Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          tnYJgolLr4PGmdckFtcpk3KtSaRIEg1Ide9o65FFm70=
Subject key identifier:   EC:BE:32:8C:A4:5D:5B:76:0D:F5:CE:60:62:19:E9:69:A4:C0:95:A3
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       019E2ADE677F32C6236577852D6979806426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 09:01:18 +0000
Manifest this update:     Fri 15 May 2026 09:01:18 +0000
Manifest next update:     Sat 16 May 2026 09:01:18 +0000
Files and hashes:         1: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (hash: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: xvFEhFyaYM31LMwyofJRr4QzI5Zna5V1LIlDoGubB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:de:67:7f:32:c6:23:65:77:85:2d:69:79:80:64:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: May 15 09:01:18 2026 GMT
            Not After : May 16 09:01:18 2026 GMT
        Subject: CN=ecbe328ca45d5b760df5ce606219e969a4c095a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:d8:4f:11:da:21:0b:2b:f9:35:3b:a9:41:
                    07:f3:d2:ed:94:0e:9a:23:75:eb:ec:ff:b1:d2:f1:
                    12:c0:18:a3:16:ac:59:e6:d1:78:3c:2c:b9:0a:98:
                    c8:82:9a:50:df:9e:ec:6c:9b:4c:4e:a3:0f:93:7b:
                    0a:6e:3c:6e:69:60:ce:8c:e4:39:b1:ac:d0:76:2c:
                    ac:11:93:70:d6:da:0a:89:17:31:39:0b:fd:50:7b:
                    78:e3:69:de:7b:4a:3c:3b:6c:a0:8f:63:b5:63:3b:
                    50:01:12:9d:ac:24:58:c6:4d:14:9d:12:7b:c1:11:
                    5c:cc:ca:9f:36:66:de:65:2e:9d:31:f0:a0:a6:58:
                    3d:13:c0:d8:bc:86:0d:94:31:69:71:89:78:b5:a1:
                    eb:4d:3a:bf:0d:81:e8:b1:33:bb:b8:3c:04:5f:55:
                    16:43:2a:00:7c:f9:cc:55:ca:b5:d8:53:e3:be:ba:
                    f3:45:46:8e:97:78:f2:fa:c0:55:10:d8:ab:c0:05:
                    90:21:3d:6d:e4:ba:d3:db:80:2e:53:09:4e:3f:25:
                    cd:1c:3c:11:fd:4d:5e:f4:2f:6c:c1:b7:91:4c:20:
                    70:54:b8:de:3f:e4:1e:a4:cc:85:c3:70:a7:e2:e8:
                    83:9b:b2:48:a6:d4:d4:76:a0:3b:26:db:56:4b:fb:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BE:32:8C:A4:5D:5B:76:0D:F5:CE:60:62:19:E9:69:A4:C0:95:A3
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:88:f4:72:e9:b6:a2:3e:61:d5:96:aa:07:a8:54:45:3d:62:
         0f:7f:6e:36:b1:ed:4b:ef:02:c7:4f:ef:84:7c:0c:ca:1e:11:
         a0:0f:96:f2:61:62:48:31:e1:95:bf:e9:ce:73:13:e1:7e:f0:
         ba:c0:fb:5b:1b:ba:6a:14:b1:89:40:8a:c6:59:a6:16:1f:e6:
         98:91:c8:67:98:f7:15:4d:90:c0:01:4e:bd:df:f6:a8:6d:15:
         8c:90:55:06:89:8d:57:cf:5c:d4:b9:0f:65:92:6d:b2:89:f5:
         fb:c8:c4:3d:5b:a0:55:4e:01:25:72:97:17:bb:06:a6:6f:ee:
         11:c7:fc:71:a1:63:a5:fa:45:01:bf:eb:98:d5:5d:4d:97:c6:
         d0:21:9e:89:54:9d:73:0c:f4:c0:17:5c:d9:43:7d:54:34:62:
         4c:5a:5d:be:1c:c4:0c:66:a8:e4:40:d9:81:66:bf:fc:d5:bf:
         35:f6:6d:fc:cb:f9:c6:f5:c4:4e:4e:4b:86:03:51:e9:c6:d1:
         89:df:74:86:3e:c9:a8:9b:c3:a2:65:21:18:35:8c:19:cc:77:
         d2:50:cf:6f:61:62:31:f9:f0:9e:99:67:6b:01:73:24:6a:b8:
         cf:a9:c4:38:aa:84:22:57:9a:ff:06:0a:76:8c:07:09:2e:fa:
         04:63:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 18:20:14 2026 by rpki-client