Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File:                     AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier:          +yb1HQsDMXj2ZXeMG5SO7ATs62Loode6V4KtYrSJnj4=
Subject key identifier:   D4:F8:F6:1E:15:72:82:3C:DE:CD:60:97:58:A8:F9:1D:F2:69:4A:BF
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer:       /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial:       019849D389B0BB4A561365FAE1928D42749A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 03:00:56 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:56 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:56 +0000
Files and hashes:         1: 1-9t0f5pWOLIrwK_cL4cCfcUs--g.roa (hash: e1mtbJ2ht6De/xDwLJN90SOW2t+nYcE6pdn+FIjcDXQ=)
                          2: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: eJfWthQU2bV8Tkdc6jjgjjpWJQzwftgnmbnpE2lsc78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:89:b0:bb:4a:56:13:65:fa:e1:92:8d:42:74:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
        Validity
            Not Before: Jul 27 03:00:56 2025 GMT
            Not After : Jul 28 03:00:56 2025 GMT
        Subject: CN=d4f8f61e1572823cdecd609758a8f91df2694abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:39:ca:2a:e5:18:00:b1:61:7e:8d:1a:d6:
                    af:da:a3:a5:dd:58:e1:23:d2:b1:5e:4c:02:ef:3c:
                    62:68:31:b0:54:ac:ab:52:50:e9:15:b4:06:31:f6:
                    d0:db:4a:38:f2:28:f1:11:fd:63:6e:86:7c:64:23:
                    58:d1:79:1d:94:1c:d0:a4:b2:df:93:eb:34:35:e7:
                    57:d9:4a:d8:74:a8:37:8f:18:3d:89:15:68:ef:ec:
                    e0:3d:ab:7c:37:4b:8d:bb:d0:8b:4d:47:7e:33:78:
                    c1:67:17:c2:98:ad:65:8b:5e:51:1f:4c:77:3d:52:
                    1c:0a:7e:b1:24:56:a0:4e:56:34:6c:e5:f6:e1:d2:
                    af:7e:da:24:92:ee:59:3c:f2:cd:24:fb:0b:87:18:
                    bc:db:5e:4c:f6:51:ca:70:69:f1:ad:2a:3f:bc:47:
                    79:1a:47:c2:66:bb:a9:40:c2:01:81:d2:ef:d3:32:
                    46:e4:a2:a0:ef:76:b0:68:4b:e2:58:9b:ef:83:c0:
                    6a:74:34:a9:65:be:4c:4d:7f:84:9f:01:76:11:33:
                    dc:ea:0c:20:d1:ca:f5:18:63:3a:8b:01:6d:13:5c:
                    07:5b:07:bc:16:03:4d:34:02:f2:d4:17:5b:3d:fc:
                    b7:f7:7c:ac:bb:e0:c3:40:96:80:9e:8e:8d:a0:ec:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F8:F6:1E:15:72:82:3C:DE:CD:60:97:58:A8:F9:1D:F2:69:4A:BF
            X509v3 Authority Key Identifier:
                keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:17:53:19:a3:9a:43:dc:ba:6f:de:36:1e:89:e5:37:0d:6b:
         c7:8b:5f:c7:1d:04:cf:d8:21:29:a5:aa:fd:7e:0f:40:df:65:
         4f:a9:42:54:58:a3:62:80:cf:4a:ef:14:e0:7b:3a:12:36:fc:
         0c:89:5c:c2:2d:73:63:f4:68:93:c3:bf:65:09:8b:bf:fd:e8:
         8c:1c:5f:7e:b3:70:46:06:60:7a:bf:83:d6:3b:f6:e2:87:fc:
         f6:5a:83:ef:04:41:64:7f:e3:4f:a1:99:6a:5d:8b:c9:fd:24:
         c6:b3:fa:e1:f0:74:6d:c5:d1:b9:ec:ef:e5:73:64:17:1d:b4:
         db:c7:6b:5c:5e:74:0b:db:e5:90:bd:9f:fa:34:0e:51:44:85:
         92:c4:44:c5:87:9a:6a:87:5e:f5:03:30:06:f8:7a:ff:ab:ca:
         68:26:3e:85:19:ea:ba:b3:1d:28:9f:39:36:93:ed:2d:97:c8:
         38:17:27:4a:c2:d8:fc:01:a3:65:32:9f:66:02:aa:b6:bd:1e:
         78:ed:73:8d:d9:e8:08:e1:c7:00:ee:1f:81:06:ba:2b:7f:22:
         f6:65:76:a5:20:a9:9e:f8:54:b3:27:b3:1f:69:b9:d0:46:33:
         99:92:2e:3f:8d:99:89:32:50:c2:14:1c:67:25:a9:46:56:27:
         07:74:53:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04mwu0pWE2X64ZKNQnSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmI4YzU0NGUwZGViY2ZkNmQ3NTU0ZDE1OTVmMDQ0YzIw
NTA3ODMwHhcNMjUwNzI3MDMwMDU2WhcNMjUwNzI4MDMwMDU2WjAzMTEwLwYDVQQD
EyhkNGY4ZjYxZTE1NzI4MjNjZGVjZDYwOTc1OGE4ZjkxZGYyNjk0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FM5yirlGACxYX6NGtav2qOl3Vjh
I9KxXkwC7zxiaDGwVKyrUlDpFbQGMfbQ20o48ijxEf1jboZ8ZCNY0XkdlBzQpLLf
k+s0NedX2UrYdKg3jxg9iRVo7+zgPat8N0uNu9CLTUd+M3jBZxfCmK1li15RH0x3
PVIcCn6xJFagTlY0bOX24dKvftokku5ZPPLNJPsLhxi8215M9lHKcGnxrSo/vEd5
GkfCZrupQMIBgdLv0zJG5KKg73awaEviWJvvg8BqdDSpZb5MTX+EnwF2ETPc6gwg
0cr1GGM6iwFtE1wHWwe8FgNNNALy1BdbPfy393ysu+DDQJaAno6NoOyv5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT49h4VcoI83s1gl1io+R3yaUq/MB8GA1UdIwQY
MBaAFAMrjFRODevP1tdVTRWV8ETCBQeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNTRkNDctYTExMi00OGM2LWI0YWEt
ZmIxOTQyYjVhZmY0LzEvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wNTRkNDctYTExMi00OGM2LWI0YWEtZmIxOTQyYjVhZmY0
LzEvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhdTGaOa
Q9y6b942HonlNw1rx4tfxx0Ez9ghKaWq/X4PQN9lT6lCVFijYoDPSu8U4Hs6Ejb8
DIlcwi1zY/Rok8O/ZQmLv/3ojBxffrNwRgZger+D1jv24of89lqD7wRBZH/jT6GZ
al2Lyf0kxrP64fB0bcXRuezv5XNkFx2028drXF50C9vlkL2f+jQOUUSFksRExYea
aode9QMwBvh6/6vKaCY+hRnqurMdKJ85NpPtLZfIOBcnSsLY/AGjZTKfZgKqtr0e
eO1zjdnoCOHHAO4fgQa6K38i9mV2pSCpnvhUsyezH2m50EYzmZIuP42ZiTJQwhQc
ZyWpRlYnB3RTUg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:13:27 2025 by rpki-client