Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          ZS9ue2o+aW5pP89tYW93MdhknEMOEIhee3lCTUPPBGE=
Subject key identifier:   08:59:09:C6:CE:9C:FD:35:9D:28:D9:73:9F:E1:77:F2:4D:15:AE:AF
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       0199FBEBF46116FCD028BA144ECA83153A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0BE9
Signing time:             Sun 19 Oct 2025 10:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:48 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: ACu/OIxsledGCyb57DuEQwId0TYqIkjZI+XmhhmeohM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f4:61:16:fc:d0:28:ba:14:4e:ca:83:15:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Oct 19 10:02:48 2025 GMT
            Not After : Oct 20 10:02:48 2025 GMT
        Subject: CN=085909c6ce9cfd359d28d9739fe177f24d15aeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b5:bd:f6:64:4c:76:0f:ee:f9:df:20:4c:97:
                    82:f7:e8:39:69:da:de:4f:1e:5c:08:f8:c9:89:8a:
                    1b:ae:e3:06:36:b5:a1:3b:f5:96:92:28:28:56:05:
                    01:62:1d:8d:c8:ac:f2:94:79:53:c3:60:b3:50:e8:
                    e2:e9:2c:94:4d:0d:af:01:6a:15:42:ba:20:08:ea:
                    f1:81:63:67:e8:30:01:7c:ba:e7:53:74:7f:97:e9:
                    4b:d8:b0:4e:4e:64:18:9e:c9:6d:1c:d2:8a:2d:a9:
                    06:9a:e8:d7:27:2c:fc:33:e5:fa:fe:00:fb:02:42:
                    a4:a2:4d:8a:c1:88:4c:b7:88:f9:10:2d:9e:02:73:
                    bd:a9:88:6a:70:6f:9f:6e:cb:75:e5:0c:82:74:39:
                    04:08:24:16:57:25:a1:00:11:ad:fa:44:1c:b8:f1:
                    82:aa:76:8c:51:69:85:dc:4d:c5:4b:dd:d5:fe:80:
                    d1:e6:7f:54:64:6e:23:9c:0b:ce:68:93:ac:4b:f6:
                    44:f8:04:ab:4d:80:fc:67:18:83:c5:a8:88:23:69:
                    22:70:8c:c9:fd:0e:cb:7e:57:4d:d1:c6:db:b1:02:
                    e1:f9:8c:2c:79:f9:ab:14:aa:38:1d:ec:0f:2e:c0:
                    ce:39:f9:30:64:1c:74:da:05:af:ba:53:4c:06:53:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:59:09:C6:CE:9C:FD:35:9D:28:D9:73:9F:E1:77:F2:4D:15:AE:AF
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:b9:96:73:a8:5e:da:a8:85:3a:a0:cf:31:71:ca:9c:de:
         ea:2f:2d:52:7d:80:3a:a4:80:4b:f0:c6:2e:b5:31:e6:79:6f:
         28:4f:62:00:eb:40:0d:c2:5e:0a:b5:72:62:15:46:3c:4c:0e:
         ad:10:9d:ba:f5:87:e9:12:32:e4:e8:aa:59:91:f6:67:ab:6a:
         60:76:4b:9a:a7:8f:b3:89:6a:39:ab:ab:eb:51:6a:cc:ef:05:
         f1:22:5d:3c:69:62:3b:58:39:68:1b:fc:c3:6b:35:fa:c6:f7:
         ef:49:d0:d5:e0:ed:01:51:cc:c9:1b:08:85:db:9c:93:1f:d6:
         64:38:c1:b5:06:2d:2b:78:e4:48:e0:0d:d7:58:24:3d:46:02:
         dd:89:bd:6d:2c:3a:ab:da:11:b4:a5:37:86:75:2d:f6:f9:68:
         fe:35:d2:63:98:32:d1:c0:53:fa:bc:8a:90:6c:96:df:a5:50:
         82:58:b3:e9:82:6c:5e:03:31:fa:03:7b:72:81:98:59:b9:50:
         24:c0:ff:11:f5:ea:bc:2c:de:69:db:b8:3d:22:92:55:f4:88:
         b7:bf:83:ba:31:21:27:9d:f5:cb:aa:4e:c7:36:a8:05:ee:1c:
         06:7b:a6:d6:2c:d0:81:16:01:41:91:bb:a1:e0:2a:27:40:b9:
         8f:dd:d4:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/RhFvzQKLoUTsqDFTpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ3ODRiOTAxMjY2M2MzNDBiZjY3ZmFjYjYxYmZiZTEw
ODcxYjgwHhcNMjUxMDE5MTAwMjQ4WhcNMjUxMDIwMTAwMjQ4WjAzMTEwLwYDVQQD
EygwODU5MDljNmNlOWNmZDM1OWQyOGQ5NzM5ZmUxNzdmMjRkMTVhZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bW99mRMdg/u+d8gTJeC9+g5adre
Tx5cCPjJiYobruMGNrWhO/WWkigoVgUBYh2NyKzylHlTw2CzUOji6SyUTQ2vAWoV
QrogCOrxgWNn6DABfLrnU3R/l+lL2LBOTmQYnsltHNKKLakGmujXJyz8M+X6/gD7
AkKkok2KwYhMt4j5EC2eAnO9qYhqcG+fbst15QyCdDkECCQWVyWhABGt+kQcuPGC
qnaMUWmF3E3FS93V/oDR5n9UZG4jnAvOaJOsS/ZE+ASrTYD8ZxiDxaiII2kicIzJ
/Q7LfldN0cbbsQLh+YwsefmrFKo4HewPLsDOOfkwZBx02gWvulNMBlNq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhZCcbOnP01nSjZc5/hd/JNFa6vMB8GA1UdIwQY
MBaAFAVdeEuQEmY8NAv2f6y2G/vhCHG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYt
M2I0MjA1ZGI3NTNhLzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYtM2I0MjA1ZGI3NTNh
LzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkv+5lnOo
XtqohTqgzzFxypze6i8tUn2AOqSAS/DGLrUx5nlvKE9iAOtADcJeCrVyYhVGPEwO
rRCduvWH6RIy5OiqWZH2Z6tqYHZLmqePs4lqOaur61FqzO8F8SJdPGliO1g5aBv8
w2s1+sb370nQ1eDtAVHMyRsIhduckx/WZDjBtQYtK3jkSOAN11gkPUYC3Ym9bSw6
q9oRtKU3hnUt9vlo/jXSY5gy0cBT+ryKkGyW36VQgliz6YJsXgMx+gN7coGYWblQ
JMD/EfXqvCzeadu4PSKSVfSIt7+DujEhJ531y6pOxzaoBe4cBnum1izQgRYBQZG7
oeAqJ0C5j93UDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:43 2025 by rpki-client