Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          QG64vWm7XDB/cCScek1vVO32MJmYIVn/S808sYOtWRQ=
Subject key identifier:   0F:BD:90:B6:E1:BF:0D:5E:3E:94:A7:1D:60:61:B4:82:AE:BC:11:CB
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       01A104A4A860590D083E13362707E721CB0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          1A93
Signing time:             Sun 04 Oct 2026 02:01:02 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:02 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:02 +0000
Files and hashes:         1: 0yjFYiyH8c4Kvnnuzk3XUQWka3U.roa (hash: 8CbnBqCqNuJJeCjiCl9MVRUgtudEnYSxf9iLux5cWW4=)
                          2: 4Bg7xc4c3gn14eqw3Q_EY2wsLCg.roa (hash: V0r6f18ufhArHZVCr3p5V92fQa1xW01Er8GrT60C2Ak=)
                          3: T0p_CQ6AMVLm-bE3Gu4nPWld3sg.asa (hash: 6fHAxuCYrCoEY73irL4Id15Eln6eeDqxElXgndmZ6GU=)
                          4: UX2lEHFutG5L20cEw2lc-BnrLSE.roa (hash: 94KIEY+pprKz6jYEWQg5ZDOei3RFyR0/YDvRw2h7/6Q=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: xEGPC+hvFBSREd8d2yfOwYKwcIYeGFJNVV85OVqlChk=)
                          6: ee2lwyUuV88L7AjFoomEL9zBWVQ.asa (hash: VmHb/cOnUojnpsLZeINNi+NRCyYc9GZTiZBd+RtvTOg=)
                          7: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (hash: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=)
                          8: vupopEfOooQGRIzGGFSHPCS81rI.roa (hash: Xeyp95EPsi/om1AKe7B6gcZG7WAjEg0hK0PFbzgsjRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a4:a8:60:59:0d:08:3e:13:36:27:07:e7:21:cb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Oct  4 02:01:02 2026 GMT
            Not After : Oct  5 02:01:02 2026 GMT
        Subject: CN=0fbd90b6e1bf0d5e3e94a71d6061b482aebc11cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:db:50:2e:83:a4:11:9a:f7:44:f7:6a:75:
                    25:f4:d7:f7:b3:de:c5:8c:8c:fd:b9:9f:d6:86:e0:
                    81:59:dc:99:e9:71:0e:d7:8f:ee:87:c6:b7:ed:c1:
                    b0:ee:bf:3c:68:bf:9f:10:5d:b9:a5:0f:12:ad:9d:
                    9e:63:7a:1f:8c:c3:bd:95:12:ea:b3:b6:59:72:77:
                    54:18:ca:46:b2:f1:7e:b5:19:bc:1a:92:e2:70:39:
                    2f:b3:ab:86:63:d7:ec:13:02:f4:ec:88:fa:1e:23:
                    f5:7d:e9:31:5d:42:31:54:cd:0c:2b:d5:8d:ea:85:
                    55:98:9b:d3:62:62:02:65:86:ba:14:84:3d:4c:47:
                    26:54:2a:8e:98:67:fa:36:fe:7a:54:37:97:d5:2e:
                    6a:b6:0e:c8:c8:00:cd:3b:e2:2b:3b:a3:b6:bc:1f:
                    02:25:6e:33:96:3c:1d:93:4e:a3:b6:5f:65:1a:a7:
                    bd:08:13:b4:44:53:e7:3e:90:b2:21:22:4f:e9:69:
                    51:19:8a:95:b1:1d:2a:e7:00:fe:cc:9d:46:5f:39:
                    e0:96:18:80:b7:c0:81:9d:44:f0:25:61:91:f1:ea:
                    cb:3f:2a:56:10:5a:c9:dd:bc:a4:d5:c2:64:fe:44:
                    81:57:48:33:80:07:7c:5f:a9:16:1a:79:42:5b:48:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BD:90:B6:E1:BF:0D:5E:3E:94:A7:1D:60:61:B4:82:AE:BC:11:CB
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:e7:de:4d:66:84:85:df:8d:4b:ef:58:fc:a3:00:dd:5d:
         e7:ce:5f:c4:e2:e1:01:52:1f:e9:d7:09:2c:64:77:6e:75:a9:
         ec:36:45:d0:b6:c4:16:fe:07:b5:f5:c7:22:5b:c4:34:d7:d9:
         32:9e:55:9f:25:04:f8:89:aa:ea:6b:30:02:f8:3d:b2:00:d9:
         66:a8:7f:fe:5c:8e:a6:0b:4e:49:bf:dc:b6:98:6e:55:83:6c:
         00:88:6d:d8:5e:95:93:bc:f0:e5:b7:f9:7a:03:28:ac:8d:83:
         6f:0f:5c:87:e4:47:b4:60:8c:f5:8a:6a:66:f7:0a:63:68:90:
         fc:47:d9:3b:9a:a5:96:83:ff:01:37:a3:6c:49:ca:b8:c5:89:
         75:3d:d9:00:d5:10:c8:fb:91:6d:ed:f9:0f:b4:65:1a:7b:5f:
         9f:8b:16:c6:35:b3:3b:86:63:26:7a:33:f4:58:17:72:85:71:
         1d:b2:9c:6a:09:e0:3f:18:cd:c7:7b:de:99:48:fe:8b:a9:a7:
         df:4a:c0:11:ec:e2:92:65:f1:37:18:d1:8a:bb:72:0f:38:3a:
         59:f3:b0:c8:8d:60:69:4e:58:8b:69:c6:7c:82:82:a3:3a:d6:
         c1:70:09:24:c0:8d:2e:70:33:09:50:8e:14:53:1e:af:70:ca:
         33:52:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:57:51 2026 by rpki-client