Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File:                     G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier:          nFyl+yaBn7GkfwldfNZb498M7BrvFufI4ZqesIGC3d8=
Subject key identifier:   6D:A3:5B:E3:10:3B:1B:89:13:BA:C3:D7:36:DD:E1:27:94:9D:1C:64
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer:       /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial:       0198D5BC3522D2B785D1DCC82625E09D3812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: 9y9Fg5b33SIs13UaOZEY3BZtaLE+RMCdZvGtxmxsCbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:35:22:d2:b7:85:d1:dc:c8:26:25:e0:9d:38:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=6da35be3103b1b8913bac3d736dde127949d1c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:e2:9d:5a:34:52:f9:eb:5d:86:1b:29:f0:
                    9d:62:33:2b:fb:d1:a2:5a:b9:13:5d:67:ab:9e:8b:
                    93:3c:10:61:92:65:37:5f:4c:46:3e:40:21:e6:1d:
                    28:c6:20:1a:d1:36:2f:57:0b:df:ed:ac:1d:b0:9d:
                    ce:b7:2a:09:17:10:06:99:23:c8:c1:63:1e:0d:62:
                    96:ba:69:41:99:0e:9c:f2:6d:4f:c3:4f:d6:42:d4:
                    05:53:b6:d7:4b:45:41:f0:0b:3e:03:13:81:8a:1f:
                    4a:52:36:e5:f0:6c:cf:0d:dd:38:5b:28:a4:6b:27:
                    f9:ad:47:c5:a7:72:ee:23:4a:c1:ba:48:33:22:22:
                    d0:ce:b1:d4:3e:a6:7d:8b:0d:cd:6d:0a:72:60:9e:
                    4b:ec:1d:e2:38:6c:fd:18:ff:10:cb:1c:35:68:ce:
                    94:b9:fe:fc:f7:55:da:49:4d:0c:eb:a0:98:40:8e:
                    b8:33:d0:c9:f8:05:c3:3d:d3:33:d3:f6:03:04:1d:
                    9a:1e:85:87:c9:0a:99:e7:ec:36:05:1e:b6:da:d2:
                    49:df:fd:fb:0a:e4:c7:ce:c0:2e:d9:ff:65:2c:43:
                    ad:fd:38:d3:82:3e:4f:30:cf:cf:04:64:1c:d0:d6:
                    23:19:d1:5f:22:a8:90:c0:db:87:de:47:91:95:29:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A3:5B:E3:10:3B:1B:89:13:BA:C3:D7:36:DD:E1:27:94:9D:1C:64
            X509v3 Authority Key Identifier:
                keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:e3:21:7f:f0:77:33:52:38:f4:3d:01:60:e1:04:ac:82:
         80:7d:3b:e9:18:d5:8b:5e:99:cb:4c:b8:cc:88:be:ac:4f:ca:
         7e:fc:97:0f:4a:30:71:0f:57:0b:0a:26:1d:8b:ca:4a:36:1e:
         9b:6e:75:a5:c9:66:d5:81:87:01:fc:6c:86:41:01:24:99:18:
         5b:29:a5:26:ce:d7:5c:b3:b1:84:a4:69:0d:82:62:28:a3:b3:
         ff:10:d3:bd:ba:e7:2a:56:90:8a:2d:a6:f9:8c:38:89:5c:2b:
         e1:42:c2:cd:b4:28:3b:cf:f4:fb:d6:fe:ad:5c:c8:bb:18:54:
         62:3e:f6:cf:f9:bc:b4:7a:55:4b:f5:cc:e5:ee:81:dd:3c:2a:
         1e:f5:65:a6:42:91:39:d2:8d:38:dc:e4:f8:94:72:eb:dc:f1:
         13:cf:1c:f8:36:90:1d:0f:a6:1f:6d:cf:07:60:f6:dd:a6:36:
         72:21:bc:8a:ee:60:4c:d3:7a:65:f7:41:0e:37:b9:da:28:36:
         6b:a3:ae:ef:63:b2:df:c4:2f:cc:28:cc:9b:5b:8b:65:8a:09:
         4b:15:ca:28:9d:7e:85:70:16:9d:de:45:df:40:3d:48:75:8d:
         71:d1:5c:b4:43:98:4e:26:69:91:ef:9c:71:0b:65:8b:82:cb:
         66:5a:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:10 2025 by rpki-client