Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File:                     AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier:          +J5CA/2daAFrG+eYpoVjxMN8ANDkttyRaGc4q13BmQ0=
Subject key identifier:   32:BD:B2:A6:CA:BE:BB:0F:E8:94:78:BD:3C:97:CC:A9:6A:2C:87:4C
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer:       /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial:       0198D4E0EBE0D0A0DB8A766BC75F018DD2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:46 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:46 +0000
Files and hashes:         1: 1-9t0f5pWOLIrwK_cL4cCfcUs--g.roa (hash: e1mtbJ2ht6De/xDwLJN90SOW2t+nYcE6pdn+FIjcDXQ=)
                          2: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: tMyraFw/CQO5ovZjWLaEc3sWH85NuCT8bB3S6/cfvJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:eb:e0:d0:a0:db:8a:76:6b:c7:5f:01:8d:d2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
        Validity
            Not Before: Aug 23 03:02:46 2025 GMT
            Not After : Aug 24 03:02:46 2025 GMT
        Subject: CN=32bdb2a6cabebb0fe89478bd3c97cca96a2c874c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:b4:71:a8:bc:a5:5e:5d:3b:fe:88:ed:6c:
                    8e:9a:21:af:e6:a9:0d:9a:ab:a0:19:fc:e6:bf:75:
                    11:5d:a2:3d:b5:cf:8e:ee:85:8e:73:8f:5b:13:0e:
                    33:ec:f4:85:22:bc:d2:b3:ef:54:5b:b1:80:7c:e1:
                    e7:c3:77:8c:2b:56:36:d6:6c:78:e6:64:45:72:5e:
                    6d:75:93:dd:05:2f:28:61:a0:a2:c4:31:9c:9c:1a:
                    d1:4e:d7:dc:e3:98:a0:01:7a:71:27:fd:e1:fa:4f:
                    46:47:c9:5e:35:c4:f6:ba:de:c8:8f:a6:8b:62:0e:
                    5d:7a:57:1d:c4:69:b4:ae:3a:40:27:7b:cb:50:29:
                    dd:61:bd:4d:91:6b:48:3f:3f:f3:5c:d0:f4:a1:1c:
                    0e:79:ff:5e:8d:e0:d6:6a:1c:46:f5:d1:51:bb:b0:
                    a4:c6:d9:e8:d4:fb:66:98:0e:1b:1f:0d:45:57:60:
                    fa:14:fd:f9:3b:70:fe:68:1d:e3:16:aa:83:10:4a:
                    9a:8b:80:51:6e:f3:09:b5:32:48:47:17:ce:93:7f:
                    55:96:cb:5f:8a:32:9e:34:09:3b:d0:c4:a3:9f:63:
                    45:41:2e:16:54:00:3b:36:78:5e:72:6f:d3:70:45:
                    06:5f:a4:75:95:5d:dd:88:a0:99:24:28:47:15:fa:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:B2:A6:CA:BE:BB:0F:E8:94:78:BD:3C:97:CC:A9:6A:2C:87:4C
            X509v3 Authority Key Identifier:
                keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:1c:16:d3:21:c2:48:53:d3:b3:76:c0:6d:7b:6c:3e:8e:
         b3:48:ae:a0:23:e5:92:ba:b2:4e:71:e0:dd:98:d3:2b:ca:55:
         b9:90:e9:f9:7b:29:53:ba:d0:ef:a0:1d:82:9b:a9:08:be:a5:
         34:5d:be:b9:29:ce:28:36:78:d0:0b:7c:db:44:a3:ea:94:82:
         84:44:9b:df:9c:5f:63:53:ad:c4:1d:62:13:74:d5:19:ea:ed:
         b2:bc:33:f6:17:2b:97:1a:da:44:1e:f8:50:5b:99:98:31:68:
         6d:e0:4c:f1:1c:7f:3b:71:90:aa:43:85:ef:4d:d7:5a:8d:af:
         b4:dc:ad:ec:c8:88:8a:c2:54:56:2d:b0:8c:cb:6b:73:67:00:
         af:6b:74:ca:07:c9:23:63:b9:ee:85:ff:fa:f7:2e:8b:b2:c5:
         7c:38:e6:43:d3:30:34:7f:1c:ca:6f:77:ef:dd:da:b8:71:55:
         12:17:a1:ab:52:5f:1e:82:a9:22:eb:40:83:3f:08:c3:6c:0c:
         23:15:42:e6:2d:ff:34:55:78:90:3f:40:14:bc:0a:ff:d2:64:
         32:1c:e2:62:7c:36:fc:1d:f9:49:10:46:57:e1:14:dc:93:50:
         bb:36:ed:40:e3:ab:c2:8f:98:fa:33:d0:cb:f7:e7:66:5b:f9:
         ab:e3:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:36 2025 by rpki-client