Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          Vh2QXb2yHLPz8MaqVZ+qG9rIWQ22wUkpJBfHjNQKsUM=
Subject key identifier:   1E:48:D4:07:F7:CC:27:FE:F2:BB:58:81:CF:91:4D:6F:6E:4F:63:FB
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       019D9A06A7F2A9177AB0BAF71A4F7D78F06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 06:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:20 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:20 +0000
Files and hashes:         1: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (hash: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: ZzVE35TaO5foLdvLgP7z6OAcetIXUGOv1/N2viy1XU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:a7:f2:a9:17:7a:b0:ba:f7:1a:4f:7d:78:f0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: Apr 17 06:00:20 2026 GMT
            Not After : Apr 18 06:00:20 2026 GMT
        Subject: CN=1e48d407f7cc27fef2bb5881cf914d6f6e4f63fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:3c:50:15:8d:49:b4:5b:20:21:61:56:e3:
                    ed:ea:48:d3:8f:11:09:f8:4c:b5:9f:9f:06:8c:0d:
                    94:09:a7:7e:6f:ad:9a:9e:17:49:36:4b:a5:35:2a:
                    c0:e8:77:60:12:08:1b:61:52:d4:59:8c:ca:3f:0e:
                    33:1f:c3:e4:12:2b:2a:c5:55:55:9c:dd:1d:4b:c3:
                    94:7a:e8:ae:a1:5a:80:7a:2e:9d:c8:92:8e:ae:f9:
                    e0:7f:21:db:d8:c1:1e:b3:a0:1e:1b:a1:5a:66:da:
                    a5:9e:81:2b:97:e5:5b:4c:ce:cf:52:55:0d:17:d3:
                    b7:29:86:c1:21:9e:2d:2d:27:3c:32:41:22:3f:7e:
                    19:0a:81:16:31:61:95:25:3f:85:6f:96:96:3a:64:
                    93:a5:2b:51:a5:a9:86:63:cf:a2:3e:49:1f:a5:7a:
                    2f:2b:d7:0c:7c:3c:49:f5:9c:d2:81:b6:38:71:53:
                    f1:fd:8f:f0:87:a8:ce:49:4f:b9:4b:50:cf:84:ae:
                    71:c3:b2:8a:ab:e8:f8:8c:93:5b:f8:5c:f2:81:9d:
                    3a:e5:2b:ab:56:29:3a:84:9e:1d:20:86:d7:48:43:
                    7f:cf:29:8d:5b:5b:7a:c2:dd:b2:b1:98:67:03:9c:
                    1a:14:a0:96:c7:a6:9a:23:65:17:bd:20:c6:ab:c9:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:D4:07:F7:CC:27:FE:F2:BB:58:81:CF:91:4D:6F:6E:4F:63:FB
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:43:6e:44:ad:b0:64:4b:a2:71:8c:32:7d:16:75:63:a4:
         ea:3b:38:27:8b:36:52:b9:14:3b:9b:c2:db:e1:14:fb:93:a6:
         e8:d6:de:58:72:c5:6a:5c:37:0f:56:e7:45:f3:4e:c9:12:f3:
         d7:f5:40:a8:e6:94:b4:92:fc:64:cc:01:9c:a8:dd:72:17:87:
         8e:08:32:88:21:06:c8:f8:6a:d2:bd:c3:e3:fe:68:d9:74:97:
         b2:fe:03:7b:41:a4:95:49:a7:4f:22:c9:3b:f8:6f:5b:5f:f3:
         ae:a8:9c:f2:30:98:2c:e3:29:bd:bd:bb:0c:02:be:6d:30:30:
         3c:5a:df:93:db:62:26:90:04:f0:3f:65:aa:30:9d:0a:4f:a6:
         54:ef:ef:95:ef:48:c7:10:d5:34:6a:42:fc:4d:3f:ef:79:c3:
         a0:ab:ba:51:02:b8:c9:82:79:6e:17:b2:f6:e5:c9:ae:a1:52:
         7a:b2:ef:3c:f6:a1:af:1f:1f:01:22:98:63:2d:2f:6a:d5:d8:
         7c:8c:5c:48:5b:e2:92:eb:3d:c2:76:f6:ce:b3:46:12:5b:14:
         ff:39:c4:d0:d7:35:90:58:5a:9f:4a:fe:df:cb:88:48:8f:84:
         1d:f8:cb:b6:75:10:2e:f3:3d:91:6a:88:85:ed:97:1f:99:07:
         3b:09:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:47 2026 by rpki-client