Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
File:                     5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft (raw, json)
Hash identifier:          fvo8OkXBRIajd/BqFL2+p0NJPMyL7r6NKNwkPpj0df8=
Subject key identifier:   DA:1E:BA:6A:D2:F6:16:72:20:C9:1F:F1:E9:10:52:BB:91:8F:CE:9A
Authority key identifier: E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5
Certificate issuer:       /CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
Certificate serial:       019A4EF46818C186D1B0FED69F446E331A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
Manifest number:          0E04
Signing time:             Tue 04 Nov 2025 13:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:31 +0000
Files and hashes:         1: 5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl (hash: r2frXCCs2+74zl/6XCgXkadbS3U6rgLz5H0W8qCKRyA=)
                          2: ojpo3C_o4XkLEMUun-AN5dsCn0c.roa (hash: KD+YKxAdab+/MSSFUGcDgdX/M8ezVTZqmPoRZBNH630=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:68:18:c1:86:d1:b0:fe:d6:9f:44:6e:33:1a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41798a3ee49d523e88e1ad103e63e121d84d1b5
        Validity
            Not Before: Nov  4 13:00:31 2025 GMT
            Not After : Nov  5 13:00:31 2025 GMT
        Subject: CN=da1eba6ad2f6167220c91ff1e91052bb918fce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:46:63:eb:8a:b6:fd:0b:e8:44:c3:1d:ff:
                    58:56:b3:be:b6:1b:99:e2:04:e6:03:8e:95:b3:5e:
                    f4:c0:2d:c0:33:98:2c:a0:62:94:c3:7a:4c:d2:34:
                    a2:29:a9:0a:94:d2:9c:21:5a:61:56:a9:f0:f0:81:
                    b0:ad:78:7d:bb:e4:d9:1e:bb:95:89:77:6a:09:05:
                    c0:4c:3a:d6:14:d8:88:4d:1d:55:38:4d:2c:de:09:
                    3b:0c:0f:f4:35:a1:f2:27:90:cc:01:73:26:18:15:
                    3c:86:30:4b:12:10:90:b5:e0:ee:7d:dc:48:9f:94:
                    86:71:6b:61:f3:02:6b:74:31:8a:5f:66:e4:b5:62:
                    ff:c8:19:16:32:d3:a1:58:2a:cd:b8:54:50:24:dc:
                    6d:53:b1:18:2c:7b:4b:d8:9e:df:f7:1a:9a:a0:38:
                    52:48:b0:9b:9d:d7:43:02:1a:e7:f8:5f:d0:c9:4a:
                    01:bc:52:01:39:e0:85:e9:37:ec:6a:d0:e3:9c:da:
                    51:93:30:a8:be:15:bd:be:b8:6c:81:fe:95:c2:ab:
                    cf:21:d1:ea:f2:aa:19:c1:b4:63:49:8f:79:a5:d7:
                    c3:72:6d:92:3b:e7:57:84:67:7f:6c:2e:d4:d1:f8:
                    52:29:c2:34:0f:ea:2d:6b:80:2a:12:8d:4f:81:8a:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:BA:6A:D2:F6:16:72:20:C9:1F:F1:E9:10:52:BB:91:8F:CE:9A
            X509v3 Authority Key Identifier:
                keyid:E4:17:98:A3:EE:49:D5:23:E8:8E:1A:D1:03:E6:3E:12:1D:84:D1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca469-2086-4c4c-a0b8-8d0857a1a4d7/1/5BeYo-5J1SPojhrRA-Y-Eh2E0bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:0a:63:e9:ef:0a:cb:7e:42:69:b8:58:2a:01:1e:da:b3:
         a2:d4:a4:96:e0:de:2e:05:9c:a4:f6:05:9b:1e:dd:01:9f:e9:
         d0:27:1a:e1:6e:e0:1d:f1:8d:7b:c4:fa:bf:9c:cf:8d:57:a5:
         04:24:a1:9d:ee:e7:ba:34:06:ac:76:60:bb:36:78:80:17:25:
         46:51:88:b0:64:67:f6:3c:56:0c:3b:0f:f6:09:cd:8e:4e:8c:
         5d:4c:37:63:99:81:1c:06:37:aa:f6:ee:ff:9e:a3:ce:6f:09:
         40:7b:53:3b:75:84:4e:e0:0b:ed:3c:e8:ba:9a:6a:75:95:4f:
         31:df:86:b1:b5:49:83:77:bf:1a:7a:1f:c3:d7:41:89:ce:27:
         b8:a3:93:17:85:7c:63:89:e2:b6:0e:88:1e:12:44:a6:86:a7:
         d9:d6:35:a8:e3:d3:53:41:e9:65:6f:53:03:6d:bf:8e:08:2c:
         36:7c:6a:c2:d1:83:df:4a:94:d8:64:d3:0f:67:a9:c3:2b:c5:
         93:3c:64:2d:b4:bf:7a:b3:1c:38:6d:8b:f3:3c:61:3f:9f:6b:
         26:cb:97:62:ac:01:fa:04:7b:f0:d9:97:ba:7c:10:fd:e0:c7:
         3a:7c:1e:03:24:6d:74:42:4c:ad:a9:ad:0b:86:0a:de:c6:e4:
         e9:31:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:06 2025 by rpki-client