Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          E4VORX2GEG6bactWCRGO8HU+3xFXjjV1+rlsy1sPnNs=
Subject key identifier:   DF:B4:5E:52:51:23:A9:35:A1:49:2B:20:8F:A4:E4:1A:37:A5:B7:B4
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       0199FB0ED09AACA3FBA4E033747C11A6F429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0413
Signing time:             Sun 19 Oct 2025 06:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:16 +0000
Files and hashes:         1: 7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa (hash: NBi3hLwQwbGQATz90wDw9LkVn07LZS1piVwE8dvvsug=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: yUzbLSw3SNv0zeNJJS7/wALoeOXQuJtqkQBPzyZLWEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:d0:9a:ac:a3:fb:a4:e0:33:74:7c:11:a6:f4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Oct 19 06:01:16 2025 GMT
            Not After : Oct 20 06:01:16 2025 GMT
        Subject: CN=dfb45e525123a935a1492b208fa4e41a37a5b7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:de:af:87:48:68:0e:73:2b:6e:07:4a:a8:
                    ab:ea:1a:f8:63:40:88:55:01:a3:70:3e:0e:67:80:
                    d3:8b:76:35:de:bd:be:99:2a:17:6b:44:63:49:59:
                    32:77:3f:9e:72:2e:6e:fd:0d:a4:7b:fc:bc:16:fd:
                    5b:5d:b8:d9:2c:be:55:e6:81:a6:b9:b9:51:49:03:
                    cb:ff:7f:75:c3:0b:ea:c4:22:29:a3:e7:1b:b5:be:
                    df:f3:97:f6:d4:80:f6:f3:b7:cd:18:f4:06:2e:89:
                    b2:1a:1e:11:6e:c3:9c:73:85:37:70:3b:8d:ec:58:
                    b3:af:9a:82:a1:38:31:8e:ee:4c:1c:f9:77:8b:33:
                    d4:f3:2a:f9:63:4a:4a:f0:38:f9:12:ed:5b:be:75:
                    fe:61:e9:b8:7f:d6:85:cd:c6:40:e8:02:27:09:0e:
                    73:c0:fb:2b:66:1e:54:50:20:07:f7:67:03:22:17:
                    73:78:96:42:1f:2f:79:18:f0:11:bc:1f:fe:79:2b:
                    29:af:2e:18:3c:fe:80:ad:9a:49:c4:9f:37:76:86:
                    64:b4:5b:a1:bf:36:d9:87:bb:ce:c3:ec:77:a9:62:
                    ef:b6:1c:14:3d:ae:f7:b0:a9:4c:2b:19:80:12:b1:
                    e0:ec:78:c8:ef:75:af:89:d0:ff:6b:17:e4:99:93:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:5E:52:51:23:A9:35:A1:49:2B:20:8F:A4:E4:1A:37:A5:B7:B4
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:a4:de:60:a0:fc:b1:bc:84:5a:dd:2e:e6:b4:f0:24:a8:
         dc:43:b0:f4:35:17:f2:0a:4b:05:b5:91:64:05:65:c1:4e:1c:
         9f:55:36:a0:00:45:53:d3:a8:1a:c9:b2:c7:bf:98:80:11:aa:
         4a:07:72:0f:f0:8f:e1:b3:19:84:90:9c:e6:d6:39:bb:92:61:
         2d:24:d1:14:74:cf:10:80:d6:1b:2b:ac:32:7b:b9:14:44:68:
         1e:3c:12:d5:a7:d2:71:ff:8d:98:10:e5:83:42:01:f4:2b:b8:
         71:5e:08:7f:59:dd:1e:55:96:af:cd:a7:1c:aa:fe:65:3a:55:
         2a:9f:b4:55:92:e8:b5:a2:3f:9e:c2:be:aa:81:28:7f:5e:4d:
         f1:65:00:78:84:09:34:a5:01:d9:94:01:c5:4c:be:24:f2:d2:
         2e:c1:bc:da:78:86:b8:96:b7:15:39:99:7d:96:60:78:12:cf:
         73:6d:d3:c7:d0:24:8a:d8:7a:42:f3:d0:e6:f4:b5:df:ac:0f:
         0c:0b:a3:8f:86:2c:a5:1c:9c:a6:1a:92:fd:a5:bf:af:87:bd:
         a0:e8:cc:7e:8b:f3:5a:01:b0:2c:35:6b:63:34:ba:90:c3:58:
         3e:c2:57:ff:8c:fc:13:22:fa:eb:44:a5:a7:9d:7d:31:c3:30:
         45:32:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:03 2025 by rpki-client