Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          3fOF6M7GLnOFBX2DsWh4lsk5lvNCfwHXgi+elq5cKfE=
Subject key identifier:   3A:9C:7F:ED:43:62:64:1C:F2:2A:33:E8:E3:74:B1:39:D2:FE:77:84
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       019874F50869F6853174EA8286CE153C43A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0349
Signing time:             Mon 04 Aug 2025 12:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:12 +0000
Files and hashes:         1: 7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa (hash: NBi3hLwQwbGQATz90wDw9LkVn07LZS1piVwE8dvvsug=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: fzwiKcuHGiUitvWLeHjTb664qTkAyWFIG7PkYFmE9ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:08:69:f6:85:31:74:ea:82:86:ce:15:3c:43:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Aug  4 12:01:12 2025 GMT
            Not After : Aug  5 12:01:12 2025 GMT
        Subject: CN=3a9c7fed4362641cf22a33e8e374b139d2fe7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:4c:10:67:d3:5a:f2:0d:db:11:5d:9b:7a:
                    48:af:b9:f3:9c:07:f7:60:8a:57:8f:3c:1d:6d:e6:
                    c2:3a:40:df:5f:b5:09:a4:9d:01:10:9f:86:51:d7:
                    23:fd:fe:8e:dd:e0:18:87:7d:59:4c:b8:fc:a8:94:
                    18:e7:f5:6e:50:5a:90:d9:9e:ad:14:e8:05:13:32:
                    74:f3:78:a3:db:51:a4:fe:cd:aa:b0:aa:36:bc:92:
                    88:db:e4:4c:9f:ab:3c:58:8a:27:ef:94:ba:f5:1d:
                    d1:08:45:69:4a:b4:9f:58:da:b2:e3:8b:5c:2b:b8:
                    58:17:02:d2:c8:55:d2:68:84:cc:21:17:87:53:de:
                    b9:a6:91:e3:41:e5:c6:e4:ad:8b:0c:ae:ab:40:a4:
                    1c:b6:06:d9:bb:58:00:68:ba:f6:d2:0a:28:ac:15:
                    b8:03:8b:06:e8:cc:2f:4b:fe:43:4c:1e:a6:a8:59:
                    66:57:87:d2:25:77:71:9f:71:c7:06:ef:15:51:7f:
                    c3:2b:b9:4e:5c:ce:df:87:ea:19:b8:99:82:1c:c2:
                    07:9a:6b:8d:d6:28:e0:e6:3c:f2:27:47:7e:fe:d6:
                    a8:0e:9f:d0:e7:3b:9f:60:bf:f2:0b:ca:23:3f:db:
                    d9:1d:8d:6c:9d:13:a4:79:e5:81:b9:66:5c:b8:f3:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9C:7F:ED:43:62:64:1C:F2:2A:33:E8:E3:74:B1:39:D2:FE:77:84
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:33:f0:0f:f4:42:cc:a9:20:f9:6c:26:a0:c7:97:c3:c6:
         94:c8:c4:6d:20:4d:fb:1e:45:bd:49:97:60:f2:80:48:38:31:
         ad:bd:86:45:0c:24:75:7d:7e:fe:7e:22:22:cb:a8:18:c0:cd:
         7f:68:6d:13:6a:a5:b3:dd:20:f6:26:ae:e3:f4:f7:9b:08:c5:
         79:53:90:b7:e1:e1:4b:ba:89:1b:49:29:8e:af:49:91:8e:df:
         6c:e0:ed:24:f0:f9:bd:4f:1b:16:cc:34:0f:8b:0d:f3:c8:27:
         d7:d6:81:7a:8e:2b:54:cf:1e:ac:50:76:2d:ce:9e:7e:ea:d4:
         ac:15:34:9d:0d:82:84:90:71:2c:69:40:68:52:bf:96:f9:60:
         79:f6:9d:f7:cb:2c:4a:99:38:94:de:f4:b9:d9:20:c2:43:fd:
         dd:21:4d:b4:73:a1:99:86:b1:03:fe:95:51:37:cc:fa:fc:a3:
         7e:41:3c:f8:db:fe:db:17:ec:28:ee:86:96:2e:5e:72:19:34:
         da:85:74:9b:26:86:b7:b0:85:bb:d6:9e:09:e5:78:42:b3:75:
         9a:4e:b0:f7:f2:f7:84:48:45:67:39:a1:a5:0d:aa:a5:7e:31:
         45:6d:da:bb:69:f4:0b:83:b0:0b:86:79:7d:0b:8b:2f:02:c4:
         af:16:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:45 2025 by rpki-client