Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File:                     rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier:          6qV7T8Y1oC86VOKmWnpXryR9K5IFcf3AJcRMNHr9SsY=
Subject key identifier:   82:58:86:1E:98:14:BE:74:5E:A2:3D:81:33:EA:AE:D3:7D:06:E3:D7
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer:       /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial:       019CAAFD83F053DDC8B4E8F092ED8A7C33B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 20:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:06 +0000
Files and hashes:         1: eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (hash: 0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=)
                          2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: QhpJHbLL5shqE6bjGhSPQYIa/W6UAm5OYKtmzUu7ZZc=)
                          3: uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (hash: BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:83:f0:53:dd:c8:b4:e8:f0:92:ed:8a:7c:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
        Validity
            Not Before: Mar  1 20:01:06 2026 GMT
            Not After : Mar  2 20:01:06 2026 GMT
        Subject: CN=8258861e9814be745ea23d8133eaaed37d06e3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:9c:99:c9:58:af:1a:a2:1f:05:ad:03:3a:
                    ce:27:64:06:9d:ee:7f:5a:d5:70:ad:00:96:ea:6e:
                    f5:b9:e0:59:99:6e:e4:92:7a:b9:c8:87:38:61:05:
                    f6:7a:3b:73:b7:ce:09:48:86:5f:81:45:69:ff:de:
                    5d:d1:7a:97:e5:ce:e5:0f:a7:e7:d9:de:48:6e:6b:
                    b4:d1:a6:cb:2d:89:71:52:02:fa:20:a1:74:ca:de:
                    45:49:94:bf:6d:af:13:02:b7:6c:e3:a8:a3:b4:c2:
                    57:f0:f5:fb:7e:3f:c9:35:1f:83:3e:cc:bd:3b:d1:
                    c2:e8:39:2f:6e:08:cb:df:63:65:1d:7c:f5:c7:55:
                    71:8f:2c:0a:13:7b:32:95:83:07:73:8a:3f:5b:2d:
                    66:a1:a9:17:1b:91:8c:c2:27:02:82:77:d1:4a:c1:
                    d4:ec:59:e3:78:3a:f1:4e:1f:8b:6f:0b:25:7b:1f:
                    ae:1b:f5:c8:ae:27:c6:5e:ea:75:5b:8b:3c:b3:68:
                    74:88:ad:36:b6:c7:85:2a:38:3b:45:ec:01:28:24:
                    c1:37:c0:93:d5:f4:eb:95:01:e5:2c:6a:e6:5d:10:
                    be:08:c3:68:3b:14:59:56:45:93:72:88:6a:ca:e2:
                    b9:af:28:10:f9:5e:cb:4f:b0:d3:96:52:9d:73:72:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:58:86:1E:98:14:BE:74:5E:A2:3D:81:33:EA:AE:D3:7D:06:E3:D7
            X509v3 Authority Key Identifier:
                keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:97:98:58:ee:ba:95:16:ab:9b:3c:b6:12:b8:07:a0:11:
         98:52:25:1b:e5:da:d2:2b:58:13:14:3f:b4:d2:f3:39:dc:82:
         15:86:80:bf:a0:3a:96:5a:d6:1d:7f:0e:27:a4:13:2e:81:2b:
         df:38:ea:e1:e0:8b:5c:e6:49:7e:e3:eb:85:aa:a9:1f:b0:0b:
         78:cb:c8:6a:5c:77:84:1d:cd:bc:88:de:84:4c:c8:43:0e:be:
         51:fd:ab:fa:92:cd:94:98:f6:6f:0d:92:e9:af:10:c8:a8:7b:
         8b:61:90:34:e2:dc:8a:07:23:28:15:ee:4f:bf:3d:02:4f:e5:
         79:02:01:2e:97:51:e8:dd:ac:83:84:3d:f9:73:5c:b7:54:cb:
         06:15:d7:f4:70:33:dd:7a:ed:86:76:56:b6:2d:c6:f7:09:74:
         69:bf:dc:94:7f:ea:7d:fc:50:f5:dd:93:97:74:fd:58:1e:85:
         3c:a2:5e:13:ca:68:0d:c9:bd:2d:98:d2:4f:5e:79:b4:ec:bb:
         55:a3:f8:51:67:ac:1d:1c:cb:0e:ef:bf:bc:ec:77:fe:a0:18:
         9a:58:5d:de:76:1a:40:42:de:a1:fe:41:7d:75:42:cc:8e:3b:
         0a:e6:19:a4:56:97:91:1f:b7:85:6f:c2:5f:5f:dc:ed:73:8f:
         f6:ef:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:58 2026 by rpki-client