Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          lOPtAg2fzaeXjzodOP0SzfT7RiMJT/CSpOE1G4mTVc0=
Subject key identifier:   77:9F:5E:AF:80:35:AF:55:F6:6E:4A:9C:9C:5D:EE:E3:F8:70:7E:0A
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       019DA3E6A4DB501B6F6F6D5C69B63451E5DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          06E7
Signing time:             Sun 19 Apr 2026 04:01:34 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:34 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:34 +0000
Files and hashes:         1: nHQieqZyPaOUuSrsXR7xvDoHvxg.roa (hash: zeyi1Qv46B7/sJB4zwdu9/Bq3e1lVsP+coEZ1xodVu0=)
                          2: na8XynSGUeG2Sfrn6Chut503AkI.asa (hash: 4qpOnKqUebRhkKVGFa2+gCBYJ66AvyagbWffkXeQIYY=)
                          3: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: g1sIdu9LzhYBPyiZqiOhS6EBol3IWZdAJeU3pxlDQQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:a4:db:50:1b:6f:6f:6d:5c:69:b6:34:51:e5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Apr 19 04:01:34 2026 GMT
            Not After : Apr 20 04:01:34 2026 GMT
        Subject: CN=779f5eaf8035af55f66e4a9c9c5deee3f8707e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:30:fd:10:ad:d4:06:3f:b5:1b:01:35:d3:
                    17:f1:14:62:2f:06:ed:da:44:95:10:92:fa:8c:46:
                    13:81:f4:9e:2e:5d:72:0a:73:ca:fc:b5:c5:f2:0d:
                    45:52:9c:82:08:1e:6f:0e:bf:01:00:9e:65:3a:e5:
                    35:7a:6f:39:e5:ca:c3:41:11:88:dd:c8:6e:5f:e3:
                    69:76:6a:c6:b4:36:47:3c:9a:14:fd:a1:09:00:48:
                    d9:1a:9c:59:f8:17:9f:6f:7b:71:73:66:bd:d6:95:
                    c9:b8:8b:0c:93:3e:3a:e2:c9:fe:69:9c:a4:89:8c:
                    9e:ea:71:e2:70:b3:17:a7:71:56:f8:0b:60:50:9c:
                    6c:ed:04:96:ff:ab:ca:59:44:ac:59:7b:3b:98:17:
                    9d:14:a2:62:cd:2a:97:46:e3:09:46:c4:cd:3c:90:
                    a9:de:94:e7:07:68:fc:85:48:da:e3:4a:dd:2d:d2:
                    06:cd:40:fa:5f:16:1e:2f:b1:af:d0:af:e9:e4:ad:
                    87:12:19:43:0e:f4:ab:0c:7c:1a:1f:4f:f7:f0:40:
                    cc:db:1f:03:a4:d3:45:d2:7b:49:c5:2c:21:4f:c5:
                    25:05:65:7d:33:c1:5c:6f:c5:ea:d6:87:02:a3:64:
                    39:cf:48:0d:6f:6a:92:9c:1e:75:5c:f2:8b:83:4a:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:5E:AF:80:35:AF:55:F6:6E:4A:9C:9C:5D:EE:E3:F8:70:7E:0A
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:75:7a:72:17:b1:9c:b7:f0:fa:78:c9:ab:35:10:37:df:bb:
         75:9d:70:2a:68:c2:a7:ac:06:a9:2b:b9:12:1d:ee:bb:1e:2f:
         1a:6d:c5:6e:d9:fa:88:69:16:b4:63:e8:e5:0b:01:6e:ab:33:
         c1:fd:59:9e:c7:01:00:e6:01:84:7f:67:7c:2c:02:bd:32:bb:
         71:3a:63:53:31:84:3f:83:e1:4c:8b:3d:86:18:f7:bd:6c:1d:
         11:54:c1:48:92:7d:b4:db:a8:c4:9c:16:43:5a:ca:a0:55:2e:
         c5:42:02:7f:4c:90:54:c9:18:2a:3a:55:24:d1:00:23:df:9b:
         eb:08:89:c4:a3:de:5d:e4:81:05:82:37:c0:22:4d:61:29:21:
         e4:d2:9c:65:21:0d:f4:bd:37:68:6d:95:b2:7b:f3:cb:d8:d9:
         c8:46:07:6e:9f:9e:24:1a:27:8a:53:f4:3d:54:5b:9a:57:ff:
         8c:2d:ff:3c:f6:31:f9:e2:69:a6:84:71:9c:fd:6b:22:0d:18:
         d2:dc:1a:93:52:ad:3f:d1:1e:f8:01:66:30:3f:d0:23:98:8a:
         22:f3:c0:76:5f:30:49:69:18:9e:0e:2a:03:a4:38:79:8c:c5:
         4b:8e:84:fb:ad:74:af:ee:5f:cf:4b:73:9d:fe:17:46:c9:21:
         38:6a:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:12:42 2026 by rpki-client