Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          1fzKMBOQbIO2Qlo3FtAbq6szWaDsgCM/povPt9GeU28=
Subject key identifier:   9F:4E:04:6A:23:8E:A7:3A:66:01:CF:D9:4E:2C:48:C7:2B:26:98:C3
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       0196C04B443764A4DC0F2DD7B16FFC9B9A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 17:01:20 +0000
Manifest this update:     Sun 11 May 2025 17:01:20 +0000
Manifest next update:     Mon 12 May 2025 17:01:20 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: 6UE14V9ZW8chP91NyTb4d1BHRprnH2i/XLSM6MjC/UI=)
                          2: cQ6MhpO8rPGnD_a1i9qTBhEi6oc.roa (hash: vZJMIqd7qPtuLbpQh2RJrNA9qcCFAJKecdV+n3y6GLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4b:44:37:64:a4:dc:0f:2d:d7:b1:6f:fc:9b:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: May 11 17:01:20 2025 GMT
            Not After : May 12 17:01:20 2025 GMT
        Subject: CN=9f4e046a238ea73a6601cfd94e2c48c72b2698c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:82:fe:12:29:a3:c8:4d:e0:ae:2a:2d:96:aa:
                    54:0d:88:ce:46:21:e5:c4:2e:cf:ad:3f:fa:c0:75:
                    ab:de:cd:e9:34:19:7a:6c:82:ec:f9:60:d4:13:0a:
                    cb:e5:d1:a0:e7:ea:d3:98:ee:d2:a5:3c:ae:49:63:
                    e8:9f:bb:65:8d:89:8d:67:94:50:22:e2:17:05:29:
                    e9:e3:00:6c:ed:c8:72:77:02:b0:0a:23:a0:a4:69:
                    54:de:90:ed:d1:d8:c0:f6:e9:e7:85:69:95:d2:31:
                    da:f5:09:6d:e1:dc:6c:86:02:79:18:4c:9a:8c:d3:
                    fc:33:c9:53:b0:df:f8:13:e8:3b:74:c0:d4:4c:d3:
                    20:3c:a2:b7:65:cd:ad:b3:99:2c:46:69:00:f7:a7:
                    ab:2c:6e:03:38:72:c2:ca:c5:da:43:b6:98:c3:b4:
                    4b:b9:78:a4:4f:c3:33:a9:95:b7:b2:69:3c:18:84:
                    60:a5:0d:83:52:f7:b4:c9:16:5f:13:56:d4:23:f3:
                    dd:1e:e6:79:85:dc:d8:b8:34:b4:23:8a:cd:a8:57:
                    22:a6:30:9f:26:28:39:37:46:67:06:78:b3:af:52:
                    d7:2d:c6:d6:9e:48:0e:c7:eb:4d:26:8b:a8:07:15:
                    46:cc:81:92:1c:27:a4:11:96:d0:e2:40:cf:80:cd:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:04:6A:23:8E:A7:3A:66:01:CF:D9:4E:2C:48:C7:2B:26:98:C3
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:22:91:3c:cc:66:d5:6d:d9:65:23:3c:9a:9a:d7:f4:12:
         5e:52:ee:59:ba:b4:f3:c6:57:56:8a:8e:94:f6:75:fb:80:7d:
         a4:ec:ab:d8:e7:f0:af:69:91:ad:16:1c:c3:2e:38:98:c7:59:
         93:7e:22:aa:b3:0d:f5:ab:53:f4:3b:d8:00:c2:8d:bf:5f:34:
         19:4c:77:37:fc:62:ee:07:f6:f9:98:97:7f:d9:fc:75:f2:e2:
         b4:53:b1:47:13:c8:1e:fc:e4:0c:4b:a7:b0:5c:89:db:9b:5c:
         45:9d:37:49:02:33:05:4f:a2:60:67:77:61:12:29:e9:a9:0d:
         e8:f4:9f:f1:90:ed:99:89:e7:f0:cd:9f:40:b1:6e:de:27:85:
         5b:5a:1a:08:00:fb:20:35:00:fa:c8:68:5b:39:40:aa:53:a2:
         93:91:4e:8b:30:91:2c:fd:da:a5:dd:41:db:72:9b:28:cf:6f:
         12:3a:fe:1f:37:52:a2:10:a3:b9:45:a2:ea:2a:ee:b7:62:03:
         a0:28:1a:dc:bd:d7:d3:55:4b:df:95:3c:12:8b:5a:70:81:b4:
         80:9b:c1:3e:d5:f9:bb:2c:83:f1:44:5a:1c:9a:e5:04:2d:5e:
         a0:8d:26:d0:8d:db:e6:60:08:60:b3:c7:fb:04:8d:2c:cb:a0:
         8c:f8:76:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAS0Q3ZKTcDy3XsW/8m5opMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx
YzliMTkwHhcNMjUwNTExMTcwMTIwWhcNMjUwNTEyMTcwMTIwWjAzMTEwLwYDVQQD
Eyg5ZjRlMDQ2YTIzOGVhNzNhNjYwMWNmZDk0ZTJjNDhjNzJiMjY5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oL+EimjyE3griotlqpUDYjORiHl
xC7PrT/6wHWr3s3pNBl6bILs+WDUEwrL5dGg5+rTmO7SpTyuSWPon7tljYmNZ5RQ
IuIXBSnp4wBs7chydwKwCiOgpGlU3pDt0djA9unnhWmV0jHa9Qlt4dxshgJ5GEya
jNP8M8lTsN/4E+g7dMDUTNMgPKK3Zc2ts5ksRmkA96erLG4DOHLCysXaQ7aYw7RL
uXikT8MzqZW3smk8GIRgpQ2DUve0yRZfE1bUI/PdHuZ5hdzYuDS0I4rNqFcipjCf
Jig5N0ZnBnizr1LXLcbWnkgOx+tNJouoBxVGzIGSHCekEZbQ4kDPgM2tHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9OBGojjqc6ZgHP2U4sSMcrJpjDMB8GA1UdIwQY
MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt
ZDI1NTFjZGRlNGFmLzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm
LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgoikTzM
ZtVt2WUjPJqa1/QSXlLuWbq088ZXVoqOlPZ1+4B9pOyr2Ofwr2mRrRYcwy44mMdZ
k34iqrMN9atT9DvYAMKNv180GUx3N/xi7gf2+ZiXf9n8dfLitFOxRxPIHvzkDEun
sFyJ25tcRZ03SQIzBU+iYGd3YRIp6akN6PSf8ZDtmYnn8M2fQLFu3ieFW1oaCAD7
IDUA+shoWzlAqlOik5FOizCRLP3apd1B23KbKM9vEjr+HzdSohCjuUWi6irut2ID
oCga3L3X01VL35U8EotacIG0gJvBPtX5uyyD8URaHJrlBC1eoI0m0I3b5mAIYLPH
+wSNLMugjPh2Uw==
-----END CERTIFICATE-----
Generated at Sun May 11 19:00:43 2025 by rpki-client