Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          /WY2BLXMqXHtMWMNpLnjERpsnyup7nDHi67Etsg09pg=
Subject key identifier:   DF:6F:07:36:E4:72:CA:2D:74:1E:5B:52:65:28:18:63:F3:C8:E8:CE
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       01988CFE1929084A9E3E63B9908EE40FBB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          162A
Signing time:             Sat 09 Aug 2025 04:01:59 +0000
Manifest this update:     Sat 09 Aug 2025 04:01:59 +0000
Manifest next update:     Sun 10 Aug 2025 04:01:59 +0000
Files and hashes:         1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
                          2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
                          3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
                          4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: VqVBKv4MtqbbqsK8qThXPHwln/zHYps3nJZR+9L5IV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:19:29:08:4a:9e:3e:63:b9:90:8e:e4:0f:bb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Aug  9 04:01:59 2025 GMT
            Not After : Aug 10 04:01:59 2025 GMT
        Subject: CN=df6f0736e472ca2d741e5b5265281863f3c8e8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:07:4b:3f:67:cc:1d:79:ca:a0:bd:7c:07:
                    87:c3:a3:9c:c8:c1:37:16:5c:06:13:07:dc:e7:ff:
                    1d:44:02:4e:6f:6c:3d:b1:ab:bb:e0:6e:81:b7:9d:
                    aa:b2:42:25:fb:3c:d9:59:3e:76:c5:22:24:56:1b:
                    6f:88:78:71:fa:69:6c:82:c2:8d:ab:63:90:3c:0b:
                    17:f7:23:9a:a7:f2:39:ff:3b:75:eb:d8:ca:26:be:
                    e5:a9:ad:fe:41:e8:fb:75:3d:a5:14:d7:7a:f4:ef:
                    ca:0e:a1:c3:96:d4:ff:43:ac:4f:42:74:80:f2:52:
                    77:13:a6:c7:ab:9a:5f:86:4e:70:e4:5d:a2:bd:47:
                    67:d4:34:0c:ce:29:31:6d:de:39:43:1c:7b:e4:6e:
                    3b:6e:5c:43:66:69:bc:ca:71:f7:d0:87:de:c4:1a:
                    4b:8b:1b:5a:a7:e6:7d:8c:54:54:e6:c9:55:d6:92:
                    7a:82:7d:8d:72:01:fa:8d:e9:ef:9e:8a:2b:45:8b:
                    35:6a:9e:50:77:d5:5a:52:10:96:0c:e8:29:8e:ca:
                    fb:7b:21:24:1e:f4:31:20:8c:c9:a4:a5:d1:77:eb:
                    35:33:bf:a7:45:1d:1a:d3:e3:5f:f8:32:62:df:7e:
                    04:b5:56:ba:f4:4c:b1:f3:4e:88:11:41:dd:55:33:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:07:36:E4:72:CA:2D:74:1E:5B:52:65:28:18:63:F3:C8:E8:CE
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:62:5a:cc:ab:0f:da:25:c4:6b:42:d9:84:9f:86:6f:ca:
         1a:54:ec:c6:0a:14:f1:97:3b:3a:9e:d4:4f:a3:ee:db:f1:7e:
         a4:04:83:48:47:44:13:ed:51:7b:5a:92:06:26:2d:ef:09:f4:
         ad:e4:ba:5a:85:e4:e9:4d:9e:80:92:b8:aa:79:b6:70:f0:9b:
         8c:13:56:d0:0f:32:fa:3e:74:2e:44:7b:9d:37:e2:93:e5:26:
         2a:84:3a:ff:af:ca:a3:c5:74:c7:8b:0c:51:e2:55:34:50:b2:
         45:37:ef:a6:0a:8d:50:0b:84:cb:6c:90:1d:33:6c:28:03:74:
         76:2e:d8:39:b0:0e:4d:53:2b:b0:60:8a:0e:0e:87:ca:ca:81:
         4b:3b:c0:f8:2f:af:8a:b5:b5:3e:31:32:d6:15:6e:15:d8:d7:
         ab:0f:cb:ae:6a:b8:e4:c8:9e:bf:74:04:86:7d:0b:0d:ff:dd:
         5c:c8:3c:5d:09:af:41:7e:87:45:06:8d:8a:c4:5c:21:01:e7:
         ab:65:27:5c:b9:97:8c:f4:54:dd:92:0e:5d:3d:3c:71:52:53:
         f0:2e:c5:ea:bf:1f:6f:00:e2:49:8b:e9:27:e5:cb:d4:01:f0:
         25:cf:c3:c5:0e:e8:35:ef:d1:6e:b9:87:4c:7c:f2:2a:b5:ec:
         0d:38:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:17 2025 by rpki-client