Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          0kDHVKR6QWAZQhrVyuyETpsTDUfZkAzErd2NXjMSQGM=
Subject key identifier:   4D:2D:16:30:B4:0A:88:EB:25:B0:94:E3:E2:5D:BC:2C:C2:52:37:AB
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       340D1B864F3D963711C5FD02DFCA303D3A1CE8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          03A0
Signing time:             Mon 15 Jun 2026 04:35:48 +0000
Manifest this update:     Mon 15 Jun 2026 04:30:48 +0000
Manifest next update:     Wed 17 Jun 2026 06:10:48 +0000
Files and hashes:         1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: YVW68oVnyr3q7CUZ81x3uCgahbzKRaEfW0jQc41g9oU=)
                          2: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 03:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:1b:86:4f:3d:96:37:11:c5:fd:02:df:ca:30:3d:3a:1c:e8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Jun 15 04:30:48 2026 GMT
            Not After : Jun 17 06:10:48 2026 GMT
        Subject: CN=4D2D1630B40A88EB25B094E3E25DBC2CC25237AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:d9:aa:91:45:30:80:7f:29:65:c4:2b:97:
                    47:fe:15:f4:8b:bd:1c:4f:46:5b:58:b6:27:e4:70:
                    9d:d0:8a:81:40:33:99:46:24:f5:b6:a9:dd:21:9b:
                    ee:f5:d1:20:86:7c:33:7b:71:d5:97:73:b4:38:80:
                    26:a0:a7:2d:a1:5e:f0:83:53:fc:31:88:d4:ea:f8:
                    43:59:75:d2:f3:db:e3:88:ff:39:1a:f6:78:8c:c8:
                    2b:0c:ae:5c:59:12:05:88:82:5a:f0:18:dc:59:0f:
                    0e:c9:c6:a6:68:80:f6:1f:61:db:4a:56:c4:f3:75:
                    77:d1:d0:fb:94:58:f8:8d:97:63:87:30:0f:04:5f:
                    b9:62:8a:cf:a2:b2:9a:13:da:24:f7:9e:e3:ea:82:
                    27:7f:56:55:96:16:cc:65:a8:98:37:c9:fe:45:57:
                    89:6c:11:ea:24:8e:4f:92:e6:c3:38:e6:ae:b9:5f:
                    fc:31:a4:fc:75:36:56:ce:1e:22:33:eb:56:20:e8:
                    ad:42:55:1a:6f:a0:56:e0:f3:7d:a6:b2:91:ea:6f:
                    ab:38:a8:aa:32:c3:02:07:57:56:8c:ce:70:18:34:
                    42:95:f0:0e:50:e7:ed:c1:8e:42:7e:d2:5f:da:50:
                    4e:9e:2f:11:6d:18:41:7f:cf:60:7c:ae:79:e1:d2:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:16:30:B4:0A:88:EB:25:B0:94:E3:E2:5D:BC:2C:C2:52:37:AB
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:de:0e:29:4e:8a:43:49:f0:0b:34:d4:df:dc:05:6b:42:0c:
         ac:64:19:6f:78:13:cf:0a:3a:7d:7b:53:f7:41:02:a0:2f:61:
         99:72:a4:d0:91:91:a2:bf:8f:b1:0a:d5:f7:49:da:f5:bd:cf:
         cb:c4:85:d2:11:13:6b:e6:dc:c4:f1:09:f8:d5:cf:f2:5a:4e:
         91:1f:18:74:06:33:f2:d9:d5:71:a4:c7:a6:00:6d:2d:57:0b:
         d3:68:54:d8:8e:ce:28:66:ad:81:23:d0:6f:01:67:53:a1:41:
         ac:03:91:47:0a:00:d4:d7:27:8c:3e:88:0a:dd:0f:c4:3e:19:
         ef:aa:b4:fb:5e:5e:5d:bc:d6:fe:3b:af:63:77:e3:d4:53:4c:
         48:8e:d9:b6:af:d9:e7:be:46:2c:0c:ac:79:49:5b:26:cf:3e:
         cc:a7:77:5c:15:f5:cb:de:80:8c:7b:3b:9a:8e:b2:8a:56:28:
         a1:db:4d:9a:64:da:b3:a9:1e:e2:15:8a:35:b9:2b:26:34:d6:
         16:65:a2:a3:cf:bf:a8:09:e9:82:c8:34:97:53:2a:17:17:21:
         ba:d5:8c:b1:a3:85:3b:0d:bc:16:62:c1:e2:5b:de:b7:4e:60:
         3b:ef:a7:54:7f:83:6c:0a:8d:e5:d5:7f:6e:b8:a5:f0:69:95:
         a9:5a:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 09:52:44 2026 by rpki-client