Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File:                     G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier:          rM8fpjacDvOgPNPPGdPuT6aLUQs0vTe4TIH6/RjD0O4=
Subject key identifier:   26:30:21:18:57:10:FC:C3:5C:72:83:10:B0:86:35:58:6B:58:1A:2E
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer:       /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial:       0198733D9464DD9B488CC8D5803273ED6977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 04:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:12 +0000
Files and hashes:         1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: dp5fySM3gAr7vH85NheLq0Jsc/hf7ALFlC/Airtr4XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:94:64:dd:9b:48:8c:c8:d5:80:32:73:ed:69:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
        Validity
            Not Before: Aug  4 04:01:12 2025 GMT
            Not After : Aug  5 04:01:12 2025 GMT
        Subject: CN=263021185710fcc35c728310b08635586b581a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:69:c6:7f:7a:4c:61:e4:c4:02:cb:86:32:
                    fc:ad:87:56:b2:8a:f5:ae:86:18:2f:2a:2d:29:51:
                    79:41:cc:41:38:4e:55:ce:2d:7f:fa:68:a2:cc:a7:
                    d1:ad:5f:f8:4b:57:0b:19:50:a8:f4:1e:13:72:db:
                    5a:82:86:f3:f9:1f:12:64:d6:a4:ff:05:5e:28:4a:
                    66:8c:8b:64:e9:77:2f:89:74:62:df:30:ff:e9:7c:
                    65:c6:10:f0:5f:16:21:59:bb:d8:da:55:49:74:d8:
                    28:12:e9:5a:27:06:a5:52:ec:6b:84:e6:33:48:8c:
                    da:3c:82:57:3c:38:56:fa:0c:a5:35:a3:28:62:8c:
                    eb:1a:f1:30:0e:a6:f4:9b:fe:75:0d:bc:96:c3:02:
                    21:17:fb:e2:2c:fc:68:b9:a0:0f:a7:3b:94:f8:fe:
                    89:61:19:36:41:34:56:fb:11:82:67:33:65:71:aa:
                    df:95:8d:6c:2c:cb:c8:4f:36:14:c4:1f:b1:f9:c5:
                    17:d9:5e:99:c8:c1:e6:1a:bc:29:1c:4f:df:e0:5a:
                    ce:43:78:c2:00:c3:6d:76:76:82:65:31:43:9e:92:
                    76:c3:47:be:63:5b:de:60:5b:3a:5c:7f:da:10:a5:
                    7f:62:10:7a:e6:d5:4f:65:16:15:74:1b:a6:fa:0d:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:21:18:57:10:FC:C3:5C:72:83:10:B0:86:35:58:6B:58:1A:2E
            X509v3 Authority Key Identifier:
                keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3c:87:a4:64:2c:73:18:e8:48:0f:17:5c:2e:c9:c4:a9:c4:
         70:40:25:b0:41:a0:4a:25:a5:2f:81:16:3b:d9:d8:da:f7:2d:
         75:ec:99:1f:8c:45:a8:90:98:57:2f:16:1b:49:42:b6:fd:47:
         18:9b:04:4b:4f:fc:ce:5c:86:36:f0:6d:fb:6c:9e:98:01:40:
         c7:6e:cf:1a:88:8d:db:a6:bf:bd:3b:8c:2b:ca:fd:49:f3:26:
         1c:1f:b1:13:c8:79:a0:a1:3b:fe:fa:a6:6d:24:b7:9d:42:c3:
         14:bd:19:57:dd:81:d6:65:e6:2e:03:5c:f2:e9:bf:f5:e0:e9:
         5a:6b:72:cb:01:90:2a:43:46:bd:1f:88:6c:68:bf:a5:2d:57:
         ce:c2:81:c3:8a:f9:52:72:d9:61:f6:96:d2:a8:18:5b:ad:41:
         46:cb:80:cc:58:51:ff:5d:fb:02:ac:0a:fe:ad:4b:e5:95:e4:
         b5:12:3e:8f:5e:16:26:15:f8:6a:9a:4b:95:7f:64:0a:90:69:
         f0:78:2e:22:61:1b:2b:bf:23:b2:c0:15:a2:4e:c1:7e:ed:4e:
         40:b0:d7:18:2a:e3:62:30:b0:9b:b8:c4:b4:4b:66:5d:b5:c5:
         0c:1b:13:a2:65:45:42:b8:e2:6c:5a:a3:1d:d0:d1:d7:b7:cc:
         d1:4a:60:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPZRk3ZtIjMjVgDJz7Wl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjllMzMyMzc4OGFhMTYxYTYyOTcyMDZhZTNlN2IxOWE5
ZmZjNjEwHhcNMjUwODA0MDQwMTEyWhcNMjUwODA1MDQwMTEyWjAzMTEwLwYDVQQD
EygyNjMwMjExODU3MTBmY2MzNWM3MjgzMTBiMDg2MzU1ODZiNTgxYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln9pxn96TGHkxALLhjL8rYdWsor1
roYYLyotKVF5QcxBOE5Vzi1/+miizKfRrV/4S1cLGVCo9B4Tcttagobz+R8SZNak
/wVeKEpmjItk6XcviXRi3zD/6XxlxhDwXxYhWbvY2lVJdNgoEulaJwalUuxrhOYz
SIzaPIJXPDhW+gylNaMoYozrGvEwDqb0m/51DbyWwwIhF/viLPxouaAPpzuU+P6J
YRk2QTRW+xGCZzNlcarflY1sLMvITzYUxB+x+cUX2V6ZyMHmGrwpHE/f4FrOQ3jC
AMNtdnaCZTFDnpJ2w0e+Y1veYFs6XH/aEKV/YhB65tVPZRYVdBum+g06CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYwIRhXEPzDXHKDELCGNVhrWBouMB8GA1UdIwQY
MBaAFBtp4zI3iKoWGmKXIGrj57Gan/xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYt
YjBkMjk2NTIwZDMyLzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYtYjBkMjk2NTIwZDMy
LzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDyHpGQs
cxjoSA8XXC7JxKnEcEAlsEGgSiWlL4EWO9nY2vctdeyZH4xFqJCYVy8WG0lCtv1H
GJsES0/8zlyGNvBt+2yemAFAx27PGoiN26a/vTuMK8r9SfMmHB+xE8h5oKE7/vqm
bSS3nULDFL0ZV92B1mXmLgNc8um/9eDpWmtyywGQKkNGvR+IbGi/pS1XzsKBw4r5
UnLZYfaW0qgYW61BRsuAzFhR/137AqwK/q1L5ZXktRI+j14WJhX4appLlX9kCpBp
8HguImEbK78jssAVok7Bfu1OQLDXGCrjYjCwm7jEtEtmXbXFDBsTomVFQrjibFqj
HdDR17fM0UpgCg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:38 2025 by rpki-client