Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          kU0zwYHmSxy9RWK6++W3QD9W29ORBeRCWipb6zYAN8w=
Subject key identifier:   DE:B7:DD:FA:F2:88:96:04:45:AD:A6:6C:6F:D5:3F:99:D4:68:A7:03
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       019D265FAD4FF834509CBC9A1D5F69235D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:37 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: g2y7poCIePu/ci+F4wWke0KDu90kAmYjJ3cBlZFmTsQ=)
                          2: QfrHMiVpt3G-cJy_BbBREo-KTJ0.roa (hash: LOQ7MtV866jGXGTdWHN/r/Nnuu+Qk3u4t0LPFc49Qt8=)
                          3: q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa (hash: UMbblSjvrcbzLQGVq5IGsidjO+hKNSTlIG+zD9o4Jco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ad:4f:f8:34:50:9c:bc:9a:1d:5f:69:23:5d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: Mar 25 19:01:37 2026 GMT
            Not After : Mar 26 19:01:37 2026 GMT
        Subject: CN=deb7ddfaf288960445ada66c6fd53f99d468a703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:74:9c:33:c3:ef:29:29:77:62:48:93:45:
                    e2:cb:6a:7f:fa:d4:6e:c3:9d:c9:e2:7d:a9:30:8a:
                    bc:bf:53:f5:15:97:00:09:2f:12:1b:31:d3:46:55:
                    81:25:08:d2:a2:cd:e3:e5:e1:69:98:bc:6b:07:b7:
                    2e:3c:21:8b:3c:1b:c0:7d:1b:50:76:4a:de:2d:f4:
                    1b:33:ae:52:c0:c9:e2:ef:8d:ab:60:91:fe:1b:2f:
                    62:6c:0c:91:41:ce:51:77:8a:c2:4d:ef:9f:2b:2f:
                    78:5c:54:9d:7e:5b:5a:2c:7c:c5:98:22:63:fa:08:
                    c3:39:d7:88:9c:ac:e1:38:c6:a0:53:77:36:85:59:
                    63:f6:40:7b:03:a9:d1:9c:11:14:72:e6:ad:b5:7a:
                    51:b5:26:05:4a:ee:19:0e:8f:0c:a5:33:28:7f:ed:
                    33:d9:67:7c:6c:0c:4f:02:7d:f2:df:4c:f7:61:5a:
                    bd:89:df:2f:33:1c:43:3c:66:93:8a:8e:cb:40:22:
                    30:05:fb:88:63:f1:3c:42:cf:6c:73:c1:cb:5c:b3:
                    e2:29:f8:e2:89:6e:17:d4:3c:46:ad:e1:d2:b2:e4:
                    84:5d:b5:8f:3e:f2:08:24:c7:d6:47:3a:ee:c4:e8:
                    15:50:d9:ac:41:7f:8d:b4:b7:a7:72:d7:fa:c7:dc:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B7:DD:FA:F2:88:96:04:45:AD:A6:6C:6F:D5:3F:99:D4:68:A7:03
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:18:d3:0a:f2:e3:3b:f4:f1:04:92:45:08:d7:ca:b7:d2:8f:
         7e:34:4e:aa:31:ea:a9:04:d4:a7:e6:ec:d5:d8:8a:53:76:64:
         c6:78:ad:15:6e:5f:e6:34:cc:a1:92:5b:46:3c:63:da:d9:1a:
         a0:e9:1e:6d:9f:bb:23:44:a0:8c:d8:4d:c9:5e:c5:dd:19:85:
         c6:44:27:dc:18:21:a7:8b:53:4d:38:77:03:75:c7:42:ef:24:
         e7:f3:42:43:48:18:aa:13:70:6e:78:33:43:01:22:8c:fb:db:
         9e:5a:4f:f5:26:9f:e2:15:16:c9:bd:cf:8f:23:1e:15:21:59:
         6e:4c:3c:6a:b7:2b:b8:9d:2a:eb:d6:dc:5c:53:84:d8:17:66:
         c8:9a:5c:9f:9e:11:67:3e:d7:a8:d3:5b:7b:98:2c:97:c0:07:
         5e:54:b4:43:3a:0e:8f:1c:a2:a6:d9:71:10:c5:83:71:ef:af:
         91:87:90:68:92:e8:5f:d6:ad:d7:13:d9:90:52:78:79:26:c3:
         38:da:8f:5f:e8:fe:b3:0a:58:47:d1:ae:b4:60:3f:b2:7f:64:
         43:c1:b4:d9:ee:32:4a:e9:3f:b6:38:d4:13:9b:b7:9d:0c:4f:
         7e:40:20:b9:64:87:2a:33:fd:4b:22:42:7a:59:93:c7:4c:f5:
         07:9e:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:52 2026 by rpki-client