Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          UCIOGmPOZ2giVU0CoQqoT46jZwXyH4lJp1oTdrtYQ2g=
Subject key identifier:   45:08:A1:90:89:3B:15:FE:9D:8A:B1:E9:21:F0:C5:31:C9:5F:C6:42
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       019E5892534CB72A82B708E791452A9FD141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0656
Signing time:             Sun 24 May 2026 06:00:45 +0000
Manifest this update:     Sun 24 May 2026 06:00:45 +0000
Manifest next update:     Mon 25 May 2026 06:00:45 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: 6PM+9SErstxe06Qp8UsSXBLjMFcXNtK3WdzqFQaguLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:58:92:53:4c:b7:2a:82:b7:08:e7:91:45:2a:9f:d1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: May 24 06:00:45 2026 GMT
            Not After : May 25 06:00:45 2026 GMT
        Subject: CN=4508a190893b15fe9d8ab1e921f0c531c95fc642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:41:5a:b0:37:1d:fc:ac:fd:c8:e5:43:e2:
                    c4:66:42:c9:e0:03:54:60:6d:58:b5:2a:c4:84:4d:
                    82:85:05:eb:3d:27:68:ac:36:ab:05:1e:8b:80:96:
                    4a:f6:f2:d7:bf:7d:4b:d4:ab:d9:c0:a5:88:72:80:
                    f7:3f:60:d0:1c:42:92:45:fa:1d:f4:b8:47:ff:dd:
                    3d:99:e2:a6:bf:48:29:b9:e9:f4:71:48:6d:5d:63:
                    ab:40:37:31:80:cb:02:91:b4:47:a5:91:44:9f:b5:
                    c2:24:fa:d5:84:b2:cd:02:48:06:03:e0:be:46:df:
                    c8:4a:b4:08:f9:31:ef:fc:c0:30:1a:eb:71:13:3b:
                    78:e7:17:b8:02:2f:a9:c7:34:56:5c:ba:f2:a5:4d:
                    e9:52:45:52:0b:7c:29:d7:de:4b:06:7c:9e:b6:54:
                    c4:4e:21:da:f6:83:a2:77:e5:b9:f2:d8:bc:c7:70:
                    d1:5f:74:aa:ce:51:9e:b6:f8:b1:34:bd:e5:94:c4:
                    f8:b4:23:33:ce:bc:33:15:46:d0:06:2c:eb:2c:29:
                    51:25:f8:b7:79:37:c6:37:d8:b3:5d:31:e2:22:2f:
                    03:f8:9c:5a:e2:9a:a2:f5:35:c1:cf:be:a1:16:47:
                    64:45:1a:f8:48:1b:a6:1e:f5:98:b4:1f:bb:22:92:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:A1:90:89:3B:15:FE:9D:8A:B1:E9:21:F0:C5:31:C9:5F:C6:42
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6d:32:4e:37:98:6e:c7:50:8e:c1:c3:a0:7d:aa:07:37:62:
         68:1f:ad:52:27:4d:f7:65:1d:5e:22:ac:c5:86:1b:9f:0f:eb:
         c1:c8:19:f0:85:ce:75:de:a6:07:68:73:b8:5d:84:35:7f:26:
         2e:47:c4:4d:bf:ed:85:b8:22:64:0f:bb:3a:2c:af:2e:48:bf:
         e0:23:5a:72:98:46:52:5b:a1:68:fe:4e:47:65:42:2f:44:ca:
         69:8e:6f:b8:4c:de:9f:3e:98:2a:28:6f:9d:32:7a:c4:e9:e2:
         d4:04:cf:32:67:da:89:34:17:1a:28:a3:51:fd:c1:55:40:c7:
         35:73:45:80:53:e7:40:41:17:cc:9f:ed:5c:d8:12:ce:5b:7e:
         d2:27:d0:3c:a5:e9:d4:e0:99:b5:0b:a2:db:11:24:7e:39:60:
         be:2f:88:94:6e:1d:37:f3:49:a4:4b:22:f7:66:32:9e:af:0d:
         ef:59:61:00:0b:c7:d2:c4:ae:4b:35:36:55:5f:b8:08:fd:e0:
         57:e0:5b:b0:f4:7a:6a:a9:92:ee:d2:5e:6d:77:8e:0f:39:35:
         8e:5e:b1:5f:32:f9:42:d6:bc:53:2a:8f:75:c4:f4:05:91:48:
         c4:a9:ba:5b:75:2d:a4:fe:87:35:66:cb:e8:af:87:79:74:0f:
         c9:f6:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 08:43:54 2026 by rpki-client