Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          TzrMdA98jtaWp75sMuCcSZ3IfLQ6bHxl91/SOcNq63A=
Subject key identifier:   0C:F5:86:CF:54:6B:69:F6:5B:50:5A:40:8A:D6:05:0D:30:4D:DB:36
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       01975D25D516601C090B7331D6EEA0AC55AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 04:00:49 +0000
Manifest this update:     Wed 11 Jun 2025 04:00:49 +0000
Manifest next update:     Thu 12 Jun 2025 04:00:49 +0000
Files and hashes:         1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: nF+F1ya0vtrdZgzvl688NGO/3xZBUNvJRmg3+rKsOPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:25:d5:16:60:1c:09:0b:73:31:d6:ee:a0:ac:55:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: Jun 11 04:00:49 2025 GMT
            Not After : Jun 12 04:00:49 2025 GMT
        Subject: CN=0cf586cf546b69f65b505a408ad6050d304ddb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:fd:61:ce:ec:de:4e:3c:f6:94:49:01:ee:
                    dc:80:57:bc:d1:cd:9a:90:73:9d:8c:e6:13:6b:68:
                    ea:f5:7a:d5:01:17:c5:47:e7:d9:8c:2e:ed:63:57:
                    34:a4:1b:60:19:fa:b2:9c:e4:4e:2d:50:1a:97:1d:
                    ef:44:ac:7e:3b:1b:c0:41:dd:d4:5f:ca:4d:82:d8:
                    8b:8f:b1:42:73:07:df:b4:9c:b5:19:18:04:c6:69:
                    ae:27:d1:fb:73:ec:99:b5:10:28:42:38:38:54:e9:
                    ad:73:15:82:f6:ac:4f:11:41:2d:89:d4:6d:6c:57:
                    0a:7b:c6:d2:76:d2:61:3b:83:be:e6:fd:00:95:a0:
                    85:54:81:f9:e1:c0:61:48:e6:79:36:95:a4:f8:bc:
                    7c:e4:a4:d3:c7:88:3e:91:0d:59:cd:41:63:02:cb:
                    15:72:3e:a6:a7:75:55:f5:47:b8:73:36:91:66:8e:
                    9f:e4:54:99:91:97:d1:44:1f:f8:55:09:ea:e9:8c:
                    ad:f4:08:fd:b6:dc:02:cc:e8:dc:76:a7:d2:82:40:
                    13:50:f5:00:7f:bf:60:90:bf:b6:ad:e9:11:56:ca:
                    50:36:8f:fb:22:b5:ee:8e:48:db:38:f1:e8:9e:a3:
                    83:99:2d:bc:bb:68:0a:a5:c3:93:c9:af:8f:31:28:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F5:86:CF:54:6B:69:F6:5B:50:5A:40:8A:D6:05:0D:30:4D:DB:36
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ac:2a:54:0b:32:31:ed:0c:41:f7:db:e8:0e:4e:18:6f:ea:
         7f:a9:e9:e6:f7:18:72:75:63:2c:cf:dc:cf:2e:c9:fd:ea:6d:
         97:11:82:3f:8b:e0:fc:fe:a7:08:da:c1:f9:67:06:28:fe:e8:
         47:ba:61:35:3e:fe:98:47:98:4d:63:cc:b7:b4:da:8e:f9:97:
         66:4d:bd:20:e9:e4:0d:1d:af:df:81:bd:75:58:37:85:ab:39:
         53:eb:a4:d7:02:13:95:e9:8e:f3:72:0d:aa:ca:da:27:0d:0e:
         77:36:32:61:6e:5e:d7:6d:d0:42:9e:99:eb:5c:cf:2e:26:13:
         68:ad:05:6d:18:5a:f2:49:83:f3:de:50:69:27:ee:29:78:d6:
         cc:6f:08:f8:e8:f9:1e:7b:b0:7f:4e:3d:0e:9a:54:29:93:87:
         26:4b:e3:6b:99:24:de:3b:0a:65:e9:66:99:61:68:57:55:b3:
         d7:f4:cc:bd:67:77:23:bf:42:c0:fc:67:64:50:21:57:5c:31:
         15:66:d2:19:e3:c3:d7:f1:59:6f:3b:7e:5a:d6:c9:5c:77:e1:
         ee:f5:d2:61:52:93:ba:01:40:5b:02:74:73:07:8e:10:32:1b:
         82:a4:90:66:83:1f:3f:48:16:15:55:90:75:5d:34:70:c9:bf:
         38:fb:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:13:31 2025 by rpki-client