Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          VnR7xsxaAWunNpDOI1bSv8WEpAmYZBy/4I9KTGLvZks=
Subject key identifier:   E4:3E:68:0C:CB:32:0C:A6:A4:F4:94:44:30:9E:9A:53:2C:9D:B7:E4
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       01A00101D47254FC8B69263B74B35C720B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0F07
Signing time:             Fri 14 Aug 2026 16:01:32 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:32 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:32 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: /xWX2nREpPrtH8YXytSlYlulw6dVqhUjwV+ALqzhxjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:d4:72:54:fc:8b:69:26:3b:74:b3:5c:72:0b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Aug 14 16:01:32 2026 GMT
            Not After : Aug 15 16:01:32 2026 GMT
        Subject: CN=e43e680ccb320ca6a4f49444309e9a532c9db7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:11:ae:07:72:32:40:ba:7a:9a:e2:06:b5:
                    1f:46:92:99:2a:fc:54:9b:b3:49:d5:a6:46:43:88:
                    9a:dd:29:c9:15:0d:8c:c3:ba:d5:81:0e:ed:c4:79:
                    88:9a:bd:16:1e:e7:94:5e:56:cb:b8:90:a1:49:59:
                    50:60:32:c1:72:76:28:ec:d2:c2:bc:58:b6:3b:c3:
                    54:83:d7:58:98:7f:fc:b6:ac:e1:97:42:5c:d1:e4:
                    65:bf:3f:14:2a:b7:34:1e:19:7d:5a:2b:b2:ed:3f:
                    54:8e:51:73:76:11:ae:14:90:2d:ec:f9:49:7f:68:
                    14:49:b6:7c:6c:67:c8:e7:d5:15:e4:4b:f5:b6:35:
                    2a:6c:cb:06:07:b7:a0:27:5d:e9:72:e2:09:08:2f:
                    40:ab:53:fd:8e:00:b4:6f:3a:5f:d3:7f:38:ad:cc:
                    15:70:14:fd:12:36:f4:39:f8:68:43:bd:ec:22:63:
                    6d:2c:28:b6:7c:e7:b3:02:a8:43:04:0b:7e:7f:5a:
                    d5:07:2f:69:aa:54:05:a8:63:a4:d7:0b:fd:f5:5c:
                    7c:7c:dc:ed:cc:b8:9f:40:7f:14:9a:5b:ce:3e:f0:
                    16:48:bf:cb:30:fd:5f:2d:52:f1:7e:8f:57:9e:c5:
                    af:82:35:4a:60:1a:f8:1a:c0:a3:70:dd:dc:a4:e1:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:68:0C:CB:32:0C:A6:A4:F4:94:44:30:9E:9A:53:2C:9D:B7:E4
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:26:8f:07:fe:05:32:37:a4:b2:97:4e:67:f8:dc:f0:c0:
         09:25:22:ff:1b:86:6f:11:26:ff:f2:fd:22:10:54:26:01:d9:
         b5:73:e8:8d:58:5c:ca:cb:55:2e:4a:9f:40:73:43:51:ff:97:
         80:4e:41:6a:0c:3d:cf:ca:2a:1e:5a:c0:0c:e9:2f:e6:6e:fc:
         0e:9c:2d:fd:9d:6c:f1:3a:15:4c:c4:f8:d6:a7:ec:18:d3:a4:
         8d:fc:bf:19:18:47:25:39:ea:fd:7f:8b:c2:ee:ab:5e:2b:08:
         b8:4b:fd:10:ca:23:41:55:da:79:5d:5c:bb:b1:c5:14:35:a7:
         cb:7d:dd:c3:d2:f6:01:41:46:8b:83:0d:da:a2:92:f0:4d:4e:
         cc:ec:71:92:71:b1:91:1e:61:0f:a7:0f:d4:54:75:76:03:2b:
         90:04:44:37:34:d6:1f:61:e4:da:1d:92:a2:04:b7:81:2c:56:
         e7:e1:91:d0:96:94:73:f6:b5:28:8c:3f:00:ec:42:e3:6a:d2:
         6b:3c:66:31:7e:2a:bd:5a:5a:47:80:9c:2a:5a:3b:0a:f6:57:
         6d:86:2a:cd:b1:0a:e5:10:bf:aa:65:4a:ff:09:9c:67:b6:b3:
         3d:65:7e:75:e5:7d:70:ec:82:95:84:a6:b9:73:02:5d:6c:e7:
         59:54:54:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAdRyVPyLaSY7dLNccgtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ3ODRiOTAxMjY2M2MzNDBiZjY3ZmFjYjYxYmZiZTEw
ODcxYjgwHhcNMjYwODE0MTYwMTMyWhcNMjYwODE1MTYwMTMyWjAzMTEwLwYDVQQD
EyhlNDNlNjgwY2NiMzIwY2E2YTRmNDk0NDQzMDllOWE1MzJjOWRiN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVgRrgdyMkC6epriBrUfRpKZKvxU
m7NJ1aZGQ4ia3SnJFQ2Mw7rVgQ7txHmImr0WHueUXlbLuJChSVlQYDLBcnYo7NLC
vFi2O8NUg9dYmH/8tqzhl0Jc0eRlvz8UKrc0Hhl9Wiuy7T9UjlFzdhGuFJAt7PlJ
f2gUSbZ8bGfI59UV5Ev1tjUqbMsGB7egJ13pcuIJCC9Aq1P9jgC0bzpf0384rcwV
cBT9Ejb0OfhoQ73sImNtLCi2fOezAqhDBAt+f1rVBy9pqlQFqGOk1wv99Vx8fNzt
zLifQH8UmlvOPvAWSL/LMP1fLVLxfo9XnsWvgjVKYBr4GsCjcN3cpOHPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ+aAzLMgympPSURDCemlMsnbfkMB8GA1UdIwQY
MBaAFAVdeEuQEmY8NAv2f6y2G/vhCHG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYt
M2I0MjA1ZGI3NTNhLzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYtM2I0MjA1ZGI3NTNh
LzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY4mjwf+
BTI3pLKXTmf43PDACSUi/xuGbxEm//L9IhBUJgHZtXPojVhcystVLkqfQHNDUf+X
gE5Bagw9z8oqHlrADOkv5m78Dpwt/Z1s8ToVTMT41qfsGNOkjfy/GRhHJTnq/X+L
wu6rXisIuEv9EMojQVXaeV1cu7HFFDWny33dw9L2AUFGi4MN2qKS8E1OzOxxknGx
kR5hD6cP1FR1dgMrkARENzTWH2Hk2h2SogS3gSxW5+GR0JaUc/a1KIw/AOxC42rS
azxmMX4qvVpaR4CcKlo7CvZXbYYqzbEK5RC/qmVK/wmcZ7azPWV+deV9cOyClYSm
uXMCXWznWVRUqQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:46:11 2026 by rpki-client