Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File:                     mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier:          pEs/+SC5XyP38lJId9W/cEd/gcUBC8CcPfV5k9UGGwU=
Subject key identifier:   31:8C:CC:0D:2E:96:05:D3:73:71:99:D5:4C:9F:66:8C:EF:26:58:8F
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer:       /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial:       019D27A86CF53A33043C4231660C0348A080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 01:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:42 +0000
Files and hashes:         1: 6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa (hash: PnJoMCRg40MuZsT7+Fw5OTXBvqQLFkm5aYCcz/8c7Zc=)
                          2: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: erLHgPZzYKulKbErCEFRpFjqfjjt/i35NGqA2dIFEcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:6c:f5:3a:33:04:3c:42:31:66:0c:03:48:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
        Validity
            Not Before: Mar 26 01:00:42 2026 GMT
            Not After : Mar 27 01:00:42 2026 GMT
        Subject: CN=318ccc0d2e9605d3737199d54c9f668cef26588f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:5c:8b:dd:09:12:73:78:2c:b3:9b:11:9b:
                    57:ab:f7:39:30:d7:20:93:1c:c1:91:3a:9b:c7:b9:
                    6e:f8:70:c4:1c:4e:3c:f3:93:21:f8:a5:52:34:a5:
                    24:68:da:59:0b:81:85:6d:bd:b4:1f:06:c3:67:dd:
                    2f:43:b3:35:8c:24:23:9e:77:50:ca:e7:2a:51:24:
                    af:c1:74:a8:4c:b2:5b:d7:12:24:85:bc:cd:92:37:
                    d8:0d:9d:fa:2e:ab:51:cc:49:62:b0:fe:cf:ab:1d:
                    bf:16:47:62:44:26:61:df:92:f0:50:85:68:94:91:
                    d8:c3:0b:19:5b:df:53:c2:f3:73:22:34:78:e3:4c:
                    f3:a8:01:7b:25:a3:92:15:15:52:1a:25:56:37:98:
                    7a:e1:54:28:ca:d5:a2:30:46:4d:fc:c4:b7:15:bd:
                    4f:45:04:33:7e:b1:ab:e5:16:64:49:72:67:16:a0:
                    24:a3:32:61:f6:26:d3:db:4f:32:f1:7e:c3:65:62:
                    b6:4a:1c:03:d7:63:b2:8f:e2:d1:2e:47:44:97:41:
                    b9:5b:79:0c:18:58:15:f7:ac:98:0c:9a:80:80:d1:
                    07:33:3f:63:a3:df:6f:54:9e:42:0e:5e:32:e0:01:
                    8a:95:09:65:1b:1e:46:19:9e:33:dc:bd:18:7c:26:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:CC:0D:2E:96:05:D3:73:71:99:D5:4C:9F:66:8C:EF:26:58:8F
            X509v3 Authority Key Identifier:
                keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:cd:0c:7f:59:c8:d2:da:44:73:8f:6f:be:16:3c:8e:6e:be:
         e1:20:60:ef:0c:f2:b2:12:4a:1f:63:b6:b6:c3:b9:50:39:00:
         40:90:04:1f:f4:46:eb:92:ce:c1:b2:a1:02:84:fc:96:3f:56:
         89:64:09:31:10:9f:86:a7:a6:26:02:06:00:47:e9:31:5f:e5:
         d5:4c:d3:68:be:1e:23:9d:a5:7f:af:77:6c:61:f7:c8:aa:5f:
         14:3d:75:b4:5e:5c:af:c6:e5:63:68:58:1f:c1:6f:d1:d1:f6:
         3e:d7:ef:1a:56:78:de:57:f1:51:4b:c2:b6:a7:0c:22:03:5e:
         96:5e:2a:df:0f:ad:ee:e8:dd:ec:71:c5:7f:b9:ef:0a:0d:12:
         e7:a6:8e:05:06:70:42:d6:06:03:f2:6a:16:59:a5:3d:a0:db:
         a1:15:b6:4c:b9:d9:7a:b9:81:9e:20:21:a0:82:c4:1e:e9:44:
         8b:71:a4:3d:eb:9f:4b:ad:a1:60:95:9f:0f:50:7a:ea:df:67:
         c0:b9:0f:3d:cf:68:62:6c:9e:0f:8d:80:b4:0e:ed:51:cd:85:
         15:1b:9d:fa:b7:18:a9:a6:8c:ab:10:a2:44:26:cf:a6:55:b4:
         ef:c4:49:27:a2:2e:4d:6d:c0:ab:22:cf:21:2c:d2:04:7e:9f:
         a8:ac:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:54 2026 by rpki-client