Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          gtTrcBMtbLbRFu7I8ppEJ3xw0OWywH7jpi6Dg/CzlIY=
Subject key identifier:   7B:A1:20:94:46:C6:72:BA:EF:16:46:D0:03:B1:BE:A1:50:F2:CB:46
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       0196C728396913B76B21838264FE05FF03C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          153F
Signing time:             Tue 13 May 2025 01:00:24 +0000
Manifest this update:     Tue 13 May 2025 01:00:24 +0000
Manifest next update:     Wed 14 May 2025 01:00:24 +0000
Files and hashes:         1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
                          2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
                          3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
                          4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: 5qmocMxxBWM2FRGEIQtoCmLVzpc7lh/zyObNPfDNIaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:39:69:13:b7:6b:21:83:82:64:fe:05:ff:03:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: May 13 01:00:24 2025 GMT
            Not After : May 14 01:00:24 2025 GMT
        Subject: CN=7ba1209446c672baef1646d003b1bea150f2cb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:35:40:fe:9d:9c:3c:0d:92:98:83:4e:dc:
                    ff:ca:58:20:55:18:28:3d:41:1a:a1:ae:71:4c:48:
                    df:50:4e:ff:ce:a9:7b:6f:7d:1e:9d:cb:74:4c:17:
                    81:3f:3c:a5:a3:e2:80:dd:9c:2e:e3:05:dc:61:83:
                    5f:79:63:4d:7f:a5:e8:c6:1b:03:c0:44:d8:ba:59:
                    72:40:3b:e1:ea:84:20:7b:57:bb:83:83:c4:bf:1d:
                    be:dd:60:d6:bb:11:aa:a7:fc:8b:a6:35:24:f2:12:
                    24:d3:84:03:ea:af:64:6e:16:1c:55:4c:81:be:01:
                    2f:ec:60:5b:df:d8:c3:7d:6a:fc:b9:bb:43:af:7e:
                    b2:92:af:d5:ae:cc:68:d2:1e:4b:6f:57:5b:c8:5d:
                    b3:6c:9d:84:93:7b:bf:34:64:42:9d:f6:0d:3e:72:
                    35:59:c7:51:bc:ce:9b:e4:25:cd:b2:d6:74:e8:e4:
                    06:45:50:c4:17:29:a6:86:60:7a:b9:0c:76:be:6d:
                    55:8c:89:3a:40:0c:ee:1b:a7:a8:a4:3e:96:53:d3:
                    b0:ba:57:cf:bb:38:0f:b1:04:14:9a:5c:ae:b1:47:
                    4c:92:2c:bd:fa:f0:2f:4a:bc:59:24:f6:4e:57:c2:
                    f6:5b:bc:37:76:ea:6f:0c:bb:c1:26:d0:b8:6d:9c:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:20:94:46:C6:72:BA:EF:16:46:D0:03:B1:BE:A1:50:F2:CB:46
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4a:66:11:bd:64:01:26:8d:f0:7a:63:28:ab:4b:78:79:f3:
         65:96:05:07:11:21:b7:40:8c:a1:af:ae:e5:09:36:43:89:79:
         0c:76:77:fd:87:d5:90:21:54:fe:84:ea:b3:ca:32:24:4e:d2:
         06:27:ec:7c:b0:56:be:d2:25:fc:8b:36:68:2e:1c:4a:1d:d1:
         84:b9:d6:78:c5:ef:8a:50:ad:f9:09:e6:f0:10:d5:bc:e6:5b:
         e5:50:b1:40:71:84:2f:4e:80:4e:34:20:31:da:a7:7b:7c:4e:
         3c:42:e9:5c:ba:d0:0f:88:df:58:46:3c:68:70:76:2f:86:f6:
         85:0b:f0:f1:36:27:51:27:da:f3:e7:a6:c5:c2:ce:e8:b9:9d:
         a4:c5:b3:7b:79:d3:c7:e9:67:1f:1f:e8:c7:f9:c1:a2:2f:f7:
         21:0d:ca:dd:13:81:80:a7:c1:ed:8f:5a:85:21:0b:82:07:9f:
         10:b5:93:d1:66:9d:7a:71:a6:e0:90:cc:10:d4:52:41:26:48:
         2c:88:86:28:d7:69:d5:d7:e2:ca:60:95:84:4b:2f:da:19:66:
         f5:e7:23:a9:53:e0:33:9e:15:d8:fc:db:d8:28:f3:cb:eb:3a:
         55:cd:b1:4b:02:84:b0:aa:19:f4:95:12:ea:a3:a8:65:79:24:
         13:c1:c4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKDlpE7drIYOCZP4F/wPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTdmZmU4MjJiM2JhN2JjMTk0ZGI3YTczNGM4NWVmY2Vm
MmYyODMwHhcNMjUwNTEzMDEwMDI0WhcNMjUwNTE0MDEwMDI0WjAzMTEwLwYDVQQD
Eyg3YmExMjA5NDQ2YzY3MmJhZWYxNjQ2ZDAwM2IxYmVhMTUwZjJjYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4E1QP6dnDwNkpiDTtz/ylggVRgo
PUEaoa5xTEjfUE7/zql7b30enct0TBeBPzylo+KA3Zwu4wXcYYNfeWNNf6XoxhsD
wETYullyQDvh6oQge1e7g4PEvx2+3WDWuxGqp/yLpjUk8hIk04QD6q9kbhYcVUyB
vgEv7GBb39jDfWr8ubtDr36ykq/Vrsxo0h5Lb1dbyF2zbJ2Ek3u/NGRCnfYNPnI1
WcdRvM6b5CXNstZ06OQGRVDEFymmhmB6uQx2vm1VjIk6QAzuG6eopD6WU9OwulfP
uzgPsQQUmlyusUdMkiy9+vAvSrxZJPZOV8L2W7w3dupvDLvBJtC4bZzIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuhIJRGxnK67xZG0AOxvqFQ8stGMB8GA1UdIwQY
MBaAFGpX/+gis7p7wZTbenNMhe/O8vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2It
Y2EwYzYyNjIxMDk4LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hZmVmMTItMWYwOC00YjQ2LTk0N2ItY2EwYzYyNjIxMDk4
LzEvYWxmXzZDS3p1bnZCbE50NmMweUY3ODd5OG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEpmEb1k
ASaN8HpjKKtLeHnzZZYFBxEht0CMoa+u5Qk2Q4l5DHZ3/YfVkCFU/oTqs8oyJE7S
BifsfLBWvtIl/Is2aC4cSh3RhLnWeMXvilCt+Qnm8BDVvOZb5VCxQHGEL06ATjQg
Mdqne3xOPELpXLrQD4jfWEY8aHB2L4b2hQvw8TYnUSfa8+emxcLO6LmdpMWze3nT
x+lnHx/ox/nBoi/3IQ3K3ROBgKfB7Y9ahSELggefELWT0WadenGm4JDMENRSQSZI
LIiGKNdp1dfiymCVhEsv2hlm9ecjqVPgM54V2Pzb2Cjzy+s6Vc2xSwKEsKoZ9JUS
6qOoZXkkE8HEHw==
-----END CERTIFICATE-----
Generated at Tue May 13 06:49:03 2025 by rpki-client