Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          sEMFfHL59YcOjIK2ptEqHgRM1GBXTT2nq8cczIuOVRE=
Subject key identifier:   97:F5:D0:14:F2:14:F5:0A:B9:40:B4:3F:FF:7C:D6:A7:08:C1:31:04
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       019922FA7B459A1CF956F4FBE411983EA9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 07:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:04 +0000
Files and hashes:         1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: mAPlwbh0ZnDdSU6TxXuKNu7RCNchk1vGq637OLPlzJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:7b:45:9a:1c:f9:56:f4:fb:e4:11:98:3e:a9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: Sep  7 07:01:04 2025 GMT
            Not After : Sep  8 07:01:04 2025 GMT
        Subject: CN=97f5d014f214f50ab940b43fff7cd6a708c13104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:86:41:b0:9a:59:50:e4:33:db:f2:69:55:
                    96:5c:fb:ac:b3:97:98:b2:17:08:6d:2f:93:f2:04:
                    69:67:c2:02:95:4c:a4:60:f0:0d:7f:bc:b2:00:06:
                    27:dd:ea:22:71:de:00:72:24:95:ca:79:8b:d9:30:
                    8d:ac:d4:45:6a:68:ee:85:6f:d2:63:1c:1d:82:fc:
                    05:20:3c:c1:ec:fa:ce:46:b8:56:59:0c:44:25:ff:
                    d6:b0:49:99:3e:f1:36:36:13:e1:fd:36:0a:a2:62:
                    ab:9f:73:7a:42:42:f2:02:20:e1:66:74:7d:00:f0:
                    d5:3c:3f:d3:b2:8c:76:e3:f0:e9:d5:b6:2a:66:af:
                    5e:80:c1:f9:f7:19:0c:51:c0:3e:5b:38:cf:03:9f:
                    0a:56:70:74:d4:5e:30:37:f5:8f:5b:31:14:7b:8c:
                    f1:33:7a:4f:7b:82:43:d2:dd:12:2e:83:22:fa:42:
                    f6:d9:db:8d:02:34:d8:79:02:51:6c:b3:38:48:6a:
                    6d:a5:37:27:3e:24:f9:3b:9b:ea:ae:c9:35:d8:6e:
                    73:a7:8a:28:ce:4f:11:36:37:5a:98:2a:f5:0a:44:
                    6a:dd:b3:19:03:00:81:b8:cb:20:41:85:bf:56:05:
                    69:e8:ce:45:b9:02:46:d1:74:08:0f:ff:d4:51:11:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F5:D0:14:F2:14:F5:0A:B9:40:B4:3F:FF:7C:D6:A7:08:C1:31:04
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:15:24:8a:12:52:3c:39:4a:90:c1:56:8c:dc:29:37:bd:cb:
         6a:55:40:0f:f4:dc:d8:02:41:06:3e:ae:f0:e6:55:00:4b:58:
         93:3e:aa:cb:d4:b9:6a:eb:b7:56:5e:97:ca:e8:38:6f:9c:81:
         02:f9:29:8b:14:43:e2:3a:ed:36:52:99:34:a5:d5:92:6b:38:
         2d:e9:54:5f:2e:83:5c:7b:4c:4c:76:1d:c5:4c:2a:a3:cf:36:
         83:d8:2b:45:e2:ef:10:f7:9a:47:1a:d4:39:a0:25:9f:16:ef:
         78:e1:8f:40:9d:21:46:b4:e6:ae:6f:13:91:22:97:6c:78:8e:
         7c:e3:8b:b3:54:60:5a:c2:54:a0:27:13:8e:78:f8:71:15:36:
         fd:81:b6:13:c2:ad:4a:52:98:bb:65:46:29:80:74:27:b9:29:
         eb:00:85:a3:14:35:f8:33:82:1f:73:5b:90:be:4e:cc:d8:e9:
         49:50:bc:4e:23:77:92:13:11:a2:8b:15:f9:01:a3:d5:12:b9:
         df:81:27:b3:9d:08:70:5a:39:e0:7e:17:ef:7d:cb:83:9b:24:
         5d:a4:2b:85:fd:8a:82:6b:fb:4a:2a:70:c6:86:b5:22:3b:66:
         47:6d:21:cf:54:08:17:c1:11:81:1a:0e:70:90:f1:8a:86:04:
         5a:b3:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:29 2025 by rpki-client