Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          hvvYYrTmc3qBjQkkDii+CC3hveDqjmOWPGqUy3EEAow=
Subject key identifier:   69:51:5D:B9:09:B4:EC:68:3B:25:94:66:8D:2A:28:F6:28:E7:36:65
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       0199239EBA8FC8277FEA813949A95EDA658C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0B79
Signing time:             Sun 07 Sep 2025 10:00:28 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:28 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:28 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: xlQRWCD/EdiP+A9naLHEVK7gChFJn0XrABFtMePTxkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:ba:8f:c8:27:7f:ea:81:39:49:a9:5e:da:65:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Sep  7 10:00:28 2025 GMT
            Not After : Sep  8 10:00:28 2025 GMT
        Subject: CN=69515db909b4ec683b2594668d2a28f628e73665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:78:01:3a:c2:7c:7c:b0:5b:c4:a0:a5:c5:
                    23:aa:32:ba:12:2e:b5:3b:29:c4:ac:f5:67:c5:42:
                    3a:ff:bc:85:23:d4:0d:80:83:a3:51:54:b3:34:38:
                    61:1c:ea:31:ed:29:57:82:e6:6c:ca:51:82:54:46:
                    63:95:2d:42:af:5f:04:b4:f0:9b:cc:2d:67:0f:1c:
                    2e:ad:41:98:8a:db:1b:42:5a:ba:91:60:fb:5d:87:
                    ba:ed:59:ad:5e:03:06:41:4e:a5:31:0c:48:f9:94:
                    b7:45:c2:ec:ad:a1:53:0c:65:02:41:50:3c:3d:4a:
                    37:ba:87:9d:28:41:84:16:4e:c5:bf:24:86:cb:ae:
                    e6:e9:d7:23:a3:cd:bc:5f:78:ab:e0:c8:1a:7b:84:
                    29:5d:ff:a1:4f:93:4b:19:3d:93:58:bf:53:e2:8b:
                    49:ff:f4:32:ad:ad:d3:2f:17:73:9a:ad:d0:94:a2:
                    f3:70:48:10:6a:d8:6b:52:7e:92:aa:6d:f1:f4:3c:
                    31:aa:40:3b:24:65:fa:bb:d8:c5:a5:aa:cc:6e:ba:
                    f2:bd:9b:36:3c:d5:f3:e4:54:38:63:50:d3:6d:08:
                    b3:0c:b2:1e:49:88:c9:58:7c:86:c6:d5:38:fa:78:
                    96:b2:64:e3:6f:b4:65:0e:fe:1d:0f:2e:14:05:c1:
                    46:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:5D:B9:09:B4:EC:68:3B:25:94:66:8D:2A:28:F6:28:E7:36:65
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7b:93:1b:9b:29:cb:f0:2f:65:f5:0a:b8:63:61:23:5c:75:
         40:78:52:d1:74:15:fa:70:e2:b7:74:b9:3c:a7:7c:2f:c5:c8:
         70:24:1f:f4:be:2a:bb:c9:f7:d2:df:bf:89:ad:59:1e:7e:10:
         42:5d:79:d7:11:3b:c9:5a:55:08:44:ab:8f:19:f2:51:06:c3:
         07:31:e5:e8:71:bc:ec:3f:05:3c:6d:9b:86:8a:04:ea:36:3f:
         64:81:86:3a:4f:df:8f:6a:70:db:9e:cf:64:af:48:de:08:24:
         1d:83:93:7b:a4:f4:71:5a:b8:6b:2e:d9:5c:c8:ee:ee:60:23:
         95:50:95:9d:0a:3b:e6:dd:12:5a:62:53:c5:fb:33:67:6d:65:
         9e:74:fc:02:bf:30:5d:c4:f7:35:ef:1c:c0:0b:0d:b4:73:fb:
         93:43:5e:93:8b:70:e8:52:71:12:9a:cb:45:c5:a8:a5:a1:7f:
         24:a0:14:e9:af:6d:33:67:f5:df:5c:c8:ba:e6:a7:e8:19:06:
         36:be:22:3e:a7:7d:8b:cc:73:36:b9:f8:b8:e4:f7:94:fe:1f:
         e0:ff:b2:d1:be:3e:a6:7d:8b:72:27:e6:43:0a:cb:84:d5:6e:
         d0:9e:c0:44:a3:91:64:31:1f:6f:72:15:96:18:cd:4b:8d:67:
         d2:c4:ad:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnrqPyCd/6oE5Sale2mWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ3ODRiOTAxMjY2M2MzNDBiZjY3ZmFjYjYxYmZiZTEw
ODcxYjgwHhcNMjUwOTA3MTAwMDI4WhcNMjUwOTA4MTAwMDI4WjAzMTEwLwYDVQQD
Eyg2OTUxNWRiOTA5YjRlYzY4M2IyNTk0NjY4ZDJhMjhmNjI4ZTczNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xh4ATrCfHywW8SgpcUjqjK6Ei61
OynErPVnxUI6/7yFI9QNgIOjUVSzNDhhHOox7SlXguZsylGCVEZjlS1Cr18EtPCb
zC1nDxwurUGYitsbQlq6kWD7XYe67VmtXgMGQU6lMQxI+ZS3RcLsraFTDGUCQVA8
PUo3uoedKEGEFk7FvySGy67m6dcjo828X3ir4Mgae4QpXf+hT5NLGT2TWL9T4otJ
//Qyra3TLxdzmq3QlKLzcEgQathrUn6Sqm3x9DwxqkA7JGX6u9jFparMbrryvZs2
PNXz5FQ4Y1DTbQizDLIeSYjJWHyGxtU4+niWsmTjb7RlDv4dDy4UBcFGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlRXbkJtOxoOyWUZo0qKPYo5zZlMB8GA1UdIwQY
MBaAFAVdeEuQEmY8NAv2f6y2G/vhCHG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYt
M2I0MjA1ZGI3NTNhLzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYtM2I0MjA1ZGI3NTNh
LzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3uTG5sp
y/AvZfUKuGNhI1x1QHhS0XQV+nDit3S5PKd8L8XIcCQf9L4qu8n30t+/ia1ZHn4Q
Ql151xE7yVpVCESrjxnyUQbDBzHl6HG87D8FPG2bhooE6jY/ZIGGOk/fj2pw257P
ZK9I3ggkHYOTe6T0cVq4ay7ZXMju7mAjlVCVnQo75t0SWmJTxfszZ21lnnT8Ar8w
XcT3Ne8cwAsNtHP7k0Nek4tw6FJxEprLRcWopaF/JKAU6a9tM2f131zIuuan6BkG
Nr4iPqd9i8xzNrn4uOT3lP4f4P+y0b4+pn2LcifmQwrLhNVu0J7ARKORZDEfb3IV
lhjNS41n0sSttA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:12 2025 by rpki-client