Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File:                     bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier:          ZxDcoJKf+CAeGT7V5oUY7SVuMpbYsnCo0eqDbrNryIc=
Subject key identifier:   9E:85:9D:53:2A:56:DB:E5:A5:B8:E4:8F:21:31:63:DF:D5:27:1F:BF
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer:       /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial:       0199228C90B608F35EB38CA595726CEB9561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number:          1171
Signing time:             Sun 07 Sep 2025 05:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:01 +0000
Files and hashes:         1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: RALfDcGKoF1h3FH9Xh8HJrH7zvdnI1gFgk2g1cefj2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:90:b6:08:f3:5e:b3:8c:a5:95:72:6c:eb:95:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
        Validity
            Not Before: Sep  7 05:01:01 2025 GMT
            Not After : Sep  8 05:01:01 2025 GMT
        Subject: CN=9e859d532a56dbe5a5b8e48f213163dfd5271fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:40:2b:0f:c3:04:69:02:ca:9e:5f:11:53:
                    80:3b:9d:5c:7c:59:f5:e7:05:8a:50:e7:1a:7a:15:
                    70:f5:ce:2d:65:ba:36:87:b9:4d:8a:b6:8b:65:b0:
                    37:04:dc:9a:42:91:6b:78:30:a7:7c:12:ad:82:a5:
                    e6:86:c2:b5:dc:62:82:91:15:a7:46:1f:5f:4c:84:
                    d8:56:22:97:1a:a7:80:c7:27:c1:0b:79:c0:38:53:
                    2d:84:ef:22:7c:a0:b5:92:5f:71:ea:b5:9a:4b:32:
                    2b:4b:48:b8:5c:2b:fe:d9:9e:af:b6:dc:ce:25:2d:
                    1c:7f:e1:cf:4c:a0:34:63:37:d8:57:80:0d:89:da:
                    48:93:10:4d:1e:e6:aa:ea:3e:9a:18:56:23:86:28:
                    9f:ea:cd:e7:2e:7b:d5:16:00:70:38:19:49:ff:6b:
                    02:39:97:98:10:74:df:26:61:ea:83:6a:2c:de:39:
                    2a:f2:53:40:8b:eb:97:90:48:ab:c5:f0:2f:92:b0:
                    6e:09:85:66:7b:19:84:79:b8:b0:ae:8e:94:12:df:
                    42:d0:2a:16:d8:14:de:f7:e8:fd:e7:a6:31:6b:51:
                    06:97:7b:a7:14:7e:68:3f:11:28:cd:43:a3:e1:db:
                    18:54:cf:30:c8:6c:41:6d:4d:4d:8b:87:78:33:8a:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:9D:53:2A:56:DB:E5:A5:B8:E4:8F:21:31:63:DF:D5:27:1F:BF
            X509v3 Authority Key Identifier:
                keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:8b:b1:2e:68:c6:03:c2:76:09:b4:8b:87:8b:9d:40:0b:
         20:57:9c:8b:6c:82:a3:8c:f6:7c:3d:da:7a:7f:90:fc:98:1c:
         ae:70:85:84:1a:7f:01:57:9d:f4:5b:95:f3:be:36:16:d9:56:
         3d:d1:29:36:ee:7f:f1:aa:d3:49:01:fa:37:b5:be:6a:bd:3d:
         4f:d4:ee:30:0e:33:19:c1:45:df:a2:07:be:72:3a:17:31:67:
         1d:47:88:e3:94:dc:73:7a:35:1d:47:3e:2c:24:5d:6b:2c:b3:
         05:f6:2b:1e:5b:6d:3e:bf:0b:56:7a:86:1e:68:99:32:e7:fb:
         a7:fb:fe:e7:5c:64:46:54:23:18:23:b6:61:79:4f:18:fb:49:
         93:64:a9:05:ec:fd:fd:1f:37:b5:f2:9b:19:fb:58:37:f3:91:
         d3:e7:76:38:03:2f:b5:e0:ca:25:7b:5c:94:75:7d:76:9f:a6:
         63:cf:05:92:20:b4:1b:32:98:86:dd:94:fd:30:ad:79:74:dd:
         d3:73:77:1a:7a:d5:72:72:69:af:40:9c:3d:c3:96:1c:95:99:
         5b:ca:a7:4e:08:51:31:fc:1e:a7:37:72:c4:1d:21:28:52:93:
         94:e6:57:7d:0f:7c:e0:96:c9:2f:9a:4f:64:0d:38:b7:b0:2d:
         09:4c:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:50 2025 by rpki-client