Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File:                     ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier:          e9UTdcYU4LXAOxaNjmtOlIwRwwp98sGwOg+wBipMaL0=
Subject key identifier:   76:03:14:F6:92:0A:B1:25:1F:68:A6:47:F5:70:A0:4F:70:ED:B5:9A
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer:       /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial:       019674C25FF602B5BE50702B0412A156761E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number:          0654
Signing time:             Sun 27 Apr 2025 01:00:17 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:17 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:17 +0000
Files and hashes:         1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: 0tUhlWTMsHlDWSMKO+79pLzQ8hacIXOE6mt8wRQavdc=)
                          2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:5f:f6:02:b5:be:50:70:2b:04:12:a1:56:76:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
        Validity
            Not Before: Apr 27 01:00:17 2025 GMT
            Not After : Apr 28 01:00:17 2025 GMT
        Subject: CN=760314f6920ab1251f68a647f570a04f70edb59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:8b:a1:1e:51:3b:f8:fe:5f:7c:d0:ec:af:
                    c0:fd:63:32:52:a6:90:7d:e5:b5:2a:da:b7:e3:86:
                    ea:8d:af:c8:99:0b:30:86:bf:a0:62:fc:b4:cd:bc:
                    dd:6a:7e:a9:e4:7e:ea:23:f4:9c:ed:20:28:f4:05:
                    07:5e:fc:1f:0a:b8:d6:82:8a:3c:35:9a:1e:0f:98:
                    92:46:74:b2:15:14:ce:05:65:8f:d7:7d:6b:76:40:
                    f7:2e:69:13:5d:f6:de:ef:22:ec:4c:8a:2f:c4:b0:
                    21:7b:df:6f:3e:95:0f:41:5a:d3:80:5c:1a:44:c0:
                    89:94:9c:bf:87:82:a0:d5:b2:40:f1:54:e6:bd:16:
                    56:ea:4b:3c:e3:af:b9:5c:c9:83:4c:d6:13:7d:84:
                    ab:1d:9e:54:ba:4e:3d:4b:e7:de:cb:b7:33:a0:66:
                    53:7f:d4:af:87:9a:3d:9f:cc:fb:db:b6:bd:07:6e:
                    16:cc:0c:7b:df:d8:96:dc:ad:4b:b1:b7:d3:ef:a7:
                    de:c5:86:75:d3:5b:f2:93:47:d1:86:d5:a7:f0:39:
                    ad:24:be:8f:88:5d:ba:a1:bc:24:7e:9c:1b:b9:f6:
                    a7:7e:e3:0a:81:10:7d:81:b3:10:8d:1d:0a:33:6b:
                    76:48:1b:bb:20:cc:26:3b:00:6d:a3:03:48:1d:e1:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:03:14:F6:92:0A:B1:25:1F:68:A6:47:F5:70:A0:4F:70:ED:B5:9A
            X509v3 Authority Key Identifier:
                keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:7f:00:7a:c1:50:eb:9b:ce:37:a7:c5:ec:7b:06:13:3c:
         7f:31:c2:d1:76:e8:d0:86:e4:15:63:cf:c9:86:51:98:5d:52:
         d1:ec:cc:7f:12:29:bd:04:74:ec:ab:4a:31:3c:6a:56:e6:a4:
         b5:10:28:77:36:6f:9c:2e:36:42:49:c0:ff:20:53:ce:4c:b8:
         aa:3a:bd:fe:dc:39:7c:07:8c:34:6b:ff:d6:ee:77:24:72:4d:
         9b:92:3b:b8:94:b9:7e:1d:9b:6a:fc:a2:aa:44:a0:59:a6:4b:
         48:c2:e8:80:b8:1a:ed:28:2f:4a:24:52:15:dd:89:ec:ab:fc:
         a9:7b:23:05:e1:5f:ea:52:a1:ac:8f:27:0d:6b:41:09:f4:01:
         40:74:11:44:a1:16:8e:e3:8e:78:d6:67:fd:f3:68:66:d6:a7:
         60:ab:0e:8c:98:7c:b7:ec:c7:e3:c2:6e:2f:04:22:77:17:7e:
         05:aa:e1:1c:6b:41:12:0e:22:55:7f:4f:6d:8d:0d:af:0a:c6:
         79:13:a8:2b:b6:c3:6d:6e:39:28:e2:e6:db:d5:b0:24:f6:83:
         05:68:05:7f:15:fd:dd:4e:ac:16:f4:2f:ca:24:b2:cd:d6:27:
         f0:bc:f2:71:15:07:b1:e6:96:6b:cf:be:9f:96:dd:5e:dc:34:
         75:c9:b3:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wl/2ArW+UHArBBKhVnYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjRmZTQzOTRlMzNmYzIyYWM1Y2JiNTQ1ZjljZDEwOTQw
ODc1NjcwHhcNMjUwNDI3MDEwMDE3WhcNMjUwNDI4MDEwMDE3WjAzMTEwLwYDVQQD
Eyg3NjAzMTRmNjkyMGFiMTI1MWY2OGE2NDdmNTcwYTA0ZjcwZWRiNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zWLoR5RO/j+X3zQ7K/A/WMyUqaQ
feW1Ktq344bqja/ImQswhr+gYvy0zbzdan6p5H7qI/Sc7SAo9AUHXvwfCrjWgoo8
NZoeD5iSRnSyFRTOBWWP131rdkD3LmkTXfbe7yLsTIovxLAhe99vPpUPQVrTgFwa
RMCJlJy/h4Kg1bJA8VTmvRZW6ks846+5XMmDTNYTfYSrHZ5Uuk49S+fey7czoGZT
f9Svh5o9n8z727a9B24WzAx739iW3K1LsbfT76fexYZ101vyk0fRhtWn8DmtJL6P
iF26obwkfpwbufanfuMKgRB9gbMQjR0KM2t2SBu7IMwmOwBtowNIHeGOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYDFPaSCrElH2imR/VwoE9w7bWaMB8GA1UdIwQY
MBaAFAC0/kOU4z/CKsXLtUX5zRCUCHVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2Yt
YTRlZmM0M2EwNDc4LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2YtYTRlZmM0M2EwNDc4
LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ9/AHrB
UOubzjenxex7BhM8fzHC0Xbo0IbkFWPPyYZRmF1S0ezMfxIpvQR07KtKMTxqVuak
tRAodzZvnC42QknA/yBTzky4qjq9/tw5fAeMNGv/1u53JHJNm5I7uJS5fh2bavyi
qkSgWaZLSMLogLga7SgvSiRSFd2J7Kv8qXsjBeFf6lKhrI8nDWtBCfQBQHQRRKEW
juOOeNZn/fNoZtanYKsOjJh8t+zH48JuLwQidxd+BarhHGtBEg4iVX9PbY0NrwrG
eROoK7bDbW45KOLm29WwJPaDBWgFfxX93U6sFvQvyiSyzdYn8LzycRUHseaWa8++
n5bdXtw0dcmzWw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:03 2025 by rpki-client