Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File:                     ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier:          wLKcB9X8fYUKwvzV7CClQGMNX2SJ5AldUvPqf/3YXdQ=
Subject key identifier:   E4:C4:D7:A5:21:A0:85:27:7F:31:07:0B:01:E8:45:DC:9D:7C:94:34
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer:       /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial:       01A0DEAA33B8685F69FDDA020487FE545C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number:          0BBA
Signing time:             Sat 26 Sep 2026 17:01:31 +0000
Manifest this update:     Sat 26 Sep 2026 17:01:31 +0000
Manifest next update:     Sun 27 Sep 2026 17:01:31 +0000
Files and hashes:         1: 5THBFYYQN6AvVFDDBOynen_kEN4.asa (hash: uv8hf3sG2Eq3TvJAuSS8E9jhZLBLRwtSX1fGNAlX7Ls=)
                          2: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: a059Iuxi1iMGc9fEqV250jap4Yre+uGbJfHKLFyuueU=)
                          3: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:aa:33:b8:68:5f:69:fd:da:02:04:87:fe:54:5c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
        Validity
            Not Before: Sep 26 17:01:31 2026 GMT
            Not After : Sep 27 17:01:31 2026 GMT
        Subject: CN=e4c4d7a521a085277f31070b01e845dc9d7c9434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:ae:13:a8:74:ca:5b:87:21:40:f3:73:cc:
                    2e:82:5d:6d:89:db:91:20:71:0a:6c:c0:88:4f:4f:
                    6d:fd:0d:71:a8:f2:a5:60:f6:f4:42:7b:05:f1:57:
                    25:1a:f8:ff:e0:08:94:1a:7f:ea:8d:cc:06:fa:1e:
                    3c:95:fc:83:49:cc:94:68:2f:21:90:9b:ec:78:1c:
                    cb:7d:1a:ab:b7:7e:73:94:23:45:07:77:fe:ba:be:
                    82:26:5a:5d:67:04:f3:31:cd:2f:5b:d9:6a:22:5b:
                    0b:1a:fe:3b:d4:aa:63:3c:48:45:b7:0d:7d:4b:7e:
                    63:d3:47:11:1c:6d:43:bd:46:d0:cf:96:27:9c:de:
                    77:32:b8:6c:da:8c:b6:c0:6c:bb:49:d0:32:28:98:
                    25:c4:fc:0f:63:b5:1d:8c:82:f1:37:00:af:34:b4:
                    99:45:32:f7:84:14:b9:dd:67:81:4c:16:fa:62:85:
                    08:3c:d0:60:6e:86:7d:65:23:4d:0d:ff:8a:aa:fc:
                    cf:00:90:86:1c:1c:71:74:6a:d3:47:74:67:5f:11:
                    0e:29:52:5f:9a:7a:37:da:91:18:79:d6:20:39:2b:
                    be:bc:b8:9e:54:ac:48:9e:8e:31:4a:9e:ad:c8:86:
                    5e:e6:9b:75:e0:93:bc:12:c4:3b:17:48:8f:2f:9f:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:D7:A5:21:A0:85:27:7F:31:07:0B:01:E8:45:DC:9D:7C:94:34
            X509v3 Authority Key Identifier:
                keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:88:32:a2:ef:cf:23:66:4c:d7:fc:90:fe:6b:1b:d9:4a:
         19:40:14:86:a2:0f:f0:fb:71:77:15:6d:06:4e:11:42:94:c9:
         64:24:6b:7b:1d:68:42:e2:aa:f1:c4:fd:72:7a:91:11:d3:fe:
         61:2d:22:cc:df:7d:a0:a5:1e:2d:e5:18:1a:cb:8c:8a:85:19:
         cc:b3:50:d8:d3:de:c2:33:0a:33:5f:27:e9:2e:f3:9a:90:4f:
         39:7c:8f:90:44:9b:4a:b4:5d:67:3f:ef:b9:7e:b3:00:60:42:
         a7:d9:5a:c4:95:35:41:27:23:34:83:d9:b2:fc:5c:3c:fd:d9:
         65:b6:78:b3:10:94:73:e8:16:a7:13:41:cc:aa:de:3b:5a:02:
         d4:89:0d:8d:27:ff:4e:b9:9a:53:91:3e:2b:cb:c2:79:08:28:
         07:69:6f:22:97:5f:30:44:1a:be:83:30:ba:d7:cb:30:d6:f9:
         1a:96:97:99:e1:38:19:7d:11:05:96:3c:de:df:99:6f:cf:19:
         d4:98:ab:a5:1c:78:f4:c7:70:23:3c:64:30:09:e0:6a:c7:b4:
         e9:69:38:1c:68:e4:b2:3c:1e:26:27:5a:a6:b9:1c:b8:cf:9c:
         8b:1b:82:4f:ef:da:1a:78:31:10:a5:60:c3:be:eb:c9:ea:f1:
         9d:ad:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:30:07 2026 by rpki-client