Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          uk8pKaxJ98VNLF5oTuiW9FNzNY0zhJuS86qTS/cuzsw=
Subject key identifier:   06:8B:CB:D1:E8:46:4F:60:0D:82:31:01:64:10:38:D4:CD:10:15:35
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       01A0D75FB9AED9BF34DBD9D5B5E89A53945A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0F76
Signing time:             Fri 25 Sep 2026 07:02:49 +0000
Manifest this update:     Fri 25 Sep 2026 07:02:49 +0000
Manifest next update:     Sat 26 Sep 2026 07:02:49 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: a0hqJJI3TBKZH0NvW+iT4cogVSJCpN7IDlpx91EC5nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:5f:b9:ae:d9:bf:34:db:d9:d5:b5:e8:9a:53:94:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Sep 25 07:02:49 2026 GMT
            Not After : Sep 26 07:02:49 2026 GMT
        Subject: CN=068bcbd1e8464f600d823101641038d4cd101535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:12:80:f1:6b:71:3f:3b:9e:ce:d2:4f:07:
                    f7:bb:a6:69:cd:1b:9f:a4:48:d7:4c:43:e7:16:d3:
                    5c:dc:72:90:9f:c4:e7:e3:96:b0:8c:1f:3b:89:aa:
                    f1:66:64:5f:87:59:c4:ff:36:bc:fd:ef:58:cb:98:
                    b5:17:69:b1:c1:5f:70:ad:91:1c:9d:35:a3:d7:5c:
                    ee:a4:9b:6c:99:c9:a0:d9:66:33:d9:ca:09:2c:da:
                    61:19:c5:3f:c1:41:f1:0f:2d:94:f7:95:83:f3:87:
                    8c:c8:86:48:c3:fb:19:93:72:12:08:af:40:c3:92:
                    ee:00:51:d0:74:f5:f8:18:11:8a:b9:29:e3:53:a2:
                    b3:e8:38:70:6c:9d:87:8f:0e:e5:2b:c4:3c:9f:35:
                    f6:af:f9:62:29:29:b1:af:40:64:09:59:6e:5e:b8:
                    2d:2b:86:09:b8:85:5d:3b:e4:d1:76:06:2e:44:e9:
                    c6:fb:84:e3:97:b7:9c:e5:ba:48:a4:25:2a:5e:10:
                    23:f0:6f:da:d9:a6:80:df:73:8d:a1:01:2a:27:f0:
                    57:c4:1e:84:b7:1f:a9:c2:bd:ed:15:37:9c:4c:9e:
                    28:63:26:9c:62:b1:12:65:c2:6c:ef:50:9c:27:26:
                    ae:98:59:a3:cb:d0:18:51:78:34:ab:97:4f:e0:02:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:CB:D1:E8:46:4F:60:0D:82:31:01:64:10:38:D4:CD:10:15:35
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:b2:00:2b:a2:74:79:2b:79:09:8a:03:e0:ac:c5:dc:38:
         7e:ba:01:92:26:ac:4a:be:1c:5b:be:03:a1:04:ef:ec:f3:8d:
         67:f6:e3:66:77:ca:6b:8a:77:52:1d:3d:b0:fa:8f:42:5f:8a:
         32:6e:fd:c9:ed:31:c3:93:2a:06:5d:64:b7:e9:a6:65:7f:aa:
         df:5e:55:d0:93:c4:db:45:17:ae:dc:ef:04:82:2d:ec:01:1a:
         bc:34:e1:b2:81:92:83:7c:44:8c:34:9d:16:75:90:01:76:25:
         f1:87:44:ee:9a:d5:e7:4e:0c:64:d5:fc:88:58:33:10:b5:93:
         b7:c8:01:95:2a:49:2e:14:82:9f:f8:84:76:08:e6:9d:5a:a3:
         e5:63:2f:f0:ce:b3:3a:6e:72:d5:89:2b:7d:d3:c7:31:6c:7e:
         fe:e6:75:16:e6:ce:22:3e:02:50:50:e1:7c:79:cc:50:b4:9f:
         ad:73:3c:4d:92:cb:bd:29:d0:8c:50:04:12:ba:16:51:70:4e:
         2b:4f:a0:f1:ba:ed:dc:3d:a8:76:cd:78:bb:fe:c7:1e:17:9b:
         1b:c9:d6:3d:65:8f:d9:10:ca:f7:ef:e8:d9:74:8c:9a:12:53:
         91:19:97:ab:6a:37:59:17:c3:ce:be:5f:1c:87:88:33:d9:da:
         0a:00:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:16:43 2026 by rpki-client