Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          npJwCH0iPtckEu3wsbW6PP83kPCpBgTC/qic0un6qeU=
Subject key identifier:   50:3F:46:6D:C7:E3:B4:46:05:C9:41:36:F4:1F:8E:48:F1:98:BC:F0
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       0198D54E217C1C35DFFC0A2029B88FEAE9D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 05:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:03 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: /cMEZMhkFoi75lt+wgHHXQA45iznfADPbCzfK8w1zBQ=)
                          2: QBagqPGH9MLRe8v6cA3uWwY6NVM.roa (hash: yxEIq1L1gWldcG6QnZu0HcP9v0cGJt+tqJuemcpe71U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:21:7c:1c:35:df:fc:0a:20:29:b8:8f:ea:e9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: Aug 23 05:02:03 2025 GMT
            Not After : Aug 24 05:02:03 2025 GMT
        Subject: CN=503f466dc7e3b44605c94136f41f8e48f198bcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:f7:14:23:8a:0c:47:b7:4b:b0:0e:39:f7:
                    03:7b:23:5e:d7:e9:b8:30:05:79:1c:25:68:66:84:
                    8a:f2:c7:51:aa:01:ca:ee:a8:4d:83:c9:db:5a:27:
                    eb:46:4c:4c:f0:ac:c9:21:02:80:5f:a8:0a:e2:5b:
                    cb:22:6a:88:d7:56:51:34:86:0e:51:09:4f:e7:9d:
                    c4:0d:bc:2c:68:6c:4c:89:75:8d:5e:4f:85:f8:11:
                    e8:35:51:68:be:76:9b:1b:e1:1f:ec:4d:87:42:c6:
                    f1:0f:0d:83:3d:fb:f3:1a:82:02:5b:d3:39:bf:f8:
                    13:10:4f:97:66:a9:1d:44:87:42:16:8f:19:dd:5d:
                    58:d0:7c:32:87:a2:05:99:7b:9e:4b:7f:17:a4:32:
                    54:bf:40:3d:a0:8c:01:6a:d0:46:9f:c3:2e:18:58:
                    b8:de:69:56:42:08:d8:d7:d0:6b:93:1f:0e:72:1d:
                    93:0a:a0:6d:64:55:ca:1e:44:7a:7c:e6:a9:47:aa:
                    db:bb:8c:d7:dd:39:eb:34:44:5c:19:76:18:c0:1b:
                    2a:ff:59:e7:f8:da:c2:a7:ed:7d:32:f5:60:95:28:
                    5e:d6:e3:69:3e:c1:14:bc:ed:57:ec:5a:32:71:11:
                    e2:b8:45:87:6d:12:37:f7:5c:f5:fd:d6:9f:5a:05:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3F:46:6D:C7:E3:B4:46:05:C9:41:36:F4:1F:8E:48:F1:98:BC:F0
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:41:2c:c1:b6:eb:a4:ca:d7:72:cb:63:00:9d:f6:32:e2:
         ee:bf:ed:79:9e:1f:b1:23:25:73:6d:00:b5:d9:1e:cb:64:95:
         c7:93:35:c8:4a:cd:70:cf:76:53:ee:96:d7:3a:d8:9a:1c:9c:
         49:7b:11:af:e9:d0:2d:66:04:21:51:99:ca:b4:b1:a3:b8:a4:
         67:4e:dd:e7:c4:dd:70:07:d3:f6:88:e3:a6:4b:bb:fb:d4:85:
         34:be:75:df:b6:f4:87:c5:af:9f:99:8c:e5:b8:f6:92:86:46:
         64:b3:4f:f9:7b:92:5e:78:1a:ea:22:9c:46:ab:9a:29:2e:60:
         eb:3d:59:20:cf:a3:b0:de:bb:50:f3:c7:71:e5:ea:25:90:7f:
         2d:2b:ee:ed:8a:2b:49:c1:f8:88:eb:9e:d6:bd:af:94:b5:3a:
         a2:d6:7a:2c:1d:fb:59:87:2a:43:44:78:62:1a:8a:b0:c6:bc:
         d6:94:7d:71:1a:81:86:c5:3b:7b:66:c1:f5:78:f1:80:53:59:
         d8:fd:ed:b1:99:8d:d0:3f:ff:5d:fc:22:eb:b4:b4:80:12:88:
         bd:23:bc:9f:43:4c:11:4a:cb:d9:93:b6:48:00:0b:1e:99:3d:
         af:0c:43:e5:12:2d:77:a1:d8:54:de:ae:12:cc:7a:bf:b3:bc:
         1c:26:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:16 2025 by rpki-client