Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File:                     ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier:          mWTX3G6oBj89CtpINSnIi783WbCXwMsIIA2idLrCZHE=
Subject key identifier:   5F:4F:B9:84:E6:C0:5C:43:D8:6A:C2:32:30:F1:97:AD:6C:23:C6:AC
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer:       /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial:       0197B74528D5837BB2AAEBA249A825B66E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number:          06FB
Signing time:             Sat 28 Jun 2025 16:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:52 +0000
Files and hashes:         1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: UYVKys8cRgV4kmSk+H/d9bZPj2st2qDFXUWH8A4WLK4=)
                          2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:28:d5:83:7b:b2:aa:eb:a2:49:a8:25:b6:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
        Validity
            Not Before: Jun 28 16:00:52 2025 GMT
            Not After : Jun 29 16:00:52 2025 GMT
        Subject: CN=5f4fb984e6c05c43d86ac23230f197ad6c23c6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:c9:37:56:0e:de:1e:d9:7b:3c:de:6d:33:
                    f8:3e:a9:de:97:88:e8:e5:65:ba:cb:9c:4d:65:80:
                    a8:30:89:b5:a2:66:87:e5:91:05:27:5a:75:77:36:
                    b3:46:f6:4c:11:3a:b9:c8:ca:53:67:d0:3e:69:77:
                    74:93:46:9a:4e:98:8c:e3:6a:e3:52:4d:49:85:bd:
                    c5:ef:23:9c:f7:a7:a5:cc:9c:38:84:a1:78:16:36:
                    68:0d:3c:ed:fb:87:64:cf:0c:bf:78:0b:fa:67:af:
                    40:7f:34:18:a6:b4:64:ac:18:73:5f:b1:4a:8c:f8:
                    4f:40:14:f1:6f:38:2a:53:e3:87:41:08:91:74:61:
                    3d:2f:71:95:08:9d:e4:18:94:c8:26:d9:8e:05:93:
                    49:7a:95:f2:68:10:70:1d:a3:f6:4d:94:3b:fc:80:
                    3d:87:87:43:07:0c:60:97:24:4d:ac:cd:77:67:f7:
                    99:92:b7:09:55:7c:91:14:6c:7d:7f:fe:a0:e2:b9:
                    ec:62:3c:2e:3e:d3:6a:73:a6:33:b7:51:58:ee:b1:
                    c5:26:da:9c:1b:7e:79:d6:0c:ea:d1:4c:ad:13:76:
                    99:a7:c5:84:4e:d6:b4:1d:9f:e7:df:06:43:d5:61:
                    fe:0b:53:55:e1:80:43:eb:4e:96:95:6f:80:b1:0e:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4F:B9:84:E6:C0:5C:43:D8:6A:C2:32:30:F1:97:AD:6C:23:C6:AC
            X509v3 Authority Key Identifier:
                keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4a:9a:60:17:b6:72:10:4c:80:19:94:92:d9:c4:9c:6b:56:
         3d:1d:bd:dd:db:ad:7d:e6:74:75:ee:d1:7b:35:7d:37:b3:de:
         75:68:64:36:fb:ce:cc:4d:48:20:32:25:52:a7:fc:3c:33:3b:
         7c:12:9d:70:ee:38:e2:83:86:26:98:92:cf:85:73:5e:f8:73:
         dd:fc:63:bb:17:ea:4c:c9:48:00:b2:85:ed:0e:0f:76:55:64:
         12:3e:c4:5b:ee:e5:e0:8f:47:71:cd:b6:e8:32:27:5c:25:73:
         f3:fb:1b:a7:e9:d9:69:e2:62:45:5d:b5:3f:0a:fc:4b:88:cb:
         9b:06:35:52:7e:d6:c3:be:db:13:b7:4a:1b:ef:5b:20:f3:49:
         5e:50:be:0d:e2:07:5b:e0:d2:8a:5e:b8:23:e3:36:87:f9:52:
         95:05:41:ba:36:14:6c:06:96:33:92:d4:ad:0f:75:da:c5:25:
         9f:13:65:38:8e:8c:83:c2:a0:d2:be:47:dc:43:d9:dd:73:bc:
         74:bd:c0:67:06:93:e8:cf:a6:2c:78:cd:5d:b4:43:60:7c:2b:
         d0:67:e3:e2:7b:22:b3:45:98:30:e9:d8:2d:46:0a:10:0b:d2:
         1a:34:93:70:6e:13:75:da:46:9b:4a:22:02:a0:b8:27:e7:b6:
         c2:4f:88:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSjVg3uyquuiSagltm6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjRmZTQzOTRlMzNmYzIyYWM1Y2JiNTQ1ZjljZDEwOTQw
ODc1NjcwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
Eyg1ZjRmYjk4NGU2YzA1YzQzZDg2YWMyMzIzMGYxOTdhZDZjMjNjNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jJN1YO3h7ZezzebTP4Pqnel4jo
5WW6y5xNZYCoMIm1omaH5ZEFJ1p1dzazRvZMETq5yMpTZ9A+aXd0k0aaTpiM42rj
Uk1Jhb3F7yOc96elzJw4hKF4FjZoDTzt+4dkzwy/eAv6Z69AfzQYprRkrBhzX7FK
jPhPQBTxbzgqU+OHQQiRdGE9L3GVCJ3kGJTIJtmOBZNJepXyaBBwHaP2TZQ7/IA9
h4dDBwxglyRNrM13Z/eZkrcJVXyRFGx9f/6g4rnsYjwuPtNqc6Yzt1FY7rHFJtqc
G3551gzq0UytE3aZp8WETta0HZ/n3wZD1WH+C1NV4YBD606WlW+AsQ6PAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9PuYTmwFxD2GrCMjDxl61sI8asMB8GA1UdIwQY
MBaAFAC0/kOU4z/CKsXLtUX5zRCUCHVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2Yt
YTRlZmM0M2EwNDc4LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2YtYTRlZmM0M2EwNDc4
LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkqaYBe2
chBMgBmUktnEnGtWPR293dutfeZ0de7RezV9N7PedWhkNvvOzE1IIDIlUqf8PDM7
fBKdcO444oOGJpiSz4VzXvhz3fxjuxfqTMlIALKF7Q4PdlVkEj7EW+7l4I9Hcc22
6DInXCVz8/sbp+nZaeJiRV21Pwr8S4jLmwY1Un7Ww77bE7dKG+9bIPNJXlC+DeIH
W+DSil64I+M2h/lSlQVBujYUbAaWM5LUrQ912sUlnxNlOI6Mg8Kg0r5H3EPZ3XO8
dL3AZwaT6M+mLHjNXbRDYHwr0Gfj4nsis0WYMOnYLUYKEAvSGjSTcG4TddpGm0oi
AqC4J+e2wk+ITA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:53 2025 by rpki-client