Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File:                     bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier:          FAtgVpsuPymNTS8bgAJXaNBGdnAOQ3YZqxGbETPTYuE=
Subject key identifier:   98:65:6D:E9:5C:EA:A5:91:8D:E8:45:B0:AB:42:87:6B:DE:2D:18:D8
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer:       /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial:       0198D92BB6E644016B7B81935299B65A4C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number:          114B
Signing time:             Sat 23 Aug 2025 23:02:56 +0000
Manifest this update:     Sat 23 Aug 2025 23:02:56 +0000
Manifest next update:     Sun 24 Aug 2025 23:02:56 +0000
Files and hashes:         1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: LXp1lWw4V77msDz0Ckp4YLk4KLCERa0lHB5OBax7MuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:2b:b6:e6:44:01:6b:7b:81:93:52:99:b6:5a:4c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
        Validity
            Not Before: Aug 23 23:02:56 2025 GMT
            Not After : Aug 24 23:02:56 2025 GMT
        Subject: CN=98656de95ceaa5918de845b0ab42876bde2d18d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9d:92:f0:0c:ac:1f:13:7c:8c:95:2e:76:c7:
                    88:56:7e:96:49:2f:d7:e4:4c:97:f8:55:38:8b:d3:
                    b7:00:d6:51:f2:45:b0:69:79:f3:3b:c7:42:41:bf:
                    20:b3:f6:c8:aa:f4:87:7a:44:18:cb:f0:52:82:eb:
                    79:9c:e6:b0:44:10:71:f6:6a:49:55:23:e2:62:d4:
                    ee:8e:23:72:6b:bd:c1:16:78:19:22:98:1c:33:0e:
                    44:41:55:1d:13:e2:af:ad:cf:65:f8:45:6d:44:97:
                    74:46:5b:28:bf:e2:c3:41:8b:ba:b1:75:11:a5:36:
                    3e:1d:d9:24:4c:6f:d9:94:b6:63:6e:c6:93:0e:dc:
                    26:3b:2a:11:12:a5:b5:90:37:86:51:b1:b2:5e:ad:
                    70:2e:04:25:1b:2c:6f:b5:50:55:4b:ad:fb:7a:37:
                    bb:e2:f4:68:42:67:2d:8f:5f:ca:34:de:8e:8c:aa:
                    d0:1b:0b:de:d9:86:cd:60:c2:da:d8:28:fb:cc:d8:
                    47:54:d9:90:75:1c:66:2e:ec:3e:54:8a:dd:ec:c4:
                    96:1f:d9:f1:42:7d:50:ce:9e:2e:cd:b5:0a:0e:89:
                    fd:3c:c6:9b:1a:dd:77:0a:46:a1:fb:c2:08:13:e6:
                    5c:8c:86:7f:ab:45:51:11:61:1f:02:05:ae:f1:ce:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:65:6D:E9:5C:EA:A5:91:8D:E8:45:B0:AB:42:87:6B:DE:2D:18:D8
            X509v3 Authority Key Identifier:
                keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:37:e5:70:3c:4f:81:58:c8:4c:f7:77:db:3b:f9:f9:4f:
         a7:e5:0a:3d:01:df:84:ee:9f:75:9a:41:4c:03:be:55:63:40:
         2b:6a:88:e0:6b:0f:47:40:88:4b:ac:f9:bc:39:95:9d:b7:2e:
         fd:13:ee:34:d4:5e:bf:60:28:e5:49:42:cd:79:73:48:3d:44:
         a1:c9:9d:1a:42:51:4e:57:19:b4:fb:f3:18:ce:65:c5:92:91:
         cf:cc:a6:af:38:54:f3:50:c1:d0:48:92:8f:5a:96:a3:f5:5c:
         fd:16:83:3e:51:d9:9f:78:d5:b0:66:92:83:12:86:53:99:34:
         44:a0:0f:da:37:d3:7b:09:88:a4:e8:a0:4d:24:2c:9a:08:57:
         b7:78:cc:8f:9c:51:75:22:04:36:a5:00:6e:38:48:5a:1c:a9:
         9d:2b:09:73:47:ff:54:00:96:d4:21:ac:66:7c:42:27:d1:47:
         08:9f:2b:19:d7:3b:aa:7c:89:a5:f2:a9:3f:72:e3:9d:96:35:
         01:7e:47:1d:3e:e8:a4:a2:79:f8:84:47:c6:75:10:96:e8:1b:
         6a:27:c2:7b:e7:fe:e8:33:b5:51:ff:44:57:eb:8f:b2:c4:1f:
         2b:de:89:34:66:86:15:ac:28:a4:d2:7e:17:40:57:0a:50:56:
         ce:31:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:08 2025 by rpki-client