Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File:                     AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier:          rZjPFDYHlwnmQ4DRFYcifitMec2qovbO4hpogk37rWQ=
Subject key identifier:   7E:59:56:08:48:5A:41:F5:15:8A:D1:EA:FC:42:74:57:9F:85:CD:CE
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer:       /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial:       0196C5A86BFDD5BCA12ED353574C0604DEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 18:01:11 +0000
Manifest this update:     Mon 12 May 2025 18:01:11 +0000
Manifest next update:     Tue 13 May 2025 18:01:11 +0000
Files and hashes:         1: 1-9t0f5pWOLIrwK_cL4cCfcUs--g.roa (hash: e1mtbJ2ht6De/xDwLJN90SOW2t+nYcE6pdn+FIjcDXQ=)
                          2: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: rYU2p2ftaiV9GLsXqcPMxFuQxmH/jOafsV2X4cXfWCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a8:6b:fd:d5:bc:a1:2e:d3:53:57:4c:06:04:de:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
        Validity
            Not Before: May 12 18:01:11 2025 GMT
            Not After : May 13 18:01:11 2025 GMT
        Subject: CN=7e595608485a41f5158ad1eafc4274579f85cdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:c5:05:bf:be:9e:fd:4f:8d:8c:c9:17:a3:
                    41:27:40:2f:3f:5c:14:ec:58:c9:b1:0e:f3:52:bc:
                    08:72:09:fa:df:fe:90:78:7a:cd:e6:04:c0:c8:34:
                    97:95:7a:1a:14:cd:26:b1:d3:90:aa:1e:7c:87:b5:
                    5d:a2:aa:0f:e8:ef:ca:e0:ec:b7:58:bf:00:f5:5e:
                    07:84:d1:52:9b:40:59:aa:de:f4:4b:d5:1f:c1:85:
                    69:44:65:7d:74:c2:20:7a:2d:a1:d5:dd:4c:3d:28:
                    05:f6:be:e7:56:91:f7:c9:fb:af:84:df:02:52:93:
                    6c:61:80:9f:5d:ea:a2:be:2f:32:04:a9:a6:57:fd:
                    5d:a2:6c:9b:ee:18:a1:69:cd:51:93:cc:2b:03:14:
                    1d:1e:38:2d:e2:c6:eb:44:aa:81:14:3d:5c:8f:7a:
                    bf:44:e6:fc:5c:86:f4:f8:82:d9:0d:2b:9b:7c:c9:
                    03:4c:6b:ec:fb:a2:5b:55:e3:00:99:9a:6f:fb:95:
                    58:f0:9f:a0:e1:c7:66:be:7a:45:e1:54:0d:5a:52:
                    cd:97:68:48:1d:f5:c8:4d:0a:97:9d:5c:9a:86:4e:
                    b7:14:32:fe:80:ad:6c:87:30:eb:3c:40:45:ee:12:
                    76:cc:d3:63:ad:0f:6a:46:0d:01:f2:21:53:f3:53:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:56:08:48:5A:41:F5:15:8A:D1:EA:FC:42:74:57:9F:85:CD:CE
            X509v3 Authority Key Identifier:
                keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:28:f0:28:e3:ae:56:92:08:41:40:b1:6e:46:4c:e3:b0:a3:
         11:d7:bf:61:fd:3a:d9:4c:05:47:a0:94:b4:12:c9:8c:5e:e3:
         0f:cc:1d:93:b4:df:b2:f1:4f:cd:2b:e3:c4:13:78:ea:73:2d:
         33:39:77:66:88:6d:07:62:c2:28:c2:43:d5:71:5b:ef:6a:59:
         15:8c:ab:bf:31:dc:1d:44:12:a3:b7:07:9e:07:a8:b2:4d:65:
         a3:ea:a8:40:cb:14:a7:f7:5b:5c:d5:c1:52:40:c4:ef:87:d2:
         a3:47:77:c2:7b:dc:c4:8d:90:f5:44:49:79:29:ee:bc:f7:8a:
         ff:06:30:07:d1:da:30:ee:69:7f:e1:07:5e:6e:1d:91:14:33:
         a2:a9:7a:d4:8b:a6:ed:6f:7e:3a:cb:7a:29:71:73:03:77:b7:
         22:8b:f2:1a:09:1b:98:b7:c3:ec:d3:4b:1c:03:6d:70:6b:3c:
         4f:d7:df:5f:c4:a5:88:c5:df:20:21:b7:eb:eb:2c:77:95:1c:
         6e:de:c0:7b:fa:dc:98:c0:e0:49:9e:a0:cd:4f:7e:15:52:72:
         60:ef:8b:59:52:c5:63:cf:82:67:92:31:d1:f9:bd:7d:1d:f0:
         46:65:f8:b4:52:68:33:23:7e:72:6c:7e:dc:48:81:35:29:51:
         ac:65:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:16:03 2025 by rpki-client