Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          qsi0rhaW3hk1MPdKUPccLvMBa2No3FrF33etx7s0Djg=
Subject key identifier:   D9:21:74:C8:0F:EC:4F:6A:CA:43:F0:53:B7:57:95:A2:D1:9C:5C:BC
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       01A0D0123CCA7EE348A600A50373D881CD20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          079D
Signing time:             Wed 23 Sep 2026 21:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:51 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: XGKu6ISGwe3gd10jNmStuGuWYy7oRq+ULfhReoCwE0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:3c:ca:7e:e3:48:a6:00:a5:03:73:d8:81:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Sep 23 21:00:51 2026 GMT
            Not After : Sep 24 21:00:51 2026 GMT
        Subject: CN=d92174c80fec4f6aca43f053b75795a2d19c5cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:86:3f:e5:3d:0d:b4:b3:0f:84:3b:b5:00:
                    a1:61:97:80:57:eb:12:2c:7b:a0:a6:aa:63:2f:20:
                    41:d3:26:a1:81:53:1a:ad:27:7e:c9:95:fd:10:69:
                    0c:57:77:10:7f:b4:3c:ed:77:e5:11:42:66:c5:b4:
                    60:90:71:ca:9d:c4:a4:df:d2:4c:f1:f4:85:b4:1e:
                    54:b1:d9:ea:81:00:8b:3f:a2:6b:e1:20:e3:33:75:
                    2e:2f:01:d9:d0:a8:d6:cf:0f:c9:4d:3e:30:1e:6b:
                    09:eb:4f:74:c1:84:38:a9:dd:77:96:27:e1:41:36:
                    b2:e5:1a:5e:e6:96:72:7a:59:d4:7e:d3:ba:8e:47:
                    2c:f1:99:bc:c9:3e:ab:b7:a5:43:66:4f:dc:23:1d:
                    5c:2e:d7:51:43:c0:c5:3c:aa:c3:85:ae:64:52:92:
                    b6:22:a1:53:f9:50:46:79:65:49:53:a2:06:ae:99:
                    7a:6b:90:86:87:92:c4:e1:b5:59:ec:32:21:e8:f4:
                    94:46:1f:96:87:b8:24:46:52:2b:02:4f:23:00:3d:
                    ff:65:68:e2:c0:c9:bc:3b:d6:fe:87:71:3e:64:d5:
                    d6:8d:02:21:8c:73:ef:f9:89:8e:73:8d:24:13:ed:
                    f2:80:a1:77:79:c7:0f:88:a5:97:39:ee:36:7f:0a:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:21:74:C8:0F:EC:4F:6A:CA:43:F0:53:B7:57:95:A2:D1:9C:5C:BC
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:6e:4e:5e:ac:42:d7:55:8f:3f:c4:4a:24:e5:fd:f1:0d:
         2d:19:f1:97:53:df:6f:f0:9b:28:0d:a4:41:c6:85:3f:87:85:
         dd:d3:09:3b:67:2f:d9:a9:3b:ce:8e:10:0f:12:8f:87:29:12:
         03:b3:c2:18:d0:5a:cb:63:90:d2:3a:08:8c:53:66:91:3e:e6:
         f6:0d:06:87:b7:9a:1c:bd:ab:46:41:a7:61:63:63:98:87:cd:
         96:e8:92:5b:cb:81:34:3b:18:59:0c:da:c5:d4:18:d8:8a:61:
         3e:af:ee:01:57:15:0c:2e:ee:b8:0e:5b:b0:d7:54:bd:76:be:
         cf:06:94:77:e0:00:60:ee:67:8a:55:c6:39:7e:95:eb:ae:fa:
         29:6d:3d:26:d9:4c:51:be:43:b0:ca:b0:00:9c:65:1a:cc:fd:
         34:84:1f:28:1c:4b:26:1c:f6:ee:96:f0:57:55:dd:80:77:00:
         48:e3:96:8f:f8:f5:e2:0c:31:72:41:09:02:47:56:3a:4e:ae:
         6e:66:3e:96:81:49:68:62:67:1d:5e:cb:1d:e7:93:5f:42:17:
         b3:e8:9e:74:32:e6:a4:c3:26:9e:df:cf:50:69:fa:65:be:94:
         37:92:7d:69:06:a1:30:1b:af:23:93:88:04:ef:12:42:ca:0d:
         77:15:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:37:10 2026 by rpki-client