Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          brh1RjRvI8LdaW7m7cE/AYPwRmvcctXv6D9g1K0JwpQ=
Subject key identifier:   12:BA:B4:63:1B:5C:42:7D:58:14:B8:18:E8:4A:D7:2B:06:41:27:C2
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       0196CE065D7D5248190B634241F98A7305FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          026E
Signing time:             Wed 14 May 2025 09:00:45 +0000
Manifest this update:     Wed 14 May 2025 09:00:45 +0000
Manifest next update:     Thu 15 May 2025 09:00:45 +0000
Files and hashes:         1: 7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa (hash: NBi3hLwQwbGQATz90wDw9LkVn07LZS1piVwE8dvvsug=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: 3oyMQf9j3z19MlQ5ywbQNXbcs5t1khgcrcnv58LIAfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:5d:7d:52:48:19:0b:63:42:41:f9:8a:73:05:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: May 14 09:00:45 2025 GMT
            Not After : May 15 09:00:45 2025 GMT
        Subject: CN=12bab4631b5c427d5814b818e84ad72b064127c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:6f:62:ca:43:57:1d:4e:4e:e1:5e:d4:35:
                    5f:72:f7:f6:13:f2:8c:ef:6e:89:8f:9c:cc:64:d8:
                    a1:6c:fc:3e:c7:e2:bf:3e:30:49:fe:e4:ac:7d:07:
                    a3:10:f7:17:dd:10:4b:5c:e6:eb:2d:70:0a:f5:a3:
                    d6:97:84:1f:9a:ef:90:46:72:a4:8d:f3:18:b3:ed:
                    d2:50:d3:e7:68:d7:a7:37:7a:20:3c:8d:43:ef:1c:
                    43:d9:da:e0:40:84:38:1d:a3:50:fb:af:6e:b7:7a:
                    3a:6a:3f:1d:74:db:15:a9:fe:3b:b1:29:47:02:77:
                    5b:d9:a8:00:11:7b:71:9f:4c:90:e0:18:36:fc:5e:
                    41:2a:2a:fc:5b:ca:e2:d9:3e:7a:5d:19:8a:d3:94:
                    32:6c:82:cf:37:2e:f6:c7:d5:bf:95:c0:5a:2e:6b:
                    ec:3a:e6:90:0a:11:b5:13:98:f6:9d:79:4b:10:6c:
                    87:24:d6:2d:ba:9a:e8:2b:43:7e:02:95:fb:d2:8d:
                    74:92:0e:fc:96:9c:dd:aa:c0:a7:99:54:85:24:e7:
                    f6:e5:a8:43:58:eb:87:37:82:b1:55:04:88:c9:a4:
                    b9:f7:14:cd:45:30:48:b8:1d:0d:50:d8:97:e0:cb:
                    8f:d8:e6:4b:2a:76:3c:1d:77:df:46:73:d0:25:9f:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BA:B4:63:1B:5C:42:7D:58:14:B8:18:E8:4A:D7:2B:06:41:27:C2
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:bc:75:75:76:c7:07:91:25:87:3f:84:79:21:63:bc:2d:
         fe:cc:39:ab:37:d1:12:fc:a0:62:9f:17:fd:ba:c7:c6:ee:67:
         b1:d7:a4:b4:de:de:d4:f0:d0:02:9b:62:79:6c:cf:70:e3:68:
         da:74:6e:f8:86:93:09:9c:4b:6f:29:e9:e9:8b:87:8f:6d:f6:
         f9:b9:f4:72:e9:a8:89:68:f0:e1:03:87:2f:d0:6b:54:37:8e:
         d5:40:bf:59:31:52:60:1f:45:ea:95:bf:29:73:4c:52:dc:09:
         31:9f:23:25:d0:b7:0c:2c:20:17:05:91:f4:37:36:0b:d0:a1:
         d4:2d:9b:7c:b3:70:30:15:d0:04:5e:70:a0:14:d1:1e:4d:1c:
         77:b9:83:e2:ec:87:11:65:5e:11:ff:f5:8d:73:f9:bb:76:e6:
         7d:dc:8a:cb:27:27:17:a8:3d:dc:90:db:2c:8d:e0:79:13:81:
         9b:2c:22:0e:0a:e7:88:f2:50:ba:c1:e5:ac:52:e2:0a:0d:30:
         9f:25:00:f3:47:31:6b:53:b4:c1:69:c4:48:d8:9f:39:b0:4d:
         b1:35:98:2c:6f:0a:3a:1e:fd:0c:f4:17:64:29:93:8e:76:f2:
         a3:da:85:81:2a:96:0c:68:4e:ec:d7:88:ce:63:4f:cc:89:80:
         32:5c:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:36:07 2025 by rpki-client