Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          0Ybyte+apmnQRz0zKnggmKSRDWM+dJgKF3EecQN5WFI=
Subject key identifier:   6C:82:F9:9B:97:1D:69:3D:8F:FE:8E:86:5F:6C:8F:9F:D3:F7:D8:57
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       019EC25B80151986523A11CC87B13A06E3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0E62
Signing time:             Sat 13 Jun 2026 19:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:36 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: v0DYJqab5hx0ZZFHy2FQZ1Xx0RIB/LcLeIkbapq39RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:80:15:19:86:52:3a:11:cc:87:b1:3a:06:e3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Jun 13 19:00:36 2026 GMT
            Not After : Jun 14 19:00:36 2026 GMT
        Subject: CN=6c82f99b971d693d8ffe8e865f6c8f9fd3f7d857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:af:ed:d8:23:0c:be:5e:31:de:4c:9b:6d:
                    71:1f:d0:0c:a2:74:1c:eb:98:6e:12:a7:29:68:92:
                    23:6b:06:40:7f:5c:91:d6:34:64:a7:4b:b1:88:41:
                    78:22:99:e9:79:b3:18:05:2c:89:bf:1b:63:61:93:
                    86:c2:dc:90:61:9c:73:81:87:12:3c:c2:ae:ab:1e:
                    e4:8f:af:e3:2a:60:59:eb:b5:63:4a:1d:f6:09:b8:
                    ee:25:31:9f:e9:bc:68:71:21:c1:dc:4a:c8:71:fc:
                    ce:0c:6b:0b:bf:7d:c1:e8:34:aa:3e:2b:84:7d:2b:
                    3b:99:bd:a9:2f:82:4f:be:9b:94:fc:ed:0c:bc:13:
                    9c:67:8c:1f:5f:5b:3e:c1:f2:67:93:50:0c:4b:bf:
                    ec:dd:e3:9d:45:12:19:0a:0a:cf:28:16:ea:60:06:
                    12:1c:64:bb:39:81:9a:1a:ef:19:12:1c:10:4a:bb:
                    b9:96:e5:bd:a5:01:13:59:ec:8b:15:8c:be:9e:40:
                    6e:20:75:d9:83:24:5d:85:e3:b5:5d:ba:96:a2:81:
                    75:54:43:03:59:d7:f4:00:57:bf:68:b6:54:97:c1:
                    9f:4c:ad:88:2a:36:27:a5:5d:4e:e6:9d:57:3a:79:
                    9f:b2:71:25:92:91:bb:7d:14:8d:78:56:b2:24:61:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:F9:9B:97:1D:69:3D:8F:FE:8E:86:5F:6C:8F:9F:D3:F7:D8:57
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e6:7d:ae:84:e0:0d:c3:35:12:c4:c8:5f:1a:fd:df:13:8a:
         be:03:dd:de:75:a9:2f:e9:0a:c4:11:51:1b:bf:12:d6:b9:ee:
         61:e4:40:ae:bb:34:2e:5c:4e:47:00:b2:79:30:37:69:ed:fc:
         94:b4:22:c6:a6:7c:b1:e5:71:e7:d9:b7:f7:9e:80:5f:dc:55:
         15:4e:84:82:c9:3d:aa:6e:a1:10:f6:8c:a8:e3:7e:31:68:92:
         81:ab:c8:20:a6:48:95:1a:e0:a9:cb:7d:d2:79:00:6d:93:fd:
         bd:26:e2:fc:2c:50:c0:5a:3f:6e:6a:16:41:41:8d:0e:72:f3:
         a4:86:6d:22:5f:fb:4b:85:de:f4:85:ba:3c:73:a7:0f:1b:27:
         c3:35:26:02:a8:71:89:e8:d0:58:c9:f5:84:76:03:16:f7:60:
         86:db:06:0d:78:fa:3d:6a:04:e5:ca:0a:19:a2:79:5a:f5:22:
         e7:08:df:c7:1c:1b:aa:d0:53:e7:bd:df:5a:7f:14:59:b7:c8:
         ed:94:7d:96:5c:4e:98:70:2b:8f:74:11:dd:4b:bc:62:83:1c:
         34:ec:36:12:a1:e4:fe:26:75:4f:17:dc:c3:39:e4:66:f4:fa:
         65:1d:5e:72:5b:32:ac:1b:ba:d2:3b:6d:b5:60:81:8a:62:26:
         12:19:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:11 2026 by rpki-client