Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          LO9FWgTIu8CelYM/iHvgy420fH0SWToJecFWDAwoobA=
Subject key identifier:   C0:B1:F7:60:5A:3C:3E:AE:CE:C2:30:25:37:17:10:D3:B6:96:DE:7B
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       019E2F965152A88B5DA8BBFD53450CE977AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0E16
Signing time:             Sat 16 May 2026 07:00:40 +0000
Manifest this update:     Sat 16 May 2026 07:00:40 +0000
Manifest next update:     Sun 17 May 2026 07:00:40 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: F7gfES9Uu8qrXCEycyBQqqjVcmGJIDmvL3H12ixQfP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:51:52:a8:8b:5d:a8:bb:fd:53:45:0c:e9:77:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: May 16 07:00:40 2026 GMT
            Not After : May 17 07:00:40 2026 GMT
        Subject: CN=c0b1f7605a3c3eaecec23025371710d3b696de7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:09:6e:32:97:ac:dc:b9:bb:70:16:35:d6:
                    fe:60:e0:e7:c6:01:4f:a7:88:c0:03:8c:41:b2:65:
                    86:48:8b:b8:d8:d0:55:17:00:6f:4b:2e:ce:22:3a:
                    f7:88:76:7b:f8:8b:cc:66:c3:6e:3e:a3:79:c2:59:
                    9c:f9:e0:5c:26:66:93:c1:61:30:c8:58:75:1a:3b:
                    a5:7e:6c:17:59:92:ec:a7:1d:78:8d:e2:92:82:cf:
                    a8:4e:55:62:9d:47:5f:2a:22:d0:79:2f:f4:1b:2d:
                    91:04:39:3e:47:73:9c:74:80:23:32:52:c4:3e:e6:
                    2c:c2:1a:da:99:01:b8:25:68:60:75:70:49:f7:84:
                    ff:62:c1:0e:7d:4c:0f:9a:8c:c1:95:05:40:88:e0:
                    19:c4:f9:94:9c:b6:ec:55:49:b4:2f:96:47:3c:f1:
                    5b:d7:84:a8:09:ef:22:e8:e5:51:2b:46:64:4a:bc:
                    60:8f:f0:2f:c9:f7:0d:a0:ed:14:45:65:f0:e0:30:
                    23:b5:46:22:e9:44:3c:52:1a:a3:81:a5:e1:1b:4e:
                    f6:b2:36:1a:b5:18:68:01:2b:03:c1:91:3d:b8:2e:
                    81:ce:f5:22:30:99:1d:6d:b1:4e:f2:48:dd:55:45:
                    b4:15:9f:e2:9a:93:db:95:a4:4e:b2:03:60:76:29:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:F7:60:5A:3C:3E:AE:CE:C2:30:25:37:17:10:D3:B6:96:DE:7B
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:eb:57:d8:59:9d:42:17:48:2f:6a:2c:b8:06:cf:77:08:
         4e:89:b9:e8:8a:17:e5:b3:af:ee:85:83:7c:2c:0f:50:7b:a3:
         01:a5:9b:20:3f:ed:a4:33:be:02:2c:27:3f:f5:db:7e:17:ef:
         fc:5e:b2:ee:83:b9:be:35:94:4a:ba:ee:16:17:02:82:3c:d9:
         f5:26:5c:bb:cb:89:81:3f:f7:b1:8b:d2:eb:8b:85:d7:35:01:
         b1:60:4c:4b:98:72:12:7c:7e:b7:83:38:24:0a:b3:8a:3a:79:
         9a:55:fe:b8:8b:76:ca:65:6f:22:7c:51:3f:1f:14:23:3e:51:
         a6:2f:9f:bf:a2:4a:c1:35:6d:af:d1:fa:c3:f3:f6:59:4a:82:
         88:42:cd:6b:de:fc:92:0e:06:cd:6f:29:72:4f:16:53:ac:7a:
         49:8f:2d:be:28:f9:fb:53:23:4b:4e:c4:25:80:83:68:ef:91:
         8c:fd:15:6a:91:22:07:b5:34:0a:f8:ec:c1:49:8a:19:d2:ee:
         2b:fe:9c:36:63:ec:ed:d2:ae:ca:5e:e6:12:64:00:81:00:af:
         e8:67:e3:96:94:00:7b:19:a8:86:30:53:22:be:cc:07:3c:98:
         83:45:13:79:12:bb:22:ed:ca:61:ff:5c:83:03:4c:44:0b:7d:
         be:54:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:49 2026 by rpki-client