Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          5HLO0pB3SMGoDkSIcwpwUt531BXR4nh7AEOCE/yzWPg=
Subject key identifier:   85:6F:50:ED:68:35:9F:0E:08:F6:4E:15:CB:A5:2B:15:D8:C9:E5:BB
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       019E1D908F5EF181D05B097DF3676511B43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          0726
Signing time:             Tue 12 May 2026 19:01:13 +0000
Manifest this update:     Tue 12 May 2026 19:01:13 +0000
Manifest next update:     Wed 13 May 2026 19:01:13 +0000
Files and hashes:         1: nHQieqZyPaOUuSrsXR7xvDoHvxg.roa (hash: zeyi1Qv46B7/sJB4zwdu9/Bq3e1lVsP+coEZ1xodVu0=)
                          2: na8XynSGUeG2Sfrn6Chut503AkI.asa (hash: 4qpOnKqUebRhkKVGFa2+gCBYJ66AvyagbWffkXeQIYY=)
                          3: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: jzaiWVVONAnKlXQeGkKQMpJT44AU9gInsFgmIT2QdF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:8f:5e:f1:81:d0:5b:09:7d:f3:67:65:11:b4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: May 12 19:01:13 2026 GMT
            Not After : May 13 19:01:13 2026 GMT
        Subject: CN=856f50ed68359f0e08f64e15cba52b15d8c9e5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:53:94:02:d7:20:ed:d4:a7:40:64:13:54:
                    ac:97:51:1f:ce:c4:30:03:f7:ce:5e:cb:16:1b:1d:
                    76:4a:56:ed:62:00:89:a0:f4:e6:80:2e:9e:fe:21:
                    6e:85:af:4f:06:db:15:b9:f3:89:8e:b9:af:42:e6:
                    b8:a2:c7:f3:05:6b:97:4f:0e:80:8d:21:56:58:f1:
                    35:cf:35:71:2e:3c:d6:78:9e:81:70:25:36:df:b9:
                    57:1c:a0:bd:67:0f:e8:51:a4:f3:83:0d:7f:b8:9b:
                    ea:7c:49:d5:36:5d:4a:85:c2:e1:ef:1c:5b:9c:e6:
                    95:e0:a7:37:9e:08:24:c9:60:6e:97:43:a6:6e:77:
                    e6:c3:bf:7a:df:89:87:58:35:9c:32:f2:7f:cc:55:
                    e1:68:8f:33:40:57:7e:fe:5d:f7:84:e8:95:29:a4:
                    74:2c:8b:a0:2b:56:2c:6c:ef:76:8b:ee:88:9c:62:
                    ad:dc:76:63:fa:f6:21:9c:d3:2b:2f:ee:a9:54:76:
                    8f:ab:3a:01:be:07:f8:69:b9:23:97:1e:e0:d4:e7:
                    da:bf:23:54:0d:56:5f:13:5e:22:d1:a6:ab:31:72:
                    dc:6a:41:29:28:c0:28:55:64:72:a4:b6:75:91:b2:
                    64:ee:a8:a8:da:0a:d1:91:22:91:23:88:10:6d:02:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6F:50:ED:68:35:9F:0E:08:F6:4E:15:CB:A5:2B:15:D8:C9:E5:BB
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:19:45:15:b4:91:27:87:d9:fb:10:e3:a0:95:9a:a2:67:
         2c:11:39:b5:d0:f9:9e:02:89:a4:ea:3c:f0:e2:d0:fb:14:31:
         e3:ca:41:98:94:47:68:0e:ba:8c:e9:c9:cb:5e:35:d8:98:e2:
         94:98:60:1c:a3:5f:4d:48:04:23:54:b5:e0:0a:18:df:7c:ff:
         99:dc:34:18:ef:60:e4:cf:1a:8d:39:72:d8:5c:99:91:89:c8:
         3f:e5:93:96:c9:c3:bc:5e:df:1d:58:2a:90:fa:c6:22:4a:70:
         97:c0:29:a8:5a:f5:b0:3c:da:90:9f:6a:d7:b7:05:26:6c:ed:
         af:c5:b2:fc:3a:fe:81:15:5e:f0:22:55:16:71:ad:f8:02:5c:
         50:37:71:2e:12:ad:f9:c9:a2:23:1e:3d:da:7f:05:19:7b:09:
         41:6e:cc:87:70:ae:8f:10:39:c5:40:32:1c:95:5a:94:0a:6f:
         2f:70:92:4a:9b:9d:ce:b5:9d:a3:16:ad:0a:bc:e4:20:36:6c:
         29:a9:0f:c7:b5:31:3c:a4:62:e6:b5:64:75:8d:56:ac:6d:81:
         85:1f:7d:ae:eb:b2:06:9a:a6:b2:a7:00:6f:4b:fc:e4:f3:3d:
         54:4b:58:84:5b:35:9e:38:55:62:6a:fa:91:6d:35:b9:ef:76:
         61:49:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:45 2026 by rpki-client