Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File:                     AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier:          KSdEB+akxpJNrnk+Ux6/038kle9Qt1/yIUHha4loE28=
Subject key identifier:   E8:B1:38:ED:47:E7:3A:D5:F5:1B:3A:6E:05:03:98:AC:C1:06:A2:6C
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer:       /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial:       01A0CB593E55D9C0B4C30E976A14D611C10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 23:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:18 +0000
Files and hashes:         1: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: m8bfGUAtkjvvnY33VJlsRchdsuNjsWIYpL0cazitb6s=)
                          2: mrbGDz_JyzHUmctgZbt8kMQCk2k.roa (hash: bHrPDy7XdNfVwQuGMxJyeHOhQdXBmJyAp8XdPQQHOUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:3e:55:d9:c0:b4:c3:0e:97:6a:14:d6:11:c1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
        Validity
            Not Before: Sep 22 23:00:18 2026 GMT
            Not After : Sep 23 23:00:18 2026 GMT
        Subject: CN=e8b138ed47e73ad5f51b3a6e050398acc106a26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:aa:ad:41:3d:d0:05:98:40:8c:b0:7a:57:
                    90:83:f4:73:fc:5c:e7:36:0d:90:b2:ce:de:10:69:
                    8f:a6:50:7f:79:b7:bd:46:40:b4:e8:c5:21:5d:3e:
                    cc:43:d2:13:7f:54:d2:78:37:7d:f6:be:80:cd:e0:
                    fc:80:26:a9:a5:95:54:0b:cd:eb:b1:aa:ef:0e:e5:
                    0d:5e:1d:e2:72:a9:47:b8:96:81:b3:4c:17:6b:1f:
                    48:ad:c3:24:f3:c0:4e:e6:2b:0d:cf:35:5e:c1:82:
                    f7:7c:cc:13:4f:91:ff:a6:f2:1c:de:29:65:1c:4c:
                    dc:d8:c7:28:0d:49:12:47:24:3b:02:b8:ca:cc:1c:
                    ad:89:b1:6f:bb:cf:64:3d:35:d9:61:7f:33:00:87:
                    87:6d:46:6a:47:38:84:dc:af:36:17:ae:e9:f5:83:
                    99:9e:f6:13:95:af:ce:d2:24:9c:c6:ab:8b:fe:e6:
                    22:79:61:da:8a:b0:a3:ae:96:6c:12:20:b7:eb:dd:
                    c4:de:0b:70:f3:b1:78:3d:38:51:e1:d0:6a:20:db:
                    9c:e9:b2:18:5c:a3:96:48:cb:d2:57:28:bc:d0:a9:
                    5a:af:d0:44:fa:92:e3:89:67:54:6c:ac:7c:89:01:
                    d9:87:16:40:03:5b:52:d5:e6:32:b3:90:ce:6a:55:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:38:ED:47:E7:3A:D5:F5:1B:3A:6E:05:03:98:AC:C1:06:A2:6C
            X509v3 Authority Key Identifier:
                keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6d:11:bb:8d:66:bf:a0:68:07:f4:41:3b:29:eb:84:8e:5a:
         d7:f1:09:78:0c:ef:68:fb:75:0d:8e:b7:24:62:96:62:ba:3e:
         f1:7d:a9:cd:31:ae:59:ec:56:96:6f:77:25:fb:40:e6:45:ba:
         1f:87:2c:ba:6c:3f:b9:89:4d:46:ef:9b:84:14:b0:18:b0:03:
         43:c4:d3:cf:d5:2f:c8:92:20:1d:fb:9e:28:06:95:f8:60:70:
         54:a4:82:66:df:ec:6e:8a:be:73:35:07:4f:b0:82:b8:4f:4b:
         e2:8c:46:ba:63:1b:33:96:61:89:db:d6:f0:cd:95:df:bc:e9:
         2c:9e:c9:65:d5:32:d4:e0:c4:23:f2:be:ed:f1:97:9a:86:79:
         93:79:48:01:38:38:65:c7:70:e3:7a:a2:ad:02:ca:01:d4:99:
         36:f2:b2:cb:ef:a9:2a:67:64:e9:5c:4c:1f:7f:06:9b:05:6e:
         50:96:d3:4d:49:b9:ce:9b:7c:07:98:16:51:a3:3b:9c:1b:58:
         b6:f7:14:11:56:3e:cc:e8:3f:e9:50:a1:a9:45:4e:44:fb:d1:
         91:c4:8d:8a:1c:5e:a6:f6:d6:0a:06:ec:08:5a:03:41:bd:e0:
         b6:bd:91:c0:43:27:d6:9f:da:8c:4f:75:c2:0f:2c:6f:2b:3b:
         59:10:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:56 2026 by rpki-client