Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          WcZgHNedvBEhNJhfO5q4a350m33I3lAS/Lm71scl//0=
Subject key identifier:   A7:8E:AF:0F:EC:A7:DE:B3:CC:E5:DD:BE:1F:75:EF:F8:1A:08:D8:12
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       019CABD9C4989F32F19066BB926A1D0A8CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0578
Signing time:             Mon 02 Mar 2026 00:01:41 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:41 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:41 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: w3pJbWNuy7g7Po1NAr75A0vRHLDCuXiL3CdKas7L1AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:c4:98:9f:32:f1:90:66:bb:92:6a:1d:0a:8c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Mar  2 00:01:41 2026 GMT
            Not After : Mar  3 00:01:41 2026 GMT
        Subject: CN=a78eaf0feca7deb3cce5ddbe1f75eff81a08d812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:ec:9b:6f:1f:83:94:93:77:64:ee:6b:bf:
                    2c:a0:db:3b:04:1f:55:f0:02:7a:b2:2f:c9:89:20:
                    b7:09:d4:cb:69:79:65:b1:a8:61:45:af:47:84:d1:
                    ee:fd:b6:8f:c9:20:59:13:56:68:03:5a:78:a7:02:
                    58:13:1f:e6:10:95:38:15:da:e5:82:a6:23:7d:3b:
                    9f:f5:1b:bb:c9:1d:ca:90:69:b0:67:03:62:5a:39:
                    c4:76:05:7d:d2:1e:91:4e:d5:8a:d7:83:be:e0:91:
                    69:19:04:0e:c5:93:1d:00:1a:11:3b:45:46:9e:88:
                    b4:d1:63:0c:71:dc:5c:c3:eb:60:9c:6e:5f:a2:ea:
                    53:58:4a:6b:72:05:90:fd:4e:b8:01:84:a6:3d:cf:
                    20:f5:16:d3:45:dd:5c:7b:5f:c8:6c:32:be:5e:42:
                    b4:11:3f:73:d5:13:c6:97:8e:15:95:d4:00:af:46:
                    6b:be:2f:35:86:30:84:b7:5c:21:02:3f:8f:22:b5:
                    0f:76:5e:37:6f:3e:a8:4b:81:0b:45:1c:c3:25:56:
                    ca:b2:bc:69:8c:7d:f2:f5:a5:a4:fb:e3:24:bb:8c:
                    d0:bb:f5:d8:c6:cf:2a:2e:f7:5e:68:66:ef:9f:4a:
                    66:0f:1b:ea:bc:53:b5:0c:93:45:8a:6f:97:2f:7e:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8E:AF:0F:EC:A7:DE:B3:CC:E5:DD:BE:1F:75:EF:F8:1A:08:D8:12
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:cf:7c:0b:1b:52:93:e8:3f:e0:66:3d:71:40:86:a3:70:fd:
         e9:29:69:c2:85:a6:7b:ab:5e:f1:7f:22:bf:0e:df:f3:95:a3:
         94:c8:e4:3e:22:ee:24:24:35:c7:d7:8e:41:44:6d:56:0a:f4:
         7c:e1:d5:57:3b:89:ed:fc:fc:ce:2e:1a:21:89:c4:09:88:ff:
         70:2e:94:94:c9:32:3e:55:c8:1a:14:34:71:26:f4:90:e1:73:
         8f:ac:35:11:67:41:7d:01:a7:fd:25:63:e7:ba:a9:f8:72:14:
         3e:b2:63:85:4d:78:f1:ca:6d:64:cf:0f:0d:82:ed:73:d6:10:
         8e:02:25:71:b5:cd:bc:48:b4:96:80:df:b8:07:fd:b4:ed:4c:
         59:c8:bd:af:ab:77:ed:18:3c:6e:d8:01:74:ef:83:63:1b:b8:
         f7:75:b9:92:65:f3:4e:84:34:76:ff:4c:82:08:4f:34:d5:9f:
         53:a6:9e:d7:db:1e:04:dd:12:39:57:63:cb:58:13:0f:d2:94:
         6a:8e:e3:ae:6f:a0:46:40:57:28:99:cd:5f:db:19:9e:df:31:
         99:98:00:ff:ee:18:2c:40:35:13:ab:40:4e:da:69:57:86:37:
         3d:69:bb:ad:56:4c:3f:c3:bd:26:19:a7:57:60:6e:be:54:ad:
         10:9a:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:52:32 2026 by rpki-client