Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File:                     G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier:          j0OtUGTdZJcNGOru7LiJwBA7CzFuext2Mi1//hwRe/o=
Subject key identifier:   CE:DB:39:13:0B:87:CE:B9:38:9D:19:D9:10:13:A7:11:A9:02:5D:2F
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer:       /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial:       019747E72E2E5C0BDE4E568B5F5BF321E85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 01:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:22 +0000
Files and hashes:         1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: sPmYwUCYItFRFwFKY/xPF5WG19mli0DK/yzOk8FvRjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:2e:2e:5c:0b:de:4e:56:8b:5f:5b:f3:21:e8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
        Validity
            Not Before: Jun  7 01:00:22 2025 GMT
            Not After : Jun  8 01:00:22 2025 GMT
        Subject: CN=cedb39130b87ceb9389d19d91013a711a9025d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:ce:db:67:0f:51:d5:f8:f6:ae:6a:99:08:
                    c7:26:42:93:4e:ef:6e:03:44:eb:c7:ee:17:5f:d3:
                    bf:36:25:36:6b:0c:b8:c9:0f:67:ec:51:74:56:4f:
                    7c:9b:c3:a1:c4:84:64:61:57:f6:c2:c0:ee:2e:f9:
                    e9:32:92:ed:86:f2:c7:e6:3c:ff:07:f2:25:c4:74:
                    a7:c9:3d:54:7f:3f:9e:0f:8c:06:ba:13:99:32:81:
                    3b:7e:d3:1c:b5:e9:8a:97:26:c6:0a:c5:24:28:39:
                    19:8b:d0:37:59:f2:4d:d2:3e:e0:ec:4a:49:2f:d2:
                    8a:e8:bd:2d:2f:aa:f4:f5:ec:c0:dc:5b:ff:39:e0:
                    90:f0:4b:05:c8:fc:2e:17:f1:32:63:c7:7a:ad:5a:
                    28:2a:18:a9:59:2d:d3:52:a9:b9:bd:18:23:49:86:
                    1b:65:c5:75:be:5d:a7:86:2a:e0:51:73:05:24:16:
                    ee:ea:e7:63:d6:04:fc:f0:c0:d0:38:e3:bb:a5:09:
                    a1:c2:ef:96:fd:b1:53:70:81:74:fa:dd:5a:0a:29:
                    f4:dc:4c:b9:57:c0:75:0d:8c:0a:d4:33:e4:4f:3d:
                    d6:26:43:90:26:e9:68:5d:ab:18:dc:8a:71:1b:49:
                    2a:d6:77:b8:89:c8:3b:eb:85:17:e9:9c:f5:32:14:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:39:13:0B:87:CE:B9:38:9D:19:D9:10:13:A7:11:A9:02:5D:2F
            X509v3 Authority Key Identifier:
                keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8f:c6:2e:35:6a:8b:2e:a1:01:56:7d:04:9a:29:80:b0:0e:
         41:d6:0b:df:38:c6:60:fc:24:9f:97:dc:06:53:63:c8:1d:83:
         24:33:1a:7b:bc:cc:6b:32:31:8f:2c:ee:e8:63:48:ae:44:f9:
         df:19:fe:ba:02:d6:f5:88:53:d1:c6:76:37:c6:e1:cc:a6:41:
         76:85:0f:a4:99:c8:da:76:26:17:c5:b1:6b:55:00:98:1f:52:
         71:e5:bd:e0:db:2c:2f:7f:b6:00:89:05:96:2d:16:ae:dd:a0:
         ae:ec:95:8c:5b:8e:14:50:d9:98:29:de:ca:19:40:c5:91:17:
         43:5f:a6:2e:f0:56:83:aa:d2:32:5d:ba:9c:51:15:aa:f0:56:
         f6:b3:f5:93:a2:5e:fa:ce:5c:a0:1c:1c:f9:f1:cb:4e:34:8c:
         47:ab:dd:4a:84:65:51:d6:ba:ad:58:8d:ea:0c:0b:d0:64:c7:
         8a:73:11:40:7d:39:cd:5d:f8:0d:06:0b:72:cf:e4:17:38:7b:
         51:6b:e8:89:63:23:48:21:6e:d9:83:4c:29:c3:e1:bb:6a:b7:
         4f:2b:0a:f9:f4:88:8c:48:ac:fe:8f:4c:2b:bd:b4:00:02:42:
         52:50:85:e3:7c:26:d2:68:04:40:24:8e:33:0d:1a:00:8c:d7:
         68:9a:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:24:23 2025 by rpki-client