Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          1bpBMLX0A1S0GhVmb/Lu6tbcV9CMwNQRSDi9sKYNgRo=
Subject key identifier:   FC:E6:F9:FF:39:57:BF:DF:21:06:C6:3A:2A:30:B4:B7:FA:F0:53:37
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       019E1F7EDB51B3C7BA41EB1E6AF43A6E2C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 04:01:07 +0000
Manifest this update:     Wed 13 May 2026 04:01:07 +0000
Manifest next update:     Thu 14 May 2026 04:01:07 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: lt2C9L9BFAIlNqerT5kMFDYXltoU/NoCsBTEGr2RurQ=)
                          2: QfrHMiVpt3G-cJy_BbBREo-KTJ0.roa (hash: LOQ7MtV866jGXGTdWHN/r/Nnuu+Qk3u4t0LPFc49Qt8=)
                          3: q-Ke3V2D6WXgo4eNjEOhBFbA4DE.roa (hash: UMbblSjvrcbzLQGVq5IGsidjO+hKNSTlIG+zD9o4Jco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:db:51:b3:c7:ba:41:eb:1e:6a:f4:3a:6e:2c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: May 13 04:01:07 2026 GMT
            Not After : May 14 04:01:07 2026 GMT
        Subject: CN=fce6f9ff3957bfdf2106c63a2a30b4b7faf05337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:b9:c5:29:97:79:99:9f:c6:54:d5:cf:84:
                    53:30:6f:8f:35:a7:95:61:07:55:48:05:a6:a0:ca:
                    ef:c3:5b:eb:d5:83:8a:e5:a1:02:57:04:61:28:91:
                    c4:a5:31:1c:ee:fb:f8:45:2d:98:e3:76:34:fd:be:
                    ce:91:9c:ad:d7:51:05:b3:7c:35:03:99:6f:96:58:
                    52:5f:9e:84:06:ed:4b:48:35:f5:39:68:23:d7:46:
                    7d:e1:04:e5:05:cf:e6:83:36:9a:fe:02:36:19:6f:
                    7e:bb:e8:95:2e:e7:57:98:86:7a:f9:a4:46:64:43:
                    bf:31:3c:7c:7f:cb:ac:e6:6f:f8:7b:09:fe:d5:bf:
                    e2:28:77:35:2c:08:fe:97:c9:00:24:69:45:d8:1e:
                    3e:0b:41:0d:96:c8:3e:b1:1f:b4:e8:cd:35:af:74:
                    47:40:29:67:05:15:1f:86:bc:28:cf:06:fb:29:61:
                    47:98:59:32:70:d2:25:c6:fa:9f:46:12:45:36:ac:
                    32:6b:8c:99:cd:47:18:55:9d:9b:e8:0c:9f:8d:b6:
                    59:09:d1:2b:f6:c1:4d:6d:46:8c:7a:21:c9:65:13:
                    ba:47:d2:e0:1d:45:9b:2b:6b:70:bf:6b:98:8e:31:
                    83:fe:99:16:d0:87:24:3c:74:a1:b1:b5:ac:04:22:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:F9:FF:39:57:BF:DF:21:06:C6:3A:2A:30:B4:B7:FA:F0:53:37
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:a8:da:59:0d:ea:03:e3:d3:0a:0b:88:62:3d:03:6b:cd:
         56:dc:97:b9:bf:a9:0c:85:5e:72:68:d3:fd:30:04:2e:43:32:
         aa:42:20:db:9c:c4:29:e4:a0:5a:87:5f:57:ea:ac:ec:8c:41:
         0b:31:a8:7a:16:25:3d:13:78:81:9b:6f:f4:1e:b5:62:18:a5:
         a8:8e:9c:11:9f:3b:27:01:de:72:a7:78:ae:f7:25:44:55:bf:
         ef:f2:99:41:b0:1f:35:8e:80:55:ee:7b:cd:12:0d:b0:d1:94:
         c4:20:81:dd:97:37:ce:17:ab:86:bb:d5:82:be:3a:f2:f5:22:
         47:db:b6:93:ad:0a:dc:d7:a9:9f:b9:47:be:1b:22:a3:58:fc:
         12:53:0e:0c:89:11:9f:81:4b:46:99:1f:19:a0:e8:98:fa:c7:
         bf:bb:17:40:40:7c:05:2c:3c:c2:50:1e:00:27:f2:15:0f:7f:
         d4:16:e8:4c:0e:14:db:1d:b1:d5:d6:02:ef:62:97:14:59:d7:
         68:89:f6:d4:f3:89:59:b2:84:21:e0:9e:a6:af:e3:08:d7:86:
         fe:ef:6f:50:6b:a1:57:9b:ea:95:fe:46:f0:fa:75:16:c2:ba:
         0b:3b:59:bf:ca:fa:f5:25:e4:a0:27:c4:30:3a:19:6e:ea:46:
         3a:a7:d5:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffttRs8e6QeseavQ6biyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx
YzliMTkwHhcNMjYwNTEzMDQwMTA3WhcNMjYwNTE0MDQwMTA3WjAzMTEwLwYDVQQD
EyhmY2U2ZjlmZjM5NTdiZmRmMjEwNmM2M2EyYTMwYjRiN2ZhZjA1MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsie5xSmXeZmfxlTVz4RTMG+PNaeV
YQdVSAWmoMrvw1vr1YOK5aECVwRhKJHEpTEc7vv4RS2Y43Y0/b7OkZyt11EFs3w1
A5lvllhSX56EBu1LSDX1OWgj10Z94QTlBc/mgzaa/gI2GW9+u+iVLudXmIZ6+aRG
ZEO/MTx8f8us5m/4ewn+1b/iKHc1LAj+l8kAJGlF2B4+C0ENlsg+sR+06M01r3RH
QClnBRUfhrwozwb7KWFHmFkycNIlxvqfRhJFNqwya4yZzUcYVZ2b6AyfjbZZCdEr
9sFNbUaMeiHJZRO6R9LgHUWbK2twv2uYjjGD/pkW0IckPHShsbWsBCJXyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzm+f85V7/fIQbGOiowtLf68FM3MB8GA1UdIwQY
MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt
ZDI1NTFjZGRlNGFmLzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm
LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvWo2lkN
6gPj0woLiGI9A2vNVtyXub+pDIVecmjT/TAELkMyqkIg25zEKeSgWodfV+qs7IxB
CzGoehYlPRN4gZtv9B61YhilqI6cEZ87JwHecqd4rvclRFW/7/KZQbAfNY6AVe57
zRINsNGUxCCB3Zc3zherhrvVgr468vUiR9u2k60K3Nepn7lHvhsio1j8ElMODIkR
n4FLRpkfGaDomPrHv7sXQEB8BSw8wlAeACfyFQ9/1BboTA4U2x2x1dYC72KXFFnX
aIn21POJWbKEIeCepq/jCNeG/u9vUGuhV5vqlf5G8Pp1FsK6CztZv8r69SXkoCfE
MDoZbupGOqfVaw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:26:57 2026 by rpki-client