Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          Dq+1LeJ1WCDnOAdwV0uwpxfRYrTQEUdXHLI54DhWPdI=
Subject key identifier:   BE:1D:5A:72:4C:20:F7:C0:B8:AD:24:26:D2:7F:6B:48:F8:D8:9E:90
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       01A126F954C977BD4854FC212A0D4938F1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          07CA
Signing time:             Sat 10 Oct 2026 18:00:36 +0000
Manifest this update:     Sat 10 Oct 2026 18:00:36 +0000
Manifest next update:     Sun 11 Oct 2026 18:00:36 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: Gdu43+cf4JprD6rqxiYZU5oxL3KF3VsGddUlLG6mT6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:f9:54:c9:77:bd:48:54:fc:21:2a:0d:49:38:f1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Oct 10 18:00:36 2026 GMT
            Not After : Oct 11 18:00:36 2026 GMT
        Subject: CN=be1d5a724c20f7c0b8ad2426d27f6b48f8d89e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:e4:a2:d0:db:7b:e3:63:b8:9b:8e:ff:e4:
                    88:5d:98:3c:17:fe:a6:8c:bd:05:97:25:08:99:aa:
                    00:3f:5e:fb:2a:b5:ad:ca:d2:a4:9d:93:52:e1:c7:
                    32:91:cd:ed:e2:a7:6d:1b:98:6d:e1:35:df:f7:07:
                    83:6e:c1:a7:ae:3f:54:46:ff:69:a4:c5:84:e6:fd:
                    30:43:a8:80:8c:f8:96:aa:34:16:a4:18:b0:a6:c5:
                    9e:c9:ff:39:77:8e:f1:77:0c:9d:23:b7:f7:32:11:
                    51:b0:9c:f7:ee:61:66:ed:b4:00:05:8b:0b:30:3d:
                    26:ca:96:82:5d:61:2a:7a:7c:1e:05:28:7b:cf:a3:
                    de:4e:11:cd:e1:ae:60:be:57:df:23:33:3b:ea:d1:
                    32:cf:2d:bc:92:68:1b:ed:69:37:ad:d2:14:44:19:
                    f1:99:d8:04:a6:87:29:cb:5a:1d:e9:7a:41:0f:93:
                    a7:bf:47:f1:93:69:e9:c5:47:77:65:8e:9d:9e:54:
                    d7:10:6f:e6:d4:05:52:b4:3b:af:86:6f:90:bf:cc:
                    9d:8d:e2:13:2b:28:b8:e9:db:52:e1:b3:d8:72:d2:
                    5c:d5:9a:70:41:8f:5d:4e:43:a0:82:fc:db:00:00:
                    f0:46:c6:14:b2:db:af:64:cd:83:1d:c8:e9:c5:41:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:5A:72:4C:20:F7:C0:B8:AD:24:26:D2:7F:6B:48:F8:D8:9E:90
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b7:48:dc:04:7b:10:8b:1e:27:bc:f8:65:7d:f6:6c:f7:0d:
         4e:81:0d:c3:9d:e9:6a:32:2e:34:3c:f9:5c:1a:d2:f6:0d:31:
         70:b7:39:e3:1a:ef:f4:5d:55:5d:de:a9:a7:35:4d:95:7e:e2:
         17:47:c9:3c:da:08:b5:a1:e3:fa:02:3b:d6:56:40:49:2e:f9:
         89:79:37:98:77:ad:01:16:81:a0:5a:3e:92:20:18:79:90:70:
         14:42:41:4b:5e:47:50:e3:e3:98:57:66:88:de:73:21:8f:c4:
         e6:dd:a1:4d:58:cb:5e:04:65:79:f4:c7:e4:73:8e:3e:3d:92:
         d9:4c:3d:17:23:44:85:45:93:50:cb:a8:9c:a6:4a:80:a7:29:
         12:a1:01:8e:57:ff:18:0c:dd:7c:80:5e:99:80:19:10:cb:53:
         36:2c:dd:07:8b:31:cd:da:9f:1d:b3:24:ca:39:25:69:36:fa:
         65:13:a6:63:de:28:8b:56:d6:ab:f2:73:e5:c9:10:48:bf:f3:
         ed:7f:a8:70:5b:d4:a7:5b:1b:5e:3e:ea:e2:62:71:61:12:57:
         4c:59:ff:e8:54:25:9c:ed:20:f6:30:42:b9:58:e2:1f:b8:35:
         b6:fc:f0:9b:c2:4a:a8:68:34:0a:d6:34:3b:81:40:da:fc:c5:
         b4:9f:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:31:14 2026 by rpki-client