Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          iiDsGqNpNUIk6o/wX71uxHjCI0ONpRoq/ph/ttM344g=
Subject key identifier:   AD:65:50:F5:94:B9:91:EE:88:6E:49:B9:B9:6D:F3:F6:FA:6B:71:D1
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       019E20922F132BAD6D0E178FF0ABEB0D74EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0639
Signing time:             Wed 13 May 2026 09:01:51 +0000
Manifest this update:     Wed 13 May 2026 09:01:51 +0000
Manifest next update:     Thu 14 May 2026 09:01:51 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: 5vqGfNaCt3EbL36QhxEX2kbxyC9sOVtE/lbx1SvpfhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:2f:13:2b:ad:6d:0e:17:8f:f0:ab:eb:0d:74:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: May 13 09:01:51 2026 GMT
            Not After : May 14 09:01:51 2026 GMT
        Subject: CN=ad6550f594b991ee886e49b9b96df3f6fa6b71d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:99:36:d4:ea:66:f5:1c:53:21:a9:39:3d:
                    49:ff:bf:3b:2a:79:24:ac:a0:06:d0:48:b7:ab:8c:
                    86:06:d8:6f:56:90:fd:01:7e:5f:a9:e9:1c:a9:bc:
                    e9:79:31:ed:6e:84:70:2f:f5:9a:78:d6:4f:ac:a8:
                    c8:d5:f5:6b:d5:67:40:1a:70:57:57:09:48:64:79:
                    b7:13:ce:94:b4:6d:1a:ea:84:65:8b:e8:26:f2:da:
                    b8:2e:d3:1d:61:14:43:21:58:f6:b8:24:19:25:9a:
                    0b:c1:29:32:d5:a9:53:f4:e7:cb:75:d8:77:32:84:
                    64:10:45:f1:94:9f:d8:43:74:68:36:cc:e5:e2:b7:
                    36:df:1a:40:b4:f0:f0:38:9a:00:65:79:32:06:14:
                    be:e1:b2:91:7b:75:6d:9b:c3:a7:f2:aa:97:a4:0b:
                    4a:8f:d6:39:0c:f3:c7:fd:68:0e:d7:7a:c1:63:68:
                    25:d9:60:cc:7c:6f:2b:ae:4b:75:d2:a9:ce:61:6d:
                    7b:fc:41:81:16:1e:c3:f4:e9:79:43:36:03:d6:5b:
                    49:11:c5:34:95:be:4d:d7:c2:da:d2:ff:3f:3a:d2:
                    2a:0a:e1:05:51:f7:a6:4b:a6:ff:95:e6:e2:e7:9d:
                    ef:47:df:2b:fd:2f:29:1d:1a:ac:e9:34:a3:df:88:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:50:F5:94:B9:91:EE:88:6E:49:B9:B9:6D:F3:F6:FA:6B:71:D1
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:55:69:1c:4b:04:89:14:9c:0a:3a:ea:bc:06:84:86:47:
         30:c1:77:4a:e1:eb:d4:85:62:54:ab:46:d9:2a:d9:f4:e3:6d:
         73:82:3a:fc:26:b3:86:a6:56:5c:a7:cc:5e:3d:78:bd:8f:99:
         6d:f8:69:28:d9:1e:70:67:11:fe:fb:7e:90:ea:25:d6:28:d2:
         ac:29:57:9f:af:65:36:9e:13:3f:83:1c:cd:e3:0d:c5:17:1f:
         09:37:3a:74:84:4a:4e:d3:b7:1d:20:c9:04:89:c9:c2:3e:cb:
         81:e2:d0:9e:03:3a:c5:d9:88:09:09:b3:66:8d:7f:c1:55:61:
         2c:30:3a:84:9c:c8:7f:cb:f0:a1:7c:78:fb:8f:1b:88:a5:47:
         b7:57:b9:bd:dd:05:23:23:8a:62:8c:d5:53:5f:9e:e0:ad:95:
         cc:7e:e5:41:a5:aa:29:67:69:da:c7:b2:6e:c4:1d:f4:c7:a4:
         b9:f8:16:32:19:82:e6:95:7a:75:90:f7:45:86:46:1e:e3:aa:
         1c:cd:03:86:c4:2b:1b:ed:5e:35:4e:c9:9d:0e:b7:ff:c3:31:
         94:5d:fd:b5:c7:06:e2:3b:fa:63:5d:3a:3b:dd:7a:a6:d1:d1:
         0c:e2:79:ed:b6:6d:eb:59:fb:41:35:77:4b:c1:cd:16:81:1d:
         d0:96:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:31 2026 by rpki-client