Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          qlu7c9g/cYZBgjaZ+pjnMSLdVwByz/pjGm4FnKjKJ6g=
Subject key identifier:   0D:B3:D9:D3:10:99:0D:C1:20:70:16:51:9A:F3:14:76:67:7E:8C:B9
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       01A0005CEADEDBFA9A038205756C6168BD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          10F7
Signing time:             Fri 14 Aug 2026 13:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:24 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: kiPRUEe2pjRYvgw91qMjUQpYtdt/EPVBfIsHZG+WKMg=)
                          2: peX6RxbNXkLdfShtgQrG6g51ciQ.roa (hash: t35RzplxAHK22NGUYNXNYVd/NgW3fATfJr0K+NLyVmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:ea:de:db:fa:9a:03:82:05:75:6c:61:68:bd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Aug 14 13:01:24 2026 GMT
            Not After : Aug 15 13:01:24 2026 GMT
        Subject: CN=0db3d9d310990dc1207016519af31476677e8cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:13:54:e0:ee:e6:35:63:60:cd:c2:e7:90:
                    7f:9c:eb:d9:ab:17:95:e0:86:cf:b0:74:c5:70:4e:
                    b6:ad:8e:56:61:cb:c4:5e:67:56:51:95:e0:6a:9e:
                    97:6d:a6:43:21:53:fd:38:42:27:fd:e0:03:7c:0e:
                    f8:bb:2c:da:65:00:cc:b1:b6:0c:72:1a:c1:10:4f:
                    c0:ca:d7:11:9a:ab:77:9c:52:c3:13:c2:2f:52:58:
                    1c:e0:ec:aa:38:a0:fd:23:32:6e:8f:f9:55:4c:24:
                    ca:cf:b7:76:7f:b4:be:aa:9e:e4:9a:39:d4:8c:c3:
                    74:c5:d8:bd:62:8d:32:18:8e:60:17:ce:90:05:dd:
                    0d:d4:70:d8:11:33:1b:23:bd:d5:02:09:17:2e:ba:
                    ad:39:90:eb:f9:24:0f:97:1d:02:f7:32:5b:e6:47:
                    00:d8:2b:74:36:a8:15:03:80:5a:d0:8b:4f:56:d8:
                    7a:65:26:a0:b7:8d:ab:9e:df:aa:69:bc:49:b1:e5:
                    fe:48:90:65:3d:ea:90:d2:75:01:09:8c:84:4e:d1:
                    b6:1d:97:1b:58:94:b4:d7:06:d4:5f:9d:3a:9f:e5:
                    47:08:ff:da:8b:07:6d:2f:a7:dd:3e:cb:cf:11:27:
                    a0:b0:6d:2a:eb:92:c1:f5:18:40:d7:6a:06:4b:62:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:D9:D3:10:99:0D:C1:20:70:16:51:9A:F3:14:76:67:7E:8C:B9
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9e:2a:cb:23:ab:50:f9:47:9a:ed:29:74:af:29:d2:bb:25:
         7e:e8:02:11:7b:c9:dd:dc:6a:ca:36:a4:45:27:09:ff:67:e3:
         9b:1d:58:e5:40:1f:40:84:ac:ae:85:1f:bd:7d:c9:4e:16:48:
         28:37:7e:c0:36:78:d1:72:e5:eb:df:99:21:23:13:52:60:3c:
         43:b5:f2:51:17:ee:e6:66:ad:3d:07:39:ae:c5:45:e4:6d:95:
         79:7a:f6:64:3e:95:e0:f6:0c:58:8d:c2:54:04:5e:dd:8d:b6:
         f8:d2:fd:fb:9a:15:ce:26:e5:43:5a:a4:0e:a0:e1:af:67:9a:
         e3:aa:69:1e:fd:3d:b5:7b:ca:5a:6e:c3:7c:d0:d5:70:92:af:
         0c:cd:8b:32:a6:af:85:a3:c2:45:f9:6e:71:ff:c6:7b:d1:85:
         98:30:41:58:fe:ef:43:ea:ec:8e:5b:ed:84:da:5e:ca:a0:b9:
         e1:8b:41:ee:d9:79:39:9e:6d:de:cd:16:f8:82:1f:98:62:c9:
         ec:45:9c:fb:bb:b3:aa:25:e1:95:72:b1:eb:b0:af:be:c3:e7:
         71:ce:d6:59:dd:10:d0:72:1f:43:5e:3f:15:be:47:c7:f2:8f:
         cb:f4:1a:7a:fe:78:5e:d4:7f:88:fd:1f:34:be:de:95:36:39:
         49:a5:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:27 2026 by rpki-client