Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          MO/5NCAT6498YfEiETHJlWZf234I8mv49AdEwrQnO4E=
Subject key identifier:   DD:E0:41:E5:57:19:5B:CD:00:C9:B6:37:44:20:C0:55:14:98:40:1C
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       019D382DEAC5609E0790B6D8912A72A9F4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          07FE
Signing time:             Sun 29 Mar 2026 06:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:26 +0000
Files and hashes:         1: 1-eiN7B-RFScdE21_gJKHIITSXjg.roa (hash: 1ehBu7W42prULVp42w/k9Sm9INGVI1W18EKu86GiRBg=)
                          2: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: GpltPgfvi2ju8ZQTGf+EfpTF9EfSldVMkea/2pKWd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:ea:c5:60:9e:07:90:b6:d8:91:2a:72:a9:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Mar 29 06:00:26 2026 GMT
            Not After : Mar 30 06:00:26 2026 GMT
        Subject: CN=dde041e557195bcd00c9b6374420c0551498401c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:89:63:5a:20:0a:a6:58:34:6e:28:dd:11:
                    3f:a8:d1:dc:85:ed:76:67:b8:e3:6f:8b:93:c0:aa:
                    f6:c0:2b:0d:97:5c:26:94:06:e4:bf:fe:a7:6f:61:
                    45:97:15:a1:7f:eb:09:5c:3c:ad:f0:ab:ea:90:50:
                    fc:5b:b7:1a:94:88:40:50:e1:c8:28:98:7c:2e:e4:
                    f4:89:87:22:c8:d3:e3:53:3d:54:5e:6e:a2:01:4d:
                    bf:23:9e:d0:dd:d1:c8:38:f8:6c:a7:b6:aa:b7:ca:
                    57:c3:ee:45:c2:b6:33:d8:56:ed:cc:7d:fc:db:02:
                    7d:15:17:fb:53:ca:01:34:b8:0f:20:25:0f:d7:d6:
                    c0:73:64:8f:5e:b5:74:fe:26:67:69:05:26:a5:ec:
                    a1:a8:0e:48:b9:87:1b:04:0e:47:f1:bb:30:1b:84:
                    b3:1e:4b:55:db:e6:62:44:03:79:ca:3a:a7:ba:e0:
                    8f:eb:9f:2c:84:f8:8b:7e:c0:27:bb:22:41:32:07:
                    b1:84:82:15:45:59:46:f6:dc:dd:9c:79:26:b5:2d:
                    f6:86:6b:52:c6:08:8d:02:c9:dc:26:90:04:7f:b0:
                    3b:fd:27:b1:b8:1f:94:ff:fb:43:5e:b1:65:3c:7d:
                    91:59:ba:f5:4a:ae:54:bd:94:82:3b:0b:10:c3:9e:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E0:41:E5:57:19:5B:CD:00:C9:B6:37:44:20:C0:55:14:98:40:1C
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:42:d7:d9:66:af:bc:b0:a4:aa:93:5e:ea:b3:b0:74:f2:
         6e:a0:b6:56:d2:60:6d:37:09:a1:8d:79:0d:00:bb:f3:dd:52:
         a1:38:2d:b5:c7:45:51:78:e1:cd:64:31:55:ed:f3:c8:6d:6e:
         73:c2:64:5c:5f:98:55:f9:ec:da:3b:0a:cf:38:37:82:91:de:
         23:1e:69:d2:10:a9:4d:5b:17:d9:20:78:3e:cb:a8:4f:66:28:
         88:bb:31:ca:38:e2:aa:24:50:f9:e9:36:2f:a0:5c:c7:5a:81:
         c6:91:e8:51:e3:36:4c:10:b3:ca:38:62:0d:81:4b:be:3c:0e:
         f8:ad:cf:1f:56:ad:0e:f1:48:dd:db:a6:fd:26:d7:fd:aa:ad:
         33:5a:b8:48:d5:88:55:d4:c5:31:95:38:b0:78:5d:97:ed:22:
         40:65:25:78:c2:72:19:be:77:f5:d4:5f:04:3a:13:f0:02:c1:
         bc:2c:e0:4b:db:b9:50:2d:ca:dc:2c:c2:99:ef:b7:cf:a9:1a:
         e1:92:49:29:24:bd:ae:ad:23:a3:35:4e:30:4c:69:ea:4f:e8:
         70:12:2f:3e:32:da:46:bd:cd:b2:30:a1:47:df:0f:9f:fd:a6:
         5a:7f:dc:e8:47:24:7b:56:c6:cf:db:d1:23:c7:2d:79:99:81:
         5b:1b:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:40 2026 by rpki-client