Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File:                     G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier:          kz696/ksfntFh5bYcPB9oJwTNvojXsIUm9Wlan/dmWc=
Subject key identifier:   C5:22:29:CA:B3:C3:D5:57:F6:98:B3:41:03:21:30:3E:9E:FC:62:4F
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer:       /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial:       0196AF57136ABA66D3D2777609FC12F0596C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number:          1529
Signing time:             Thu 08 May 2025 10:00:41 +0000
Manifest this update:     Thu 08 May 2025 10:00:41 +0000
Manifest next update:     Fri 09 May 2025 10:00:41 +0000
Files and hashes:         1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: E22DPBvN5lxK+dVIVc9Biezju38HVAB0HfJNd9qHHX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:57:13:6a:ba:66:d3:d2:77:76:09:fc:12:f0:59:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
        Validity
            Not Before: May  8 10:00:41 2025 GMT
            Not After : May  9 10:00:41 2025 GMT
        Subject: CN=c52229cab3c3d557f698b3410321303e9efc624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:60:a0:43:4e:9f:47:d6:38:f2:36:d9:2d:62:
                    65:87:48:cb:bd:31:39:5e:0c:07:bb:e5:4b:63:d0:
                    72:2c:de:17:5b:fb:b7:e5:4a:ac:8e:bd:13:32:8f:
                    74:a7:4b:a0:47:df:4b:70:c7:f8:f2:86:c1:55:c8:
                    22:33:47:37:e3:95:69:0c:c9:24:3c:62:ae:55:bd:
                    76:4c:ce:de:93:2a:0f:24:8b:3d:e3:7e:eb:af:e1:
                    48:3a:e0:79:6d:8c:68:be:62:96:8a:17:27:83:cd:
                    32:82:10:b0:82:fe:83:1b:6c:dd:d9:ac:92:6f:c7:
                    ec:59:f8:d3:0d:7d:95:5d:d8:d7:08:d7:cc:32:25:
                    90:a0:b2:0b:4e:28:32:70:99:88:0b:9c:23:a5:c1:
                    d9:f4:d3:8e:26:9b:97:7e:92:23:3d:8a:43:da:39:
                    d5:68:89:50:fe:f0:49:fd:7e:37:e5:00:44:4e:63:
                    de:c8:d4:b9:8d:72:e2:47:ae:6a:e3:f5:96:70:6e:
                    c3:97:46:52:bc:6a:76:c1:83:e0:71:c8:0d:b7:43:
                    1f:16:06:47:ec:d5:67:85:b6:77:4f:4c:f9:04:8a:
                    00:69:ba:ed:72:c3:ec:e3:12:4c:40:6b:51:e1:09:
                    84:93:95:79:2d:e6:74:5d:e5:7f:a3:01:3c:30:c3:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:29:CA:B3:C3:D5:57:F6:98:B3:41:03:21:30:3E:9E:FC:62:4F
            X509v3 Authority Key Identifier:
                keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b2:80:6c:ab:0b:3a:ed:6e:e3:cc:85:a0:fa:6e:8e:fa:af:
         dd:10:5d:50:a2:10:2a:04:5a:d0:e5:06:29:8f:1d:d0:5e:d7:
         d5:82:5a:38:7b:87:1f:ed:4e:75:01:1b:b3:ef:49:cd:68:fc:
         77:79:3c:3a:04:03:4d:b4:11:11:a0:3a:39:8f:53:3f:2a:c0:
         44:1b:83:c8:a1:ad:9d:f8:84:f2:42:60:56:16:54:55:b0:a8:
         5e:da:be:cd:3e:23:93:53:18:9b:6b:83:56:73:63:89:59:a8:
         3b:76:92:e1:1a:73:b8:da:56:34:73:6b:55:0b:56:5a:5e:ab:
         a6:8d:f2:38:6a:ec:72:00:db:12:19:07:72:83:fa:56:a7:86:
         f1:63:54:b9:e0:be:1e:b0:c6:0b:29:42:35:6c:d1:1c:3f:e3:
         c4:42:ed:22:09:28:b2:93:f3:9f:7d:ae:8e:78:ee:33:03:3d:
         8d:7d:8f:6e:fb:41:4a:aa:ce:0d:a3:f5:4f:cc:8f:b3:fa:24:
         df:cd:26:ba:c0:7a:12:73:4a:9f:eb:a6:92:30:c1:ad:fc:6e:
         ea:c1:69:1e:54:66:36:5d:50:05:7d:b4:7d:f0:37:85:f9:21:
         a3:8d:01:a0:65:fe:fb:77:6a:8c:cb:10:bb:00:82:51:ab:62:
         f5:60:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:22:07 2025 by rpki-client