Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          CU3QyPusWq+/pssiqEZedj8KSiIsvP8NBuCi8Ml8WS0=
Subject key identifier:   8F:FD:F0:84:FE:75:EE:DD:0D:5E:92:E5:69:43:90:E4:98:0D:13:BB
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       0197575AB9198D4EB8E48AB445DC5FAE144F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          1584
Signing time:             Tue 10 Jun 2025 01:00:52 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:52 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:52 +0000
Files and hashes:         1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: EKKbfLHMUQynGYpHwpeUfVUz0KQIabH6SkMD6iftPz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:b9:19:8d:4e:b8:e4:8a:b4:45:dc:5f:ae:14:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: Jun 10 01:00:52 2025 GMT
            Not After : Jun 11 01:00:52 2025 GMT
        Subject: CN=8ffdf084fe75eedd0d5e92e5694390e4980d13bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:91:65:ec:df:e1:89:21:d3:3b:c4:4e:81:
                    d2:09:af:14:45:96:4d:a0:48:30:8f:e2:02:53:c0:
                    c3:b2:b3:70:d5:54:0b:00:27:0e:f9:67:3a:d4:29:
                    2f:50:22:4d:d3:e7:a0:2d:65:4e:26:7f:13:ae:8b:
                    1a:f3:44:a4:e0:94:c7:0c:85:dd:e1:69:2b:ca:a6:
                    58:2b:bc:cb:12:5f:03:a0:2f:ed:0d:e7:c4:67:45:
                    11:2f:5c:23:e7:ad:bc:97:20:90:40:73:db:6e:a8:
                    62:e0:44:ed:6f:5e:50:ea:14:5b:bb:98:52:97:5d:
                    91:56:cf:d4:67:df:92:ff:02:72:39:fc:30:d3:ee:
                    53:88:31:f5:f5:05:bf:38:98:9d:36:5a:b1:c5:70:
                    df:08:ac:51:35:aa:67:14:a5:1f:61:b4:ec:44:90:
                    39:8a:50:6d:df:e3:c6:7d:22:d0:d2:2b:c6:34:25:
                    eb:a1:27:1e:52:95:e5:ba:1f:d5:50:fc:59:8b:11:
                    1c:ca:4f:8d:28:80:38:b1:56:71:93:77:5a:95:6e:
                    51:b0:21:d0:e3:1f:89:2a:cf:ca:44:a5:df:5b:e0:
                    46:27:20:b0:95:6a:c5:d5:aa:ca:ba:c6:8c:d2:67:
                    20:6e:df:ee:ce:35:3d:b0:aa:da:26:fc:08:33:07:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FD:F0:84:FE:75:EE:DD:0D:5E:92:E5:69:43:90:E4:98:0D:13:BB
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:48:a6:94:e2:3b:96:fa:e8:08:eb:f7:aa:dc:4c:61:4d:
         a9:22:af:5a:84:cc:20:02:cb:22:5d:8e:e2:98:fb:ba:16:7a:
         72:e1:f7:db:29:77:a3:33:68:56:01:f8:a3:0c:e2:5a:cc:07:
         95:1d:94:26:af:f8:19:90:5e:a3:09:c5:f7:4f:85:b8:30:a8:
         e1:86:b2:85:d3:67:1b:87:2c:85:b5:c3:a8:76:60:5b:d0:73:
         a1:e1:d5:cf:e2:10:a2:aa:be:37:9c:6d:54:69:78:77:6f:30:
         f5:21:a1:f0:a3:1c:42:3c:c1:f7:e1:29:98:74:42:11:d7:6d:
         fd:8e:c6:0d:dd:85:56:9b:6c:ec:ef:32:ec:00:2b:ab:c5:46:
         03:d0:41:09:59:96:88:51:1b:54:07:c2:b9:74:e7:54:d0:ff:
         e2:28:ce:f7:67:21:26:02:af:72:98:50:14:2e:7e:fc:fd:b1:
         54:19:df:84:8a:ca:aa:b1:e9:ab:ac:4e:1d:70:ea:25:b9:80:
         59:7b:7c:83:f1:9a:d8:c9:df:c2:a1:99:1d:5b:38:1a:32:db:
         42:04:95:ef:e3:ac:ee:b4:13:1a:a7:0a:c8:64:ae:71:c8:d4:
         68:72:a4:53:17:0b:6b:ac:49:0c:00:7a:46:9d:1d:78:05:45:
         ac:1e:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:13:49 2025 by rpki-client