Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          wvNFZkYNGkIeNHbzhSD4b++Orw620rmIPi1n1WgILkY=
Subject key identifier:   1A:04:7A:B3:24:F4:75:4D:C1:48:06:3F:BB:17:B6:82:27:53:AB:91
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       019EC36E17CE3A7478E34CAF7EFFF82B665D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 00:00:32 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:32 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:32 +0000
Files and hashes:         1: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (hash: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: VnYrWa4QuIuqfxjx/sK8DdbYFRMiUI+ICnPgv8l/mV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:17:ce:3a:74:78:e3:4c:af:7e:ff:f8:2b:66:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: Jun 14 00:00:32 2026 GMT
            Not After : Jun 15 00:00:32 2026 GMT
        Subject: CN=1a047ab324f4754dc148063fbb17b6822753ab91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:f3:b3:39:a7:c2:54:c4:10:1e:c5:1d:7b:
                    6d:35:48:c8:4b:51:d1:7c:ac:b0:c9:7a:f6:8d:2d:
                    66:95:4f:b8:e1:7e:35:cd:f6:77:c9:da:d5:67:74:
                    ca:37:4e:30:1b:7e:e8:f9:11:ef:2d:33:7f:8b:11:
                    56:62:a2:62:db:22:5b:61:48:8e:3b:f7:c1:af:03:
                    93:ef:8d:ad:1b:57:f5:95:ea:2b:e8:31:53:98:65:
                    f0:7c:5b:ef:dc:b9:cf:16:11:2c:5b:f6:bb:10:fc:
                    db:14:b7:70:bb:18:be:76:df:ae:a6:c1:7b:5f:83:
                    ca:4d:f1:99:61:29:b7:30:c0:cd:ea:b0:6d:4d:61:
                    f0:1c:6f:8b:fc:39:99:33:35:21:a0:45:e8:53:0b:
                    f7:ca:04:2f:8d:6a:23:54:67:39:8d:fd:3f:48:19:
                    b3:d0:ca:5d:f9:de:c9:b5:67:d4:b5:42:c9:9d:e8:
                    ca:a0:3e:b1:17:ff:8f:69:10:42:61:d1:c6:43:af:
                    70:ac:9d:62:b8:cd:d7:57:1f:da:8c:d5:25:36:46:
                    8d:20:f5:7a:1d:24:20:eb:47:a9:28:61:93:60:8a:
                    dc:00:8f:b6:e3:23:78:31:dd:e7:ff:27:15:c3:e9:
                    9a:77:4e:5e:99:81:68:d0:05:2b:f4:99:6e:b0:b8:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:04:7A:B3:24:F4:75:4D:C1:48:06:3F:BB:17:B6:82:27:53:AB:91
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:fd:93:fb:d1:34:82:b6:be:c3:e0:3a:84:86:e5:dc:8b:
         a8:29:ca:cf:31:2e:1c:7f:e5:7b:8f:4c:9f:e4:30:05:9d:52:
         a5:b6:43:ff:18:63:18:51:d0:fd:37:1d:d0:b4:54:b4:71:5b:
         2b:4e:51:85:a6:ee:24:8f:93:f8:bb:ab:b3:15:c9:34:42:0c:
         60:fa:ec:de:99:d1:66:ea:c6:77:56:82:06:5d:21:aa:3b:08:
         f4:83:ea:fa:c0:33:2c:69:1c:23:4d:d0:3f:ed:3f:c0:cc:10:
         4d:96:ec:05:b2:61:c8:25:82:23:59:fc:bb:7b:0b:22:38:71:
         9d:50:d1:9c:6a:51:15:61:c8:fe:9c:30:bd:dc:2f:9b:a0:18:
         83:63:56:93:6f:07:0a:05:33:8f:b5:9e:31:78:82:14:b0:dc:
         67:b9:23:66:73:13:41:29:da:99:76:5b:37:5e:42:f2:25:53:
         f8:86:86:20:d2:65:be:9d:e1:bc:a1:74:20:6a:47:34:1d:91:
         f7:d9:63:4b:ef:78:32:dc:63:0a:f7:a5:90:16:5a:db:3e:d9:
         c8:82:ab:ef:56:e2:be:8b:a2:56:5f:64:89:ef:19:54:25:26:
         da:9c:38:09:43:03:96:22:bf:bc:30:a7:8a:83:87:2c:5e:e7:
         fc:47:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:10 2026 by rpki-client