Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          MQYOUODncQ5bv6MKpSV+ZLyQhgDtSZHothaI7zFcZoM=
Subject key identifier:   97:FF:9B:D8:C0:03:1E:49:DA:0A:C1:D0:37:C0:59:A1:E7:05:60:D1
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       0198D6606EE7A32843356F6AA609CBB7F354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 10:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:40 +0000
Files and hashes:         1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
                          2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
                          3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
                          4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: gYYdvGad25QvsIdEG1N7/ZwKjfLKCk/JqLitZ0IBxVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:6e:e7:a3:28:43:35:6f:6a:a6:09:cb:b7:f3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Aug 23 10:01:40 2025 GMT
            Not After : Aug 24 10:01:40 2025 GMT
        Subject: CN=97ff9bd8c0031e49da0ac1d037c059a1e70560d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:50:87:b3:d7:a3:f7:71:6a:22:2f:00:fd:
                    7f:d0:79:ca:10:d1:ed:8a:4e:89:38:d5:50:eb:cf:
                    42:0a:e8:b2:c7:fc:cf:5c:5b:9f:35:df:73:ba:e8:
                    69:33:49:3a:80:4c:5d:42:85:25:b2:c0:e8:81:5f:
                    6d:45:de:68:c9:29:c6:a3:30:45:87:7a:2e:1b:b8:
                    0e:ff:e6:f9:c7:7f:31:6b:7f:95:fc:86:91:1d:e5:
                    56:de:c6:5f:26:1f:98:1e:a1:24:ef:fe:0d:a6:c9:
                    1d:bb:83:73:49:a6:33:3d:33:60:54:a8:8a:bc:cd:
                    65:92:5c:e7:3c:b9:db:38:fe:15:dd:b1:ef:c8:fd:
                    bf:10:73:f9:eb:27:f6:b9:93:cd:bd:20:0c:df:3d:
                    28:ed:a9:b9:23:78:a9:e0:01:c8:69:4d:38:c4:d6:
                    8d:1d:22:2d:9d:2f:a5:a1:5e:b0:84:20:e4:82:73:
                    33:ce:a2:85:73:fc:e6:0f:14:71:fd:eb:d9:9f:99:
                    a4:9a:1e:2a:e7:d6:f7:d8:2d:01:ca:00:4d:fc:2f:
                    1e:c9:27:28:0b:8f:ef:4e:4f:4c:85:da:1f:f9:20:
                    34:e5:7d:2b:cf:83:27:ed:06:79:d2:be:33:67:be:
                    ae:1d:00:c7:c1:e0:4b:75:6e:cf:17:10:fc:fe:77:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:9B:D8:C0:03:1E:49:DA:0A:C1:D0:37:C0:59:A1:E7:05:60:D1
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:6e:f7:4c:db:86:65:63:9b:29:0a:22:18:53:cc:06:59:
         83:a8:49:18:23:9d:01:cf:19:e3:06:70:02:ef:f2:2b:be:0a:
         38:ce:74:e8:17:8d:37:5f:98:d7:71:b2:1d:58:24:7e:58:5b:
         ee:6e:f2:c9:20:09:9c:72:8b:c3:a4:51:34:0f:0b:b8:1d:ee:
         f2:cd:db:aa:de:d9:e6:5a:ae:1a:5a:2f:23:f3:49:da:ed:b7:
         6c:17:30:4d:a8:73:b2:bb:a1:e3:7c:2c:04:99:f5:4c:54:01:
         66:59:3a:bb:a1:c5:86:9b:df:74:38:45:12:9a:7c:03:72:91:
         2f:77:91:cd:bb:14:a5:e5:00:78:c2:8d:47:16:af:62:67:4f:
         86:47:df:98:ba:d4:48:b1:cb:44:fd:d9:79:44:30:b3:a5:7a:
         08:49:df:fb:61:a7:8b:86:86:ce:82:e8:2f:de:ff:df:28:f1:
         52:82:a5:8c:59:a2:26:f9:62:90:06:56:ce:73:92:bb:09:ae:
         28:81:8e:7f:ee:e6:22:f8:93:97:ce:80:da:35:be:20:eb:8f:
         d8:c7:11:d4:12:9e:ec:83:74:fa:f3:40:dd:ce:28:0e:e6:de:
         f2:c5:9e:6d:e8:a4:6d:88:98:9e:7c:ce:19:20:d1:0a:58:f4:
         77:d0:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:03 2025 by rpki-client