Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File:                     pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier:          CCgG2FzD458s+aST52qpNpwEeFyb4HzhXubzC7lcOe4=
Subject key identifier:   97:08:AB:10:77:8D:AB:22:AE:7D:4C:E7:B9:81:36:7C:1B:E0:FF:F7
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer:       /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial:       01A149F3846A30EF4ECF9CD11FAB22E6BC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number:          05FB
Signing time:             Sat 17 Oct 2026 13:00:58 +0000
Manifest this update:     Sat 17 Oct 2026 13:00:58 +0000
Manifest next update:     Sun 18 Oct 2026 13:00:58 +0000
Files and hashes:         1: osfEs2cq4Y3e4u7ONEj-2qqGCag.roa (hash: Xacw/yDD8Q2YywhQyavmFIysSR1p4RioONJPWWgqSEE=)
                          2: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: uof/60GuTIxcXPZVkKhMBEAykFeaCkzqi7jnk4aALmw=)
                          3: xCnRa7RuoNhvn-1cceuPWGzNGFE.roa (hash: Fkx7fvhINA1pZgf6k4rn2+TiTS3OXY+tm8r7eYATNIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:f3:84:6a:30:ef:4e:cf:9c:d1:1f:ab:22:e6:bc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
        Validity
            Not Before: Oct 17 13:00:58 2026 GMT
            Not After : Oct 18 13:00:58 2026 GMT
        Subject: CN=9708ab10778dab22ae7d4ce7b981367c1be0fff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:5c:2e:e1:76:77:e1:a9:56:91:70:77:70:
                    59:29:bb:36:ca:7d:e2:46:c6:1c:1d:51:4e:cc:23:
                    bb:cc:5f:47:e7:4e:ba:3b:c2:85:16:0d:3f:c4:7d:
                    73:43:02:6b:84:c2:8e:17:dd:9e:90:33:e4:6a:eb:
                    d1:29:af:6c:a8:43:49:a7:90:8a:8f:3f:cb:e2:a0:
                    21:1d:9f:d3:03:01:6f:ac:9c:2c:d1:0c:5d:4f:04:
                    56:72:05:9a:84:b8:fa:a3:29:b2:16:46:5a:2f:b4:
                    5b:65:de:f0:8b:7b:e6:ff:06:25:f0:2d:2d:9a:3f:
                    54:71:ac:fe:59:2d:a4:aa:d6:3d:1b:ef:e3:cd:cb:
                    69:1c:c3:0a:91:46:72:3a:2d:76:7f:f3:69:e9:3b:
                    ff:82:a1:96:0a:74:69:dd:10:56:ac:a0:ed:31:35:
                    14:a4:42:4c:81:bf:0a:09:2b:b4:ec:7c:60:35:e5:
                    69:b9:63:46:d9:8a:50:a0:da:db:f4:1c:e2:81:15:
                    a0:ee:ce:4c:af:30:a1:01:03:27:70:e2:7c:ba:80:
                    ef:7d:63:93:e6:be:9b:ab:59:35:9a:7a:97:d1:cf:
                    0a:3c:6f:43:0a:31:69:c2:8d:04:f7:30:57:8a:d9:
                    1c:12:6d:19:17:a0:04:1f:e6:a9:71:74:0e:e2:73:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:AB:10:77:8D:AB:22:AE:7D:4C:E7:B9:81:36:7C:1B:E0:FF:F7
            X509v3 Authority Key Identifier:
                keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:21:1f:57:5c:a2:e6:53:59:03:da:a7:a8:82:43:24:43:
         68:c1:cf:1e:44:eb:1d:74:c1:c7:08:f6:dd:fb:30:1d:f6:2e:
         85:2c:95:25:a7:9e:b5:00:30:b7:95:1b:ea:e6:2e:dc:20:9d:
         49:8f:a2:d3:ee:b2:b6:1e:aa:c6:5a:c8:a5:2b:70:79:57:ea:
         a1:36:31:2a:57:3f:0c:b6:cf:ea:ad:8a:9a:e1:e7:1a:4f:1a:
         a8:89:90:df:06:42:ef:12:4c:1a:37:94:95:86:a8:67:d5:d1:
         3b:3b:50:e4:33:18:d7:69:69:60:ea:74:00:0a:48:43:c8:33:
         80:b4:0b:17:d5:40:e0:70:06:1a:ea:1b:4a:9e:f4:69:c8:af:
         0e:b4:87:57:03:d1:7b:92:69:33:4f:68:20:8d:69:71:9f:5c:
         8a:ad:f7:83:78:83:43:81:61:45:2f:1c:ec:fe:c7:b9:11:e0:
         cc:13:f4:09:ab:60:5c:ff:c4:aa:bb:99:9f:7c:51:2c:4e:33:
         47:dc:d4:aa:0c:f0:5f:59:40:8c:89:70:f3:19:5e:2c:20:b1:
         1d:2c:32:f4:43:37:3d:14:db:44:c0:01:9f:cf:b9:22:4d:31:
         b8:24:c2:05:d6:b0:2b:69:a8:0d:ff:e0:6b:6d:09:f6:c2:ed:
         10:9f:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:35 2026 by rpki-client