Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File:                     AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier:          e3cqh5xSTDymhvUAbIUVf81qJKZMqy5Uh5OyQPC5SdU=
Subject key identifier:   DF:7C:EE:B8:DA:F9:18:64:DB:AB:63:D9:46:2A:1B:88:A2:F3:6C:47
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer:       /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial:       01964FDA1D819DFEDC358DCD4D269FC10F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 21:00:16 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:16 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:16 +0000
Files and hashes:         1: 1-9t0f5pWOLIrwK_cL4cCfcUs--g.roa (hash: e1mtbJ2ht6De/xDwLJN90SOW2t+nYcE6pdn+FIjcDXQ=)
                          2: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: ZltwFNgrXc4L0i4YcmDetC5SWJnc+z3klWFg3Vwxzuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:1d:81:9d:fe:dc:35:8d:cd:4d:26:9f:c1:0f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
        Validity
            Not Before: Apr 19 21:00:16 2025 GMT
            Not After : Apr 20 21:00:16 2025 GMT
        Subject: CN=df7ceeb8daf91864dbab63d9462a1b88a2f36c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:10:a6:54:41:59:ae:13:55:31:2c:54:8d:
                    37:16:3c:f2:07:3f:db:00:2f:f3:f3:5a:40:05:9a:
                    db:5c:ae:b5:40:38:3b:20:44:9c:61:6f:77:f2:b3:
                    c1:d1:d4:f9:72:40:7f:db:fb:f3:2a:ab:2b:fb:50:
                    b8:c6:0a:91:ba:77:59:79:9a:a4:66:b8:c8:7a:7e:
                    4b:20:26:0d:7c:45:f6:3a:06:85:ff:66:54:10:8e:
                    36:7b:3c:18:4d:3d:e0:3a:41:b7:f2:14:5b:25:0d:
                    15:b8:df:33:89:b6:f6:67:15:56:63:d3:12:f5:fb:
                    8b:93:02:3b:42:fa:cd:af:3d:da:0e:91:d5:db:05:
                    82:96:94:21:dc:08:da:9d:c5:a3:59:13:f8:1c:7e:
                    d1:dd:0f:96:72:ac:c6:da:48:c9:db:ce:37:bb:42:
                    7a:69:8d:c2:06:02:cd:42:fa:df:57:d9:90:b0:78:
                    1c:10:1b:ea:a6:5d:55:92:83:58:e5:03:e4:57:3a:
                    b2:ef:2f:8f:8c:1c:67:38:3a:c6:78:7c:13:43:02:
                    b0:f9:20:22:53:82:0e:26:e2:cf:7b:78:c3:26:ff:
                    e6:a2:8a:69:15:96:f3:15:fb:e2:80:2e:8e:2f:cc:
                    3b:c3:72:e6:40:e2:c6:53:74:29:f0:a2:4a:e5:7a:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7C:EE:B8:DA:F9:18:64:DB:AB:63:D9:46:2A:1B:88:A2:F3:6C:47
            X509v3 Authority Key Identifier:
                keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:dc:f9:90:fd:1e:06:a2:50:19:cd:fb:4c:55:09:b0:21:
         df:65:d0:e2:b7:5d:b0:b0:73:31:04:76:2a:2d:48:12:87:30:
         09:0c:f3:a6:f9:98:9b:ad:8b:ae:ea:78:5e:7a:8f:89:1f:23:
         4d:2f:c2:75:45:c8:5b:a6:b5:db:d0:08:b1:8d:45:4a:98:b0:
         7d:e0:45:79:ad:17:1e:7c:a0:3d:c4:c9:8a:4a:15:94:af:86:
         c1:7d:43:a5:02:c6:3d:56:ba:10:6a:6b:a7:99:e9:b3:64:34:
         06:79:de:d5:3a:63:44:4e:40:ad:65:7e:17:3a:7d:7d:ab:66:
         59:a6:27:e7:b9:43:3c:d7:06:9c:6d:6f:e3:8f:fc:9e:76:ed:
         12:c0:1c:96:e8:dd:96:c0:fe:8b:94:2b:ce:8a:ba:b9:76:f3:
         d0:69:35:11:76:b8:b0:5d:f8:97:9f:5c:30:da:3d:c4:c1:e1:
         42:c7:9d:4a:98:2b:b1:5d:eb:41:07:56:80:4f:e9:3e:c8:92:
         70:c7:06:7f:16:c6:f4:3c:ec:1d:fb:b5:c8:63:af:14:5d:5a:
         86:b5:cc:45:53:f1:a9:d5:61:6b:5f:50:d5:4d:83:a2:ef:e3:
         67:21:9a:57:20:b0:b8:eb:84:91:4b:20:3f:eb:79:56:0e:b8:
         b2:02:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:44:12 2025 by rpki-client