Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
File:                     GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json)
Hash identifier:          GOR6WeBovizkYqE5VsnEHNPwLUnzVXjf4ENSu+o3rRg=
Subject key identifier:   8D:F0:3C:C5:35:B3:4A:F6:D0:10:14:01:5D:1A:AD:1C:98:4D:EB:C0
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Certificate issuer:       /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial:       0197B77C095DF6BCFFB24E11A5EF47CAFA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 17:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:48 +0000
Files and hashes:         1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: CFXTE9f5I+BUfIxD4HY71jB2kbDwvyEC5UBIfiXed0Q=)
                          2: cQ6MhpO8rPGnD_a1i9qTBhEi6oc.roa (hash: vZJMIqd7qPtuLbpQh2RJrNA9qcCFAJKecdV+n3y6GLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:09:5d:f6:bc:ff:b2:4e:11:a5:ef:47:ca:fa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
        Validity
            Not Before: Jun 28 17:00:48 2025 GMT
            Not After : Jun 29 17:00:48 2025 GMT
        Subject: CN=8df03cc535b34af6d01014015d1aad1c984debc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:df:f5:95:cc:bb:d3:97:30:d2:00:19:ef:
                    b8:4d:c5:43:32:8e:91:d4:a3:ff:13:6c:c5:2b:d1:
                    c0:c9:e6:eb:d3:79:e9:ba:1f:db:5f:d8:fc:ec:69:
                    bf:d4:08:1b:c2:66:bd:83:c8:15:d3:61:2f:c4:d3:
                    63:0a:48:eb:ce:44:e2:80:c1:85:58:4e:81:e0:46:
                    33:00:0e:e2:62:ad:35:8e:e4:b9:01:18:95:27:fd:
                    81:24:e2:3c:36:bc:1e:08:b4:32:4f:41:32:b4:55:
                    89:91:12:b5:f2:e4:2f:c2:fa:21:5e:10:37:be:18:
                    88:f2:0f:88:6a:94:1e:ac:e8:18:26:f0:6f:ca:e6:
                    7c:1a:1b:a2:b1:9d:3d:49:21:91:72:84:71:15:5c:
                    b8:62:31:74:5a:78:b7:3e:8e:0f:6d:8e:22:73:55:
                    90:3e:4a:ea:e0:38:9a:02:41:5b:3e:30:a9:2c:ec:
                    e5:bf:78:b3:f4:7c:9b:49:c2:0e:fa:bb:09:92:b1:
                    f9:a6:a0:82:70:d0:5e:3b:d8:a0:66:d6:75:12:50:
                    46:a9:8c:05:08:ba:c7:a7:1e:e0:91:5b:f9:8a:38:
                    b4:1b:ab:89:79:a6:23:26:5f:ce:ac:2b:d7:2e:b7:
                    43:8f:ef:25:2f:d5:9c:8f:99:17:51:77:6b:e5:d1:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:3C:C5:35:B3:4A:F6:D0:10:14:01:5D:1A:AD:1C:98:4D:EB:C0
            X509v3 Authority Key Identifier:
                keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:79:c9:cf:51:01:8f:d6:e6:3d:91:64:83:91:93:95:ca:e3:
         2d:0f:d8:99:5d:f7:8a:7b:a8:12:28:c9:ab:94:b1:5c:ee:a8:
         89:36:a4:f8:9f:f7:d7:53:2b:7c:8c:a3:6d:b4:3f:41:d0:4f:
         72:55:5f:a1:04:71:d3:ec:ab:33:d6:4e:19:ee:44:7c:78:f0:
         1b:63:c9:9c:8e:52:4d:2a:bd:c1:fd:5f:d5:a5:f6:99:89:6d:
         ef:ee:3f:05:4c:7a:cd:bb:59:0d:0c:28:3c:7f:88:10:fd:5d:
         e6:db:7b:8f:b8:6f:5e:14:1e:e6:d8:2f:57:11:c5:0b:2a:a4:
         c5:a5:c7:8f:d6:40:f1:5d:06:81:9d:b4:75:85:53:09:5f:97:
         3e:89:02:6d:28:5e:d8:b8:60:be:5d:f4:80:d0:24:59:1e:2a:
         b4:48:f3:49:c9:0d:0a:99:28:e3:cc:7b:a0:d0:df:23:97:e5:
         e6:fb:10:42:ad:3b:e2:48:c2:80:c4:e9:aa:76:08:eb:a1:77:
         54:82:43:71:45:a9:9d:9c:a3:7d:fa:a4:c6:a8:bf:1a:57:e8:
         72:94:c6:ae:d4:e4:b3:f8:0d:2c:03:94:3f:ae:ec:b2:30:65:
         47:ef:16:ba:2d:d4:30:83:ca:29:4c:0e:cf:0f:83:1c:46:2b:
         a1:b7:81:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fAld9rz/sk4Rpe9HyvoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx
YzliMTkwHhcNMjUwNjI4MTcwMDQ4WhcNMjUwNjI5MTcwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZGYwM2NjNTM1YjM0YWY2ZDAxMDE0MDE1ZDFhYWQxYzk4NGRlYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9zf9ZXMu9OXMNIAGe+4TcVDMo6R
1KP/E2zFK9HAyebr03npuh/bX9j87Gm/1Agbwma9g8gV02EvxNNjCkjrzkTigMGF
WE6B4EYzAA7iYq01juS5ARiVJ/2BJOI8NrweCLQyT0EytFWJkRK18uQvwvohXhA3
vhiI8g+IapQerOgYJvBvyuZ8GhuisZ09SSGRcoRxFVy4YjF0Wni3Po4PbY4ic1WQ
Pkrq4DiaAkFbPjCpLOzlv3iz9HybScIO+rsJkrH5pqCCcNBeO9igZtZ1ElBGqYwF
CLrHpx7gkVv5iji0G6uJeaYjJl/OrCvXLrdDj+8lL9Wcj5kXUXdr5dHlXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3wPMU1s0r20BAUAV0arRyYTevAMB8GA1UdIwQY
MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt
ZDI1NTFjZGRlNGFmLzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm
LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3nJz1EB
j9bmPZFkg5GTlcrjLQ/YmV33inuoEijJq5SxXO6oiTak+J/311MrfIyjbbQ/QdBP
clVfoQRx0+yrM9ZOGe5EfHjwG2PJnI5STSq9wf1f1aX2mYlt7+4/BUx6zbtZDQwo
PH+IEP1d5tt7j7hvXhQe5tgvVxHFCyqkxaXHj9ZA8V0GgZ20dYVTCV+XPokCbShe
2Lhgvl30gNAkWR4qtEjzSckNCpko48x7oNDfI5fl5vsQQq074kjCgMTpqnYI66F3
VIJDcUWpnZyjffqkxqi/GlfocpTGrtTks/gNLAOUP67ssjBlR+8Wui3UMIPKKUwO
zw+DHEYrobeBFg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:29 2025 by rpki-client