Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          60O+RiZpBi6AxrytDDsyzFmeDMnrYcrMmA08aqxngr0=
Subject key identifier:   B5:15:D5:6E:96:4F:B1:12:9F:D3:8A:1E:7E:D7:E1:8C:32:03:3C:09
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       019D37C063B86D700188B98575E97A19484C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          0F86
Signing time:             Sun 29 Mar 2026 04:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:48 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: D4pMk0VNv0SpZBW3lfrFEthFRkpQHC/rxXy+pyla7nI=)
                          2: peX6RxbNXkLdfShtgQrG6g51ciQ.roa (hash: t35RzplxAHK22NGUYNXNYVd/NgW3fATfJr0K+NLyVmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:63:b8:6d:70:01:88:b9:85:75:e9:7a:19:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Mar 29 04:00:48 2026 GMT
            Not After : Mar 30 04:00:48 2026 GMT
        Subject: CN=b515d56e964fb1129fd38a1e7ed7e18c32033c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:26:e5:c8:18:3d:70:b9:a6:70:96:d5:e6:
                    04:a6:b8:ca:49:28:1f:f8:b2:35:86:f0:02:fe:5e:
                    4f:45:71:48:bd:c0:6c:7b:b8:5d:3b:56:f8:95:9e:
                    6a:78:c8:d9:b9:65:cd:e5:f8:fa:18:9f:72:5f:0c:
                    5a:f4:66:75:d0:3c:30:7b:13:62:dd:d8:29:53:ac:
                    7d:32:0e:03:6d:dd:5d:03:fe:be:8b:e8:d8:41:3a:
                    43:b2:db:d1:7a:89:20:eb:06:2e:cc:1a:cc:25:44:
                    88:ad:7b:d4:58:62:7b:f5:9a:c5:e2:8b:d1:f8:ca:
                    38:11:ab:79:d3:b8:81:8b:75:c2:3f:06:20:0f:9d:
                    76:1f:f3:8e:9b:c6:ef:d7:6d:f3:7f:6b:8e:bb:41:
                    86:27:5f:16:a4:72:53:0f:86:db:5c:a1:ff:2a:87:
                    be:36:c0:cb:19:83:36:3f:d5:2e:fb:3e:10:f6:96:
                    de:a2:6a:49:e0:56:88:0a:a5:d9:21:7a:e6:4b:6d:
                    ee:c2:bb:b2:ae:52:2e:26:af:29:a9:ef:8a:8e:04:
                    7d:78:1f:c0:71:81:08:36:31:3b:3c:b3:eb:1f:df:
                    98:b3:a2:90:ad:34:d4:5b:3c:fd:24:d0:54:36:2e:
                    16:5c:f7:6a:b8:9e:ad:44:50:2d:48:ec:0c:56:0a:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:D5:6E:96:4F:B1:12:9F:D3:8A:1E:7E:D7:E1:8C:32:03:3C:09
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:75:ef:91:7c:d9:4f:05:20:6c:a4:33:14:4d:f1:77:30:
         c7:e7:87:d3:33:0f:7f:5e:f1:66:37:b7:62:fe:96:d9:da:9e:
         92:e7:8d:76:4e:67:e7:25:10:e9:11:40:e5:bf:0a:57:32:ef:
         1e:1d:ad:b8:15:74:21:9f:0a:40:cb:a3:de:3a:b1:ff:9e:1b:
         3e:28:29:9a:6d:5d:db:a7:1f:49:1e:64:5e:a5:ca:ec:ab:eb:
         96:92:e1:27:b7:fd:88:6f:f7:f2:d1:82:fe:a7:fe:78:00:35:
         33:11:e2:b7:86:30:43:af:85:11:44:76:1b:c6:d9:ab:c9:b8:
         b1:dc:e4:f9:80:fe:b0:60:70:d3:9e:7e:cc:20:bd:a2:ab:07:
         73:7a:88:7f:16:43:1d:f4:b9:00:f5:4e:b8:c1:8e:43:c7:f9:
         18:4b:49:d8:a5:8b:60:58:3c:b8:47:23:d8:74:05:6c:a8:15:
         3c:e1:eb:9e:19:09:88:f5:d1:f7:a5:ec:f0:44:20:db:27:9b:
         31:7b:cd:60:5e:6f:6f:c9:80:eb:e0:ec:b9:48:66:e3:84:94:
         66:cd:2d:27:2d:7b:0c:9b:b0:34:40:f4:74:ff:6e:42:a1:cc:
         d2:03:fd:f0:7f:b0:f4:4f:2d:12:71:36:17:08:cf:fc:c6:ad:
         08:d8:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:37 2026 by rpki-client