Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          va5qgqdvfW508Y7XDMqkIsR4mHdcDY4lrcSnIQzTbok=
Subject key identifier:   83:9C:BA:D4:5F:1D:45:7F:2E:67:9C:8D:20:E6:F9:F6:82:F3:6C:0F
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       019CA97D8B9606F09AFC1E104C8275E9DAA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          184E
Signing time:             Sun 01 Mar 2026 13:01:43 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:43 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:43 +0000
Files and hashes:         1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
                          2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
                          3: 96omvjV6JYdBPZlIVSnCjfm_nWI.asa (hash: 76/x4HVgX0yY3hTYmk0/wth2ENsRf9PyXfMTDy9C3Mw=)
                          4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: 5qrfHTnrsbO3li7OZMLoziMc06Bc1CrLupOuipri9fM=)
                          6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
                          7: jQpb433w3EOWB9aXUd_c_slO2l8.asa (hash: /i2kLyt0tP8dxCxVXb11RPbdCXXg7GHwLDlUBgeEQ7U=)
                          8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:8b:96:06:f0:9a:fc:1e:10:4c:82:75:e9:da:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Mar  1 13:01:43 2026 GMT
            Not After : Mar  2 13:01:43 2026 GMT
        Subject: CN=839cbad45f1d457f2e679c8d20e6f9f682f36c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:38:e1:2f:3f:c3:02:09:d3:be:86:58:fd:
                    7a:04:2a:81:1f:c3:46:13:56:dc:0c:03:cf:9a:2c:
                    cc:69:8b:44:07:53:87:a3:17:94:82:e1:d0:0a:1b:
                    74:0b:ef:b1:8e:f6:26:33:7a:3f:b6:3c:b4:fc:db:
                    39:ab:34:a8:ca:89:05:84:45:34:a7:b3:05:77:86:
                    79:5b:ad:bb:c8:9e:a2:a0:77:7e:29:63:01:a0:53:
                    e1:d2:18:37:f9:35:10:69:d2:ed:66:78:f6:c2:ab:
                    38:5a:d8:90:bb:b6:ac:d0:ff:17:8a:04:f3:18:98:
                    70:98:a0:78:9c:84:ef:55:c8:0c:d1:b4:fd:a5:85:
                    e9:7d:0a:9a:0d:6c:7e:03:76:b6:cf:da:c1:bd:cd:
                    48:22:d7:3c:d2:0b:94:fb:5e:8f:6b:89:06:5c:ca:
                    77:96:04:43:54:01:6e:9f:ea:f2:0b:10:15:4d:12:
                    0a:b7:71:3a:12:e9:83:53:e1:0c:e1:c4:64:11:63:
                    21:a2:45:19:72:68:80:d4:74:3a:f3:2a:85:4f:e6:
                    9c:12:c6:fa:5e:81:30:01:a9:12:cf:c5:3e:36:b6:
                    3f:4e:f0:14:1e:12:70:42:36:5c:da:97:cd:02:c5:
                    13:cf:cc:11:2c:94:2d:d9:ad:2e:df:7e:2e:61:f7:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9C:BA:D4:5F:1D:45:7F:2E:67:9C:8D:20:E6:F9:F6:82:F3:6C:0F
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:4c:df:55:42:84:a8:ce:57:26:ef:d7:8c:c1:53:8f:99:
         6b:a7:04:d9:79:cf:1b:70:e2:9a:77:53:6e:31:99:74:41:9c:
         28:f8:16:ad:ed:a3:43:d3:92:06:ce:9f:5c:58:b4:a3:19:6d:
         d3:e6:65:7c:73:5a:c3:b1:06:1d:21:ff:9f:81:46:0a:14:fa:
         e3:70:04:1e:77:67:d4:3c:e5:1d:f0:44:70:f1:08:02:fd:6e:
         46:35:ef:aa:4b:13:80:64:01:99:ef:23:61:fe:71:52:a9:fd:
         90:a9:f3:95:64:1b:74:77:7b:56:f8:c3:52:f0:53:62:d3:16:
         0b:11:50:42:e4:c1:22:4a:2a:73:c8:e1:83:f0:33:3a:cb:5f:
         67:16:7a:c2:e8:a5:86:a5:8c:1b:db:3a:21:18:71:eb:f6:d5:
         ae:e3:6e:29:77:52:0b:2b:ee:6e:00:22:07:e4:c4:10:f6:e2:
         2f:b5:42:e4:1b:95:22:63:6c:16:df:47:7f:3a:35:e5:a0:02:
         d5:8d:39:aa:f4:c3:75:6d:b8:e4:7f:f0:c5:e7:45:fe:ab:73:
         ed:a1:91:75:5b:53:bc:91:92:8b:51:a1:a3:ac:2b:d7:57:8a:
         20:0e:19:b7:50:93:29:e1:66:78:69:94:fa:0c:54:75:7c:49:
         1a:f0:04:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfYuWBvCa/B4QTIJ16dqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTdmZmU4MjJiM2JhN2JjMTk0ZGI3YTczNGM4NWVmY2Vm
MmYyODMwHhcNMjYwMzAxMTMwMTQzWhcNMjYwMzAyMTMwMTQzWjAzMTEwLwYDVQQD
Eyg4MzljYmFkNDVmMWQ0NTdmMmU2NzljOGQyMGU2ZjlmNjgyZjM2YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQ44S8/wwIJ076GWP16BCqBH8NG
E1bcDAPPmizMaYtEB1OHoxeUguHQCht0C++xjvYmM3o/tjy0/Ns5qzSoyokFhEU0
p7MFd4Z5W627yJ6ioHd+KWMBoFPh0hg3+TUQadLtZnj2wqs4WtiQu7as0P8XigTz
GJhwmKB4nITvVcgM0bT9pYXpfQqaDWx+A3a2z9rBvc1IItc80guU+16Pa4kGXMp3
lgRDVAFun+ryCxAVTRIKt3E6EumDU+EM4cRkEWMhokUZcmiA1HQ68yqFT+acEsb6
XoEwAakSz8U+NrY/TvAUHhJwQjZc2pfNAsUTz8wRLJQt2a0u334uYfflZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOcutRfHUV/LmecjSDm+faC82wPMB8GA1UdIwQY
MBaAFGpX/+gis7p7wZTbenNMhe/O8vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2It
Y2EwYzYyNjIxMDk4LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2ItY2EwYzYyNjIxMDk4
LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF5M31VC
hKjOVybv14zBU4+Za6cE2XnPG3DimndTbjGZdEGcKPgWre2jQ9OSBs6fXFi0oxlt
0+ZlfHNaw7EGHSH/n4FGChT643AEHndn1DzlHfBEcPEIAv1uRjXvqksTgGQBme8j
Yf5xUqn9kKnzlWQbdHd7VvjDUvBTYtMWCxFQQuTBIkoqc8jhg/AzOstfZxZ6wuil
hqWMG9s6IRhx6/bVruNuKXdSCyvubgAiB+TEEPbiL7VC5BuVImNsFt9Hfzo15aAC
1Y05qvTDdW245H/wxedF/qtz7aGRdVtTvJGSi1Gho6wr11eKIA4Zt1CTKeFmeGmU
+gxUdXxJGvAEIw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:35 2026 by rpki-client