Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          iDuhDOSg4rzY22MmHUkkSuoy37gO61OFiE6jpTlVwlc=
Subject key identifier:   BF:D6:2E:1C:07:9F:9F:38:5A:1A:E9:5C:A4:24:E7:54:7C:0F:05:BA
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       019A0B5CADEC83CA87DA3F8688DD16D18E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          0DE1
Signing time:             Wed 22 Oct 2025 10:00:14 +0000
Manifest this update:     Wed 22 Oct 2025 10:00:14 +0000
Manifest next update:     Thu 23 Oct 2025 10:00:14 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: n5lYK1C27jixP1wxMvZCtPxAdwQ9kdW/LPjzZdBx8Co=)
                          2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0b:5c:ad:ec:83:ca:87:da:3f:86:88:dd:16:d1:8e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Oct 22 10:00:14 2025 GMT
            Not After : Oct 23 10:00:14 2025 GMT
        Subject: CN=bfd62e1c079f9f385a1ae95ca424e7547c0f05ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:0d:f6:fe:44:b7:ea:1f:61:0e:02:32:00:
                    e9:d4:bb:4b:e1:d7:57:cf:2c:e8:c4:6e:c2:3b:ca:
                    10:f5:c0:64:ee:47:74:f9:03:b8:7f:8d:f0:bf:d9:
                    a2:de:41:b5:18:e0:57:e7:8e:33:f0:6e:34:be:5d:
                    90:98:f3:df:49:b7:2c:f2:88:d0:86:4f:93:81:28:
                    76:0a:9e:87:b7:47:e8:07:5c:63:15:b7:b1:4f:46:
                    34:84:fb:87:08:4c:ed:fd:f1:ff:b8:2b:a5:cc:a2:
                    e3:fc:a5:c6:a7:46:03:a1:56:d3:84:95:05:b5:37:
                    2f:8d:8a:9a:35:d4:e3:31:dc:e4:23:fc:c8:7e:35:
                    c2:f5:cf:86:03:df:6b:f9:04:ea:30:51:90:61:a6:
                    13:fc:19:22:10:63:ee:c0:a9:10:f8:89:0a:9b:61:
                    74:d3:d0:7b:95:4a:fe:ef:5c:20:71:f9:54:78:72:
                    42:34:a7:0e:53:b6:b8:75:00:0a:34:90:14:3e:43:
                    9e:99:02:de:08:32:82:3b:99:fe:16:10:fc:d9:88:
                    ae:7b:4c:be:bf:0d:05:6a:e9:ed:6c:18:90:0d:68:
                    9e:f9:40:c7:33:f5:11:af:25:cc:ac:24:6c:f3:eb:
                    85:62:67:be:96:92:56:79:0b:77:28:48:49:e5:55:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D6:2E:1C:07:9F:9F:38:5A:1A:E9:5C:A4:24:E7:54:7C:0F:05:BA
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:85:1c:b8:43:e5:aa:31:1f:a2:ad:b8:35:98:43:4f:9c:
         fd:61:a5:fd:e7:69:0a:6f:6e:01:d3:e5:23:1e:cd:a4:6d:ce:
         3f:f3:c0:11:ff:3f:a8:69:37:a4:70:eb:06:6f:6c:8c:70:55:
         39:57:d6:13:37:e5:7a:f5:fb:8c:2c:a8:82:b0:30:e3:f1:23:
         93:af:71:55:e0:6b:e0:66:59:05:2b:17:11:97:11:5d:32:21:
         00:58:ba:67:f4:57:4d:77:6a:57:e9:62:dc:ec:a3:85:f0:8d:
         54:b2:a7:95:9a:e0:ae:a6:b1:34:e8:d9:78:18:ec:11:64:28:
         b0:d4:b6:e6:11:74:5b:f5:76:41:54:1b:ac:3e:76:4d:dc:c6:
         7b:72:47:7d:f7:5d:ed:de:e5:2c:cf:86:0e:00:d9:9a:e5:ae:
         a8:53:a7:d5:5a:92:e3:17:3f:a6:c7:53:68:d5:31:d3:eb:9e:
         30:2b:a8:db:11:7f:6b:eb:46:86:78:cb:9f:12:0e:87:bf:17:
         78:8a:21:3e:d1:df:a8:2d:0c:66:c3:7d:09:2a:05:0a:26:cd:
         57:d6:ca:0c:7f:7d:76:7c:62:21:ba:57:f2:52:a7:c0:26:52:
         a7:5c:ae:b0:5f:5b:d4:17:50:72:4a:69:02:2d:8d:25:ff:06:
         bc:b5:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:26:09 2025 by rpki-client