Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File:                     ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier:          3hIbmCq9jBnLDTUwevQznOPj1lBBkwIWkJQQRL/HRHE=
Subject key identifier:   14:BB:40:80:3E:24:1F:3D:AE:C7:2C:0B:CF:E3:65:E3:2A:84:4C:AD
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer:       /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial:       019E2926E1BBD0F39153CBD61A3EB96E5A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number:          0A52
Signing time:             Fri 15 May 2026 01:01:14 +0000
Manifest this update:     Fri 15 May 2026 01:01:14 +0000
Manifest next update:     Sat 16 May 2026 01:01:14 +0000
Files and hashes:         1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: FcBr6hvXDdwqIz1LDe7wye/Nlft8hgp5bmg0LMMNFuM=)
                          2: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
                          3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:e1:bb:d0:f3:91:53:cb:d6:1a:3e:b9:6e:5a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
        Validity
            Not Before: May 15 01:01:14 2026 GMT
            Not After : May 16 01:01:14 2026 GMT
        Subject: CN=14bb40803e241f3daec72c0bcfe365e32a844cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:03:b4:34:89:d7:77:7c:92:b1:df:f0:ac:
                    13:cd:fb:63:f2:62:b7:d5:6a:8e:b7:00:89:c7:b9:
                    fc:f3:db:ca:3b:41:00:b3:61:34:d7:ef:9c:be:56:
                    3d:f1:3d:b4:0c:1e:3c:34:f9:72:0d:8e:97:8f:36:
                    ac:19:6e:19:c3:e4:bb:f1:ba:9f:88:aa:e3:8d:00:
                    a8:9f:61:a1:26:b1:46:68:bd:fd:78:39:27:13:08:
                    34:4b:18:ca:88:bd:bf:c9:8b:6e:79:b2:78:fa:31:
                    34:af:1b:ce:ab:73:19:10:25:8c:ec:34:2a:6a:b3:
                    6c:6b:45:b2:8f:01:d9:0f:ee:76:ec:08:79:58:31:
                    7c:2b:30:d7:c2:0b:dd:ed:c8:81:5b:76:5b:60:c9:
                    26:08:94:71:9f:a2:66:be:31:05:ea:77:e4:50:64:
                    29:68:f7:24:73:14:75:e4:a8:fd:aa:c7:2c:27:5b:
                    73:5e:0b:4f:0f:6c:6b:b1:88:da:f3:0f:63:26:bf:
                    6b:f7:36:4d:ce:95:88:07:5d:26:ca:8c:57:28:23:
                    06:39:e6:bc:99:6a:15:0f:86:0d:04:51:da:ea:46:
                    e3:c7:f2:4c:c2:5f:7c:5f:19:a1:63:3a:10:b1:d3:
                    5c:f5:c6:e8:32:a3:bc:2f:20:24:35:f5:a6:4e:3c:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:40:80:3E:24:1F:3D:AE:C7:2C:0B:CF:E3:65:E3:2A:84:4C:AD
            X509v3 Authority Key Identifier:
                keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:54:b1:59:fe:b5:d3:07:ba:cd:8e:2a:50:be:71:eb:5f:
         7e:3d:12:4b:ce:33:bb:77:cc:02:89:4b:6a:f1:a8:a0:0d:a4:
         87:f5:7d:e2:ad:a7:07:7d:91:24:c7:1b:73:b5:32:df:c6:5e:
         18:fc:e5:e5:2f:70:24:6d:fa:54:2f:cc:ea:6b:76:6f:cf:f0:
         83:7c:69:ea:b2:c7:78:81:95:1c:88:29:ef:21:fd:60:55:b0:
         63:12:73:1c:e6:e2:50:17:6d:c4:f2:b4:c8:a8:e6:35:33:53:
         9a:2b:ef:5c:5e:f9:54:10:1b:dd:d7:72:33:7d:31:e1:94:8c:
         0c:fa:fc:b1:ee:7a:f3:21:6a:53:34:c4:d8:a8:e9:bc:5e:f3:
         29:bf:20:b4:c1:32:c9:38:de:4b:d7:3d:2d:ab:31:eb:8b:ab:
         6d:2c:d3:b1:5d:ef:31:cd:d1:42:e5:6a:a0:56:09:d9:a7:a4:
         94:3c:a1:4e:af:7f:81:43:7f:32:c3:f0:81:ce:9e:12:1d:b8:
         c7:d1:8f:87:37:4d:dc:37:75:56:f3:33:7a:63:d1:f8:02:5b:
         f4:e8:6c:ff:08:bc:ae:d6:b1:b8:3f:e3:6b:de:9e:7e:12:5c:
         1d:13:af:df:0e:73:12:dd:1c:f1:9d:66:bb:1d:49:ed:16:97:
         12:4d:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:42 2026 by rpki-client