Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          mY8bw/ZmhcyimQWLIOQ/pXhOxejrB/9uySeZHfSfyD4=
Subject key identifier:   7E:2A:E2:42:C7:2F:FA:F6:8E:35:B5:EA:01:A7:BB:D3:6C:D7:0F:DD
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       019E1FECD7DA4B12203A756226083989AEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          0876
Signing time:             Wed 13 May 2026 06:01:15 +0000
Manifest this update:     Wed 13 May 2026 06:01:15 +0000
Manifest next update:     Thu 14 May 2026 06:01:15 +0000
Files and hashes:         1: 1-eiN7B-RFScdE21_gJKHIITSXjg.roa (hash: 1ehBu7W42prULVp42w/k9Sm9INGVI1W18EKu86GiRBg=)
                          2: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: Yd5LBcg7kbtt7LHmdp58RdLAP2+toyucCHLFtENdByI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:d7:da:4b:12:20:3a:75:62:26:08:39:89:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: May 13 06:01:15 2026 GMT
            Not After : May 14 06:01:15 2026 GMT
        Subject: CN=7e2ae242c72ffaf68e35b5ea01a7bbd36cd70fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:14:e1:be:1b:54:7b:03:bd:3c:04:1b:c6:
                    23:9c:f6:b7:19:06:06:83:36:9a:12:2e:b6:49:0b:
                    66:55:38:4f:d6:77:6b:d3:13:17:e5:a8:5c:f2:4c:
                    0e:89:1e:4b:11:a5:cd:b3:f5:d4:b0:8c:18:1f:8d:
                    a9:b6:c6:3f:04:da:d1:91:ae:55:e0:d5:8b:18:17:
                    b9:54:52:9e:68:83:7b:f0:38:ce:32:fa:6f:e2:03:
                    fb:5a:e4:43:e5:97:8d:e0:9a:a2:f2:30:f6:f8:04:
                    d0:eb:6d:06:69:a1:52:30:74:b9:e6:97:cf:d3:e3:
                    ee:59:49:d5:81:a5:33:ce:3b:4b:f3:cd:87:e0:29:
                    69:8d:3d:f6:c5:75:c4:a6:92:7b:ca:e5:fa:9f:80:
                    7e:24:af:87:68:b7:0c:ec:86:ea:2c:1e:95:93:e0:
                    8d:35:84:14:6b:11:bd:7c:3a:91:2f:76:0b:1c:cb:
                    94:75:80:4b:da:ff:6a:be:91:c3:c2:fb:20:fd:69:
                    98:95:e3:fe:4f:8a:d4:d6:1d:33:39:6c:d4:b3:1e:
                    e7:1c:ee:8e:2b:37:d8:70:f0:67:95:17:f8:c0:55:
                    0c:56:a7:be:db:fe:94:fe:fb:25:a7:fe:22:f6:f8:
                    b1:b6:1c:5d:e5:86:b1:76:22:f1:b9:1c:e2:a3:67:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2A:E2:42:C7:2F:FA:F6:8E:35:B5:EA:01:A7:BB:D3:6C:D7:0F:DD
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:f1:6c:07:46:9b:94:df:10:7d:ea:67:65:2e:5d:2b:ae:
         f0:71:9e:6a:23:c8:d3:00:af:24:c6:9a:44:3e:89:e2:51:63:
         6d:d0:ba:e7:e7:e4:5d:9a:a6:ec:0e:6c:51:64:f6:83:dc:c9:
         36:dd:26:d9:00:88:4d:03:f1:87:4c:79:06:65:3c:d0:f1:19:
         a3:52:ba:9b:34:c0:03:73:3d:93:dc:51:a9:75:04:32:40:9d:
         44:44:36:7c:01:86:14:10:a3:0c:e5:57:b3:3a:95:7f:40:09:
         1b:a0:16:35:9a:bb:ca:33:fe:e3:95:af:ad:09:e2:de:5d:5c:
         11:cb:6b:45:ff:c7:2f:e1:15:3f:2b:07:af:10:f9:d0:67:6c:
         b1:73:21:05:d5:1d:0a:47:0a:3b:62:17:7e:37:98:ee:bd:44:
         d8:80:c6:00:ad:ff:83:fc:cc:d4:55:8d:38:29:9a:d5:6f:69:
         5a:16:77:fc:78:3b:66:f2:0d:84:03:14:67:79:5c:b2:d8:8a:
         4b:45:dc:88:77:9c:8e:31:0b:3b:98:29:3f:cf:e2:5d:9c:ee:
         b4:e9:2c:95:c8:32:d6:08:85:1a:1b:35:0f:9c:3d:14:a6:f2:
         c9:77:e7:2d:d0:f0:1c:7c:33:bf:cf:76:30:15:d6:d6:92:5a:
         47:67:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:37 2026 by rpki-client