:e9:92:10:5b:f8:
         84:2c:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:47 2026 by rpki-client