Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          yk972Jkdm1h0d5NOJeNX08nkvF9OuXDPQEpwKSB/iNE=
Subject key identifier:   C8:85:0B:DA:58:E7:84:A1:A7:A9:C8:C3:7C:79:AF:2B:E8:2A:A0:6D
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       019FADBFAC23283EC1BA748D0B4AEAC904F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          0944
Signing time:             Wed 29 Jul 2026 12:00:47 +0000
Manifest this update:     Wed 29 Jul 2026 12:00:47 +0000
Manifest next update:     Thu 30 Jul 2026 12:00:47 +0000
Files and hashes:         1: 1-eiN7B-RFScdE21_gJKHIITSXjg.roa (hash: 1ehBu7W42prULVp42w/k9Sm9INGVI1W18EKu86GiRBg=)
                          2: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: Dg5zEJomgYhGCRuiJbM10chJvTBlGqHkZ/SbFXiXNmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:bf:ac:23:28:3e:c1:ba:74:8d:0b:4a:ea:c9:04:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Jul 29 12:00:47 2026 GMT
            Not After : Jul 30 12:00:47 2026 GMT
        Subject: CN=c8850bda58e784a1a7a9c8c37c79af2be82aa06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:ad:08:3f:56:a8:d9:7a:20:84:d2:49:2e:
                    87:59:4e:ce:68:4d:d0:28:a4:a0:30:e4:d0:ff:dd:
                    e7:6e:05:b2:b8:72:05:e8:98:f8:f5:b1:e9:0a:b3:
                    01:1b:8e:52:2f:ae:2c:73:ce:9d:11:3a:bc:07:76:
                    82:ad:0d:fa:98:e8:e2:e0:89:3f:c9:81:e7:83:fb:
                    2f:09:e5:14:36:f2:4f:76:23:63:18:94:44:63:ee:
                    54:40:8d:60:85:9b:50:07:b0:0f:04:3e:10:b5:6b:
                    6e:60:ba:e7:96:35:96:60:5a:1f:a8:e6:db:5b:ec:
                    cd:d2:7c:1a:af:b6:ee:14:c0:c8:a0:29:d8:af:23:
                    bd:e0:bf:b2:4d:45:47:db:f7:8b:6c:c8:ad:f0:cb:
                    e6:b1:5d:71:61:df:a2:3b:76:eb:23:0f:4b:60:28:
                    b2:4b:fe:0c:cb:db:46:93:66:a4:33:d6:27:d4:77:
                    2d:bf:ab:7a:3a:1d:dd:35:80:13:7c:4a:b5:40:54:
                    ba:23:34:29:24:24:f0:fd:4b:cc:79:9c:dc:5e:81:
                    6d:40:3b:02:72:67:12:ab:08:87:60:34:c9:d5:6d:
                    51:0f:4f:b0:09:71:59:3a:4c:9a:e8:93:db:b5:c1:
                    6c:5e:7c:e1:af:db:00:63:f5:5d:d5:45:93:c3:60:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:0B:DA:58:E7:84:A1:A7:A9:C8:C3:7C:79:AF:2B:E8:2A:A0:6D
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:cb:31:23:68:64:31:7e:92:27:57:09:f7:d0:30:7b:7a:f8:
         b7:40:da:e4:3e:c8:34:84:12:69:6d:bd:41:8b:b8:e9:53:5f:
         f1:52:2d:31:65:30:b5:18:73:41:30:ce:0d:cd:4a:d0:85:c6:
         8d:54:33:0c:bf:9a:eb:d2:9d:62:85:cb:be:bc:b3:13:45:79:
         55:ab:69:6a:19:e2:b1:34:14:8b:2c:4d:3e:2c:a6:58:40:1c:
         e1:72:be:57:a6:00:69:57:34:40:3e:06:75:64:6c:ea:4c:0a:
         45:ae:b8:8e:40:db:2a:92:aa:1f:fe:31:a7:2c:40:39:fe:de:
         cc:b9:98:79:13:46:c3:08:ea:0d:c9:24:6f:8f:ca:da:ba:16:
         af:3d:91:41:9a:cf:76:1c:7c:90:fd:47:91:58:63:c1:96:a5:
         9d:c6:69:19:0c:7d:31:6e:9f:08:68:a4:00:ed:c8:5f:a9:dd:
         88:3b:ce:93:9b:ff:0a:81:af:bf:f1:fd:5f:e5:37:b7:06:3c:
         36:f3:fc:7c:b2:52:77:e7:b3:de:07:a8:19:55:0f:7b:41:c4:
         29:a1:0c:81:ed:c7:32:0e:86:0c:5f:4d:b3:a7:69:94:bd:05:
         ca:a5:18:ae:c9:a5:5c:37:23:64:bd:02:a5:50:e8:20:a6:cd:
         9c:be:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:01:54 2026 by rpki-client