Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          kZBYVYBe+IDMRKCLxbVJUF5qX/AkA9EVQC2r3uLxfOg=
Subject key identifier:   40:4B:E8:D8:C2:DB:39:24:C9:B9:F2:36:46:81:BD:17:D8:04:87:DA
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       01A13DB86FDDABEED03E234C4D87BE91E573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0FAB
Signing time:             Thu 15 Oct 2026 04:00:59 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:59 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:59 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: c1HbQ+xk1+DobzmOJgCW5wwNHWtZcpKUN0zcA/kf0Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:6f:dd:ab:ee:d0:3e:23:4c:4d:87:be:91:e5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Oct 15 04:00:59 2026 GMT
            Not After : Oct 16 04:00:59 2026 GMT
        Subject: CN=404be8d8c2db3924c9b9f2364681bd17d80487da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:92:f0:8e:a1:94:57:8d:87:98:9f:c8:b9:
                    7b:e0:8e:b5:6f:f4:04:7c:23:c4:42:44:ea:3e:0f:
                    8a:33:69:0b:a5:2a:07:04:04:9b:95:cb:17:ed:f1:
                    36:19:4a:53:9c:1d:2f:b3:eb:0c:8b:ab:07:e8:c0:
                    34:b0:e1:f3:23:c6:ae:91:d0:25:3f:b1:ed:c4:b8:
                    c3:78:dc:e1:b8:70:a8:37:d6:13:40:c1:3a:fc:2f:
                    f5:f2:81:8c:1e:4e:54:69:51:07:2a:38:80:15:26:
                    62:3d:77:21:de:41:fc:52:ca:6a:be:08:2b:41:38:
                    60:b5:41:76:7a:d0:c6:2f:50:e5:cb:d5:0f:78:61:
                    c2:31:8a:77:15:82:ff:c6:42:88:62:3c:ca:79:b0:
                    44:c3:4b:10:75:96:5a:09:ac:a0:cc:2a:a2:3d:88:
                    27:2c:94:9e:3e:c9:53:61:a6:25:19:98:50:c2:79:
                    91:a9:93:85:9c:b5:56:df:3b:16:37:37:8b:e7:10:
                    5c:b3:6a:02:64:24:29:2f:74:bd:cb:52:b8:85:34:
                    88:ba:4e:76:ad:32:c1:18:41:9e:ab:5e:37:8d:58:
                    14:d2:40:d4:02:b9:30:41:fe:2b:8d:77:55:14:ce:
                    79:f7:7a:05:e9:2c:b1:00:fd:16:b9:b1:5a:f0:87:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4B:E8:D8:C2:DB:39:24:C9:B9:F2:36:46:81:BD:17:D8:04:87:DA
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:4d:75:b2:09:1f:d5:a3:80:62:4b:d9:d0:de:4f:db:64:
         59:f0:d0:c4:33:18:12:10:af:a4:70:8a:75:ec:39:e5:86:5f:
         e3:94:1e:f3:82:7e:c4:43:f3:67:a9:58:5d:74:a6:74:8b:a5:
         9a:c7:9f:91:9d:f3:3b:2c:38:33:07:0c:dc:43:a7:18:23:94:
         66:fd:3d:57:82:35:39:67:cd:99:79:3e:8c:05:0b:1b:11:cc:
         d8:df:1f:1a:3d:a5:24:f1:3f:05:70:13:70:09:a2:60:43:7f:
         6f:c7:6a:f7:30:26:bb:7a:3d:a8:ef:84:10:b1:72:9c:e1:cf:
         85:fe:c6:28:7c:17:94:d2:dd:31:3f:f9:a5:12:8d:43:3f:59:
         17:54:d0:8b:ba:6e:35:5d:15:8f:4c:a8:fc:4c:d9:f3:14:c4:
         a0:95:9e:d8:81:cc:8c:0c:59:3b:8a:3c:5b:b7:a6:7c:4b:1a:
         76:98:00:c1:11:da:58:be:96:af:b5:cf:00:d3:02:08:0d:cb:
         55:89:fd:8f:ab:dc:cf:70:b3:3f:93:95:3a:19:09:51:0a:61:
         a0:4b:cd:4c:24:60:1a:87:7b:20:a8:4a:2a:88:de:cf:35:b5:
         8a:32:46:fb:d6:b6:57:2c:07:eb:20:ef:9e:b2:a6:c4:fe:93:
         e4:4a:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:05 2026 by rpki-client