Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          ad5QwrbbqnLHSVkGsJNnzhMJqUSR8ScBG2Nx6XCqlS0=
Subject key identifier:   8A:AA:BC:B6:ED:52:B9:1C:ED:82:C8:23:8B:F3:0F:1E:2B:41:01:CC
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       01A0EEF94DF67043C176C016780C3890A1A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          07AD
Signing time:             Tue 29 Sep 2026 21:01:50 +0000
Manifest this update:     Tue 29 Sep 2026 21:01:50 +0000
Manifest next update:     Wed 30 Sep 2026 21:01:50 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: ndCOE2Trt3aCZDPq4n2TXjKb/utNgAhjpda94LTuDCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:f9:4d:f6:70:43:c1:76:c0:16:78:0c:38:90:a1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Sep 29 21:01:50 2026 GMT
            Not After : Sep 30 21:01:50 2026 GMT
        Subject: CN=8aaabcb6ed52b91ced82c8238bf30f1e2b4101cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:34:e9:99:c9:20:c3:9f:0c:cf:40:f2:38:
                    61:91:ca:86:01:c2:61:ab:60:99:44:14:e7:20:c4:
                    22:b7:99:76:1b:0e:61:a6:b9:4c:85:aa:3c:84:6f:
                    0c:f2:3f:40:bc:ff:e8:73:08:89:8a:1e:0f:2e:71:
                    cc:60:2d:0e:10:3e:dc:24:5e:43:3d:a6:21:df:98:
                    1e:4b:24:e7:87:c1:c5:1e:f6:0c:93:fd:c7:48:45:
                    e5:a8:48:19:de:c9:b0:a1:19:fb:36:c1:2e:11:77:
                    b3:66:dd:17:1a:16:09:5b:6d:c6:2b:17:cf:d6:65:
                    ef:8e:db:83:ad:8b:35:ed:c9:b8:14:11:33:8b:39:
                    c1:c4:db:1c:bd:b5:5b:c8:7a:7f:a2:17:ad:40:cc:
                    a2:60:ee:2e:f3:d8:da:34:92:bc:3a:5e:4d:21:cb:
                    b3:2b:b8:98:50:06:df:57:01:5b:71:71:d2:dc:47:
                    51:8e:d8:8e:23:95:44:0e:ce:47:78:17:b8:d9:d4:
                    11:e8:e0:b2:98:30:80:3a:36:35:e7:97:62:51:74:
                    ce:78:3d:56:da:3f:aa:d4:72:84:b7:03:e3:7d:9f:
                    a3:9f:ec:5a:b6:58:74:62:48:8d:87:12:46:a4:92:
                    63:ac:e5:b2:d6:97:c5:10:d8:36:ef:bf:a3:4b:b8:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AA:BC:B6:ED:52:B9:1C:ED:82:C8:23:8B:F3:0F:1E:2B:41:01:CC
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:63:fa:b6:9e:31:fc:90:54:71:49:80:66:01:cb:21:ed:9c:
         ba:b3:29:d9:a6:40:f1:89:10:01:0b:39:3d:e4:47:86:27:a3:
         7d:13:d0:3d:92:36:ba:c5:41:4f:ea:ec:c9:e2:7c:7d:fc:78:
         b9:66:63:f7:14:0c:dd:c2:93:5e:6c:e3:43:65:61:92:2e:4c:
         45:66:e5:b6:48:bd:1a:4d:18:ff:23:ea:a1:bd:24:df:a7:86:
         5e:ca:b4:ec:44:ad:6b:44:70:8b:99:65:44:c9:2b:62:22:f3:
         12:de:cd:c7:4f:ce:34:ef:8a:30:66:0a:ce:f3:c1:59:35:8d:
         30:90:0e:c4:c3:a7:4e:82:1f:ae:30:92:d5:2f:b7:11:93:6f:
         42:13:66:36:ac:ee:8a:ec:1b:38:8f:58:cc:24:fc:94:de:3f:
         b5:a9:75:a5:5a:d6:63:4e:3c:a2:e5:23:54:e4:04:7d:f5:08:
         40:ba:f3:72:e3:e4:f3:a0:88:bf:25:b7:fe:78:40:c9:cb:88:
         0c:94:8e:be:67:d3:76:54:7c:c8:c3:5a:80:25:7a:c4:7c:0f:
         ab:58:c0:7a:9d:32:9b:24:f5:0a:24:95:17:47:b0:a8:71:74:
         40:ed:02:20:e6:72:16:f7:5a:00:80:e4:eb:4c:d7:6c:1b:55:
         a6:08:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:44:24 2026 by rpki-client