Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          iLPuuCsLGs3kqRK6cO7iXcukEXD63csqcC6itE1ayQM=
Subject key identifier:   C3:C9:8D:28:1A:48:1E:3B:FB:F0:26:84:D8:01:0E:C6:A9:6F:3C:E3
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       019A71B8C271E7374C157D90E5A0D8507AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0C26
Signing time:             Tue 11 Nov 2025 07:02:05 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:05 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:05 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: FAnEkH1NlQtVxP9iaghkkqDGCkeAj6NiXsfg/A4MYWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:c2:71:e7:37:4c:15:7d:90:e5:a0:d8:50:7a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Nov 11 07:02:05 2025 GMT
            Not After : Nov 12 07:02:05 2025 GMT
        Subject: CN=c3c98d281a481e3bfbf02684d8010ec6a96f3ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:92:31:29:3f:00:f7:64:4b:a4:e8:63:ac:
                    e6:1c:4d:7c:65:a4:01:24:de:ce:d5:c2:bc:58:db:
                    86:f2:0f:ab:02:10:36:d8:fd:30:10:6b:92:aa:b4:
                    4b:8c:9c:bb:29:26:7c:f1:73:07:f2:45:f7:6f:2d:
                    d3:c3:da:1b:33:54:4a:49:56:32:3e:31:29:20:15:
                    45:97:09:47:19:29:11:a1:82:1f:58:41:2a:e2:4c:
                    4a:0e:1f:08:16:98:0c:c8:48:5d:c3:9b:72:52:b4:
                    a2:15:7c:29:25:99:ce:79:5e:fc:5e:14:a9:35:88:
                    75:8c:89:4b:fa:50:54:44:e9:d6:d4:d2:b6:bf:23:
                    42:9e:bc:d5:c7:aa:ba:fc:e4:64:b7:af:88:03:61:
                    e8:37:6b:90:b9:3e:7b:08:65:00:2c:4c:6d:84:d0:
                    59:05:3d:d3:08:8b:ad:b6:99:ff:84:f3:ff:1c:7a:
                    7a:bb:15:61:93:f3:05:9d:2c:3c:2e:7e:a7:25:7c:
                    08:a5:80:6e:21:53:ab:c6:32:10:2b:42:8f:72:85:
                    b0:c2:86:8c:59:ce:b0:bd:59:00:b6:af:4e:c6:6a:
                    cc:8d:74:7b:61:64:33:99:97:4f:29:42:14:d1:d0:
                    ae:85:c0:28:96:32:d7:18:94:d7:88:9e:0a:ed:6f:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:8D:28:1A:48:1E:3B:FB:F0:26:84:D8:01:0E:C6:A9:6F:3C:E3
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:77:83:e4:6f:04:00:78:e0:ca:15:39:c4:5f:28:e1:b5:
         bd:d1:cd:22:19:0a:f7:62:87:23:86:f7:be:56:94:80:1e:72:
         7f:de:f4:cf:d8:ca:5e:28:ef:a0:64:41:39:f5:d2:f6:d1:6e:
         59:4c:c9:99:f1:d6:c7:e9:cc:b2:e9:85:a1:df:52:6a:27:f2:
         c0:66:ab:6d:d3:3f:e0:0d:2f:ea:3e:53:f1:80:89:28:f6:d6:
         ca:17:bd:44:05:04:91:73:68:b7:01:36:70:c8:fc:28:bc:fa:
         58:9e:74:b5:2d:73:cf:87:4b:6b:2f:bd:61:4d:14:97:0a:2a:
         2a:c5:0d:21:87:d1:63:1f:96:aa:b9:29:1b:9a:e4:38:71:ac:
         66:10:8a:9d:25:4e:7c:70:de:1c:4b:a7:b7:44:94:72:bc:5d:
         4c:e7:85:ab:82:44:6a:96:f1:bc:28:92:39:62:e2:f0:c8:ae:
         3f:27:33:98:4f:c0:56:68:fe:4e:d5:4b:e7:ef:60:fb:1d:82:
         f6:d0:ce:3e:e4:39:0d:06:ba:86:d5:51:cd:27:36:84:fa:5d:
         0f:23:cd:c1:f2:a0:b5:74:91:ad:4d:00:2a:d7:52:2a:c0:7b:
         d8:59:7a:98:34:e8:94:e6:a7:fe:06:be:ad:3d:49:58:21:38:
         76:b5:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:48 2025 by rpki-client