Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          KJenQh51yoCqtSIMlQGW1l4q1bPTOmPjN7LeYRqUtTg=
Subject key identifier:   E0:35:E5:B7:55:C4:30:6E:07:A7:0D:A1:5C:19:86:B7:68:89:7D:AB
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       01974666F28AAB3662453FCD5847AAA97392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          0C72
Signing time:             Fri 06 Jun 2025 18:00:41 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:41 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:41 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: DZ5bg2YKWLPg0fxJYxoX1Zsz8th247JdoXtbPZ4Uw3I=)
                          2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:f2:8a:ab:36:62:45:3f:cd:58:47:aa:a9:73:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Jun  6 18:00:41 2025 GMT
            Not After : Jun  7 18:00:41 2025 GMT
        Subject: CN=e035e5b755c4306e07a70da15c1986b768897dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:c2:4e:36:8e:97:b6:b2:06:8a:42:a4:b0:
                    b2:95:36:45:2f:34:91:12:8d:c0:30:fc:8c:80:f4:
                    6f:42:43:dc:dd:1e:3c:05:e3:8e:94:3c:b8:46:72:
                    1f:01:8b:ed:ca:69:f2:9a:c4:c6:95:cc:0f:ea:8c:
                    95:44:d3:07:2e:90:39:dd:8b:3c:10:81:a6:ac:21:
                    bd:63:c9:c6:5f:43:67:54:4f:1c:eb:15:ea:33:67:
                    07:a8:58:ee:a2:b9:ee:13:8c:69:b0:b9:f2:29:13:
                    49:9f:95:ad:eb:e2:7b:8f:6f:5a:cf:8d:49:34:a7:
                    bf:c9:2d:3b:c2:58:c4:e3:4c:54:dc:7a:c4:ab:d4:
                    0e:c5:7d:c9:59:12:61:60:f7:1c:14:6e:aa:bd:09:
                    c3:18:83:d0:88:ac:1a:37:75:b1:5c:1d:40:ff:db:
                    88:05:cb:bc:a0:8f:50:db:c6:8d:29:2a:fe:32:79:
                    ef:21:d9:54:77:57:35:a4:b6:2c:8c:65:08:8e:c0:
                    b4:32:28:58:13:48:fa:b6:a5:bb:19:9b:d9:ee:c8:
                    58:b2:8e:be:29:52:29:2e:6c:8b:11:a3:5c:40:61:
                    5e:1b:d3:6c:00:65:ca:e9:58:ec:2e:70:ac:bb:5c:
                    be:21:d6:0c:e3:db:d4:4f:ad:05:5f:07:9d:89:81:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:35:E5:B7:55:C4:30:6E:07:A7:0D:A1:5C:19:86:B7:68:89:7D:AB
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:72:c8:ce:b1:76:59:02:77:ac:fc:dc:65:35:1a:9e:4a:74:
         d0:e4:fe:4c:ff:53:8a:93:c8:3e:f1:c6:cd:74:5f:75:2d:9f:
         0a:27:f7:dd:1f:d8:a0:48:4e:f5:16:c3:5b:39:38:ab:41:60:
         b7:76:ae:76:d6:5b:98:fd:39:4a:de:fe:bf:ff:93:1e:34:20:
         a0:0a:c4:a9:8c:91:22:bf:b1:bc:c3:5c:5f:40:02:3c:e8:f7:
         0e:94:93:32:36:40:3f:25:45:44:f4:1a:e5:9f:c6:9f:d8:01:
         69:1a:48:67:c2:0d:d6:a5:dd:77:18:4c:e9:e2:e6:f7:1c:67:
         63:a2:e6:bc:05:67:a2:2f:93:d0:53:3d:b3:2d:4d:fb:49:84:
         e1:66:8d:53:41:fb:34:fb:4a:55:b4:0e:27:cd:ff:32:0a:61:
         3f:6b:59:7c:94:4d:8a:8f:c8:38:58:d3:61:ea:f8:d0:0f:dd:
         13:b6:e2:f7:3d:fc:ce:f5:af:df:73:6d:6e:fb:3e:28:5a:3b:
         6b:2b:67:76:53:d9:de:1a:e8:ca:16:45:51:23:dc:6b:0f:39:
         15:da:5d:98:32:a6:d3:86:3d:14:ca:4a:d9:1f:47:90:a7:b0:
         ab:db:bd:41:7c:78:38:c8:f9:19:4a:dc:22:49:77:06:af:09:
         d0:fb:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:04 2025 by rpki-client