Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          vA0RExzRqsgONDgE7QhGYU5gYMpper30dbg5TUbYuzo=
Subject key identifier:   D9:8B:75:A0:29:BA:66:E4:D0:72:A2:D0:9E:EA:8A:21:19:83:EF:B0
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       019EBF5A686C740051FCA4E2BFB98613B9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          1966
Signing time:             Sat 13 Jun 2026 05:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:33 +0000
Files and hashes:         1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
                          2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
                          3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
                          4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: AKvMMTOLVWsg0YTQzu9YwekVW0Dlzyw5DdrbCINzveo=)
                          6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
                          7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
                          8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:68:6c:74:00:51:fc:a4:e2:bf:b9:86:13:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Jun 13 05:00:33 2026 GMT
            Not After : Jun 14 05:00:33 2026 GMT
        Subject: CN=d98b75a029ba66e4d072a2d09eea8a211983efb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:e1:30:71:68:cf:fa:f6:54:83:cc:fb:76:
                    75:c8:b1:e3:68:ac:55:bc:6b:90:1c:61:10:d2:32:
                    de:e5:08:86:12:d0:7e:7d:4c:52:25:5b:7b:92:b5:
                    41:ef:35:cd:cd:0c:f9:5d:87:f7:4d:b0:d4:e7:27:
                    89:ad:29:11:53:0a:77:a5:1c:94:78:75:21:9a:7c:
                    4a:d1:15:76:06:64:53:4a:b9:f8:a5:b5:1e:e8:9a:
                    33:5f:c5:01:67:9f:53:6c:4c:8c:f3:20:14:3c:04:
                    a0:5e:b0:7a:88:8a:ad:df:08:01:ed:1c:10:d5:7b:
                    d9:e9:f2:37:d7:5b:65:0c:be:8f:5a:64:15:9e:8d:
                    07:d8:b4:00:8d:85:05:8f:e0:ff:91:28:03:a4:52:
                    8f:46:f4:ab:38:ef:d0:49:26:53:cb:66:76:cf:4c:
                    67:a5:07:ef:f7:4b:eb:e6:37:11:34:3b:c3:66:56:
                    d2:11:76:49:4f:d5:d0:92:62:81:8d:0a:09:19:ec:
                    3c:80:b5:00:b0:f7:09:0f:b4:79:db:ba:df:3e:92:
                    9c:0c:71:66:5a:a0:0d:75:b1:58:c8:30:74:b4:f9:
                    bc:41:f0:6f:84:f8:19:d4:bf:af:c7:05:04:51:24:
                    41:ed:50:64:fd:3c:f0:21:5f:ce:4e:a7:52:9b:8e:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:75:A0:29:BA:66:E4:D0:72:A2:D0:9E:EA:8A:21:19:83:EF:B0
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6f:7f:cf:85:cb:11:0e:e9:cc:54:5c:63:75:f4:cf:1c:ef:
         3c:87:74:a7:aa:60:6f:67:0f:92:3e:51:83:b1:42:a8:ef:5c:
         74:9a:a6:a0:60:b0:f9:47:8c:c3:33:24:c1:a2:5a:ee:09:9b:
         ca:32:53:1d:44:73:f9:23:f6:4e:ae:96:9b:62:9e:ea:37:f0:
         e2:1c:e0:7d:2c:d0:82:0b:cf:3a:12:e5:8b:d8:45:4e:12:a6:
         ff:22:80:58:66:65:ea:4a:42:27:65:58:cf:9b:e4:ef:b7:1d:
         bc:43:46:c8:23:da:61:12:29:b1:52:66:22:9c:34:e8:4b:46:
         81:ac:a6:8c:d7:16:37:19:c6:c0:b5:d9:58:9c:4f:63:71:71:
         63:fe:a3:6c:4a:bd:f4:3a:64:e1:d3:fc:bf:9c:f0:d1:06:57:
         90:d8:7f:10:ee:08:2f:7b:46:1b:66:d0:ab:21:83:eb:fc:d0:
         7e:8e:68:ce:27:c7:86:5a:ed:c7:bd:91:4f:8d:eb:d9:3c:53:
         ab:d5:ee:8d:13:fb:86:e7:72:ea:3a:43:ea:0e:90:e3:70:ca:
         f8:22:03:db:51:61:17:d2:49:2b:e1:e9:e1:0f:58:73:00:46:
         63:b8:47:69:d8:31:10:7c:c7:50:eb:5b:8d:6e:65:4c:f4:e2:
         27:c7:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:46 2026 by rpki-client