Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          GBGkAYoAKli2I63BFVZmeDr2cyxZMJlc6O4Q/RnvEN0=
Subject key identifier:   E8:71:24:44:10:C9:7F:AC:2E:8D:92:28:25:33:DF:C3:FB:98:9C:BC
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       019F905A3D897B13DD66C37F6C92266A23FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          10BD
Signing time:             Thu 23 Jul 2026 19:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:00 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: kuXu1GKRd/nXbVvoiP2XgUU/wvktI2ddpQPqCL+SquI=)
                          2: peX6RxbNXkLdfShtgQrG6g51ciQ.roa (hash: t35RzplxAHK22NGUYNXNYVd/NgW3fATfJr0K+NLyVmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:3d:89:7b:13:dd:66:c3:7f:6c:92:26:6a:23:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Jul 23 19:01:00 2026 GMT
            Not After : Jul 24 19:01:00 2026 GMT
        Subject: CN=e871244410c97fac2e8d92282533dfc3fb989cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:29:29:2d:75:15:79:c3:e0:6b:2f:61:43:
                    84:a3:87:f6:a8:f9:2a:8f:c3:77:c3:d2:0a:d1:5c:
                    a4:d0:d4:94:ac:cc:76:92:e8:5f:6e:f2:e1:2f:ef:
                    f1:9e:ec:dc:55:d5:a0:d4:ab:cc:a8:d4:cc:9c:02:
                    c0:0d:7f:c3:60:34:c6:4c:b1:08:c0:40:62:21:77:
                    97:d1:7a:0d:59:c2:00:f7:a7:87:ac:9f:e4:02:5b:
                    cf:91:41:f6:b9:21:10:91:45:7e:a5:4a:e4:b3:4d:
                    33:ac:7f:de:02:01:c4:e1:a9:a3:d9:a7:ce:53:49:
                    62:0c:72:69:19:81:92:81:eb:8d:0f:ce:f9:41:4d:
                    30:d5:a2:cc:48:5f:a4:26:72:b9:c3:53:1b:38:6b:
                    83:44:f0:83:c9:0a:e5:c7:45:98:82:e0:98:64:0e:
                    e1:ca:92:bf:29:30:f6:bb:44:59:7f:59:d0:fe:c9:
                    0e:19:04:76:b7:d4:8d:48:d2:e1:06:3c:ef:3d:cf:
                    05:9d:31:a3:dc:41:2b:5e:8b:ac:a5:54:e7:18:4b:
                    de:e3:c2:4a:b8:57:36:d1:d8:99:7a:ae:a4:ab:1d:
                    d3:37:6a:68:c9:56:28:11:f7:46:5d:58:e7:a4:b7:
                    94:22:a2:b5:87:da:50:d1:32:ee:ce:5c:82:9c:9e:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:71:24:44:10:C9:7F:AC:2E:8D:92:28:25:33:DF:C3:FB:98:9C:BC
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:25:ed:c8:db:ae:43:2d:ab:02:4c:66:47:8c:14:68:54:
         05:76:4e:af:c7:17:53:41:30:61:3c:da:65:1e:0e:36:2c:e9:
         a7:f1:0b:5c:e0:0c:b8:23:8d:3b:03:de:4e:06:2b:b3:25:3a:
         91:d4:54:6c:23:ce:a7:9c:e5:69:0e:96:a6:0a:0b:d2:51:63:
         43:5e:c1:cd:14:16:a8:ee:b2:36:9e:2b:c6:d6:a0:37:19:5b:
         7b:06:21:dd:6c:ce:7b:02:0b:0e:c6:d8:1f:23:68:e6:8c:eb:
         4d:e0:92:e0:2f:9e:20:ba:38:74:38:51:45:24:1e:6c:6f:cf:
         d5:b3:21:6b:46:ee:64:f1:5c:5f:d3:84:0a:95:d8:29:46:6f:
         c8:55:77:62:50:27:10:a8:2f:c5:d5:cb:f5:ab:8a:bb:bd:d1:
         2b:21:96:87:27:9e:5d:63:d0:29:a8:9b:87:6b:87:dd:88:af:
         a2:7e:f4:b5:4e:0b:23:33:a0:ea:f3:cd:6a:7d:64:70:e0:c0:
         11:5b:3c:6f:ed:50:5a:b8:f8:9a:da:47:a2:23:c0:0e:43:5e:
         8d:f8:50:9d:8c:a9:45:44:90:2e:43:51:10:4b:e0:87:84:5f:
         b3:b1:ba:95:e0:66:ce:b0:06:a5:5d:0f:1d:c4:1f:bf:2b:27:
         78:86:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:13 2026 by rpki-client