Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          HrIZ2d6ng1Y4ObIm6kfUPbEKiOABxGUcChSr+20GgH4=
Subject key identifier:   70:71:8A:C2:94:E7:37:28:65:1B:74:34:BC:9F:91:9B:93:3C:F7:0F
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       57854A99CCB8143E4F69D43CA89CBED83440F4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          0132
Signing time:             Sun 08 Jun 2025 17:23:38 +0000
Manifest this update:     Sun 08 Jun 2025 17:18:38 +0000
Manifest next update:     Tue 10 Jun 2025 18:37:38 +0000
Files and hashes:         1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: v2JL8B8gae5QgUUr0Alr54EvGek2z+9WfdCv8ARbzAY=)
                          2: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:4a:99:cc:b8:14:3e:4f:69:d4:3c:a8:9c:be:d8:34:40:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Jun  8 17:18:38 2025 GMT
            Not After : Jun 10 18:37:38 2025 GMT
        Subject: CN=70718AC294E73728651B7434BC9F919B933CF70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:83:7c:09:88:eb:18:22:91:7d:69:d2:d5:
                    8d:0e:1e:0f:44:0f:31:78:20:4d:b2:1b:8f:71:72:
                    bc:d5:5e:1c:5e:85:37:66:4e:2b:c5:09:4f:db:be:
                    54:8d:6d:d8:7f:e6:ee:dc:0b:f8:66:0f:43:ec:17:
                    f5:7e:69:7a:64:7d:13:d5:d2:6f:36:10:70:16:61:
                    24:c8:31:c8:b8:db:df:61:75:3a:d7:78:a8:73:06:
                    90:79:a9:77:97:e9:a8:28:55:97:0f:98:45:42:6d:
                    6e:b9:9c:99:21:fc:10:ba:2a:96:bf:37:29:71:a2:
                    fe:f3:bb:6d:71:37:6b:a1:d4:0d:96:ed:7b:bd:93:
                    5c:f4:3f:5a:8e:4c:34:6f:fa:c8:f1:0c:d6:bf:b0:
                    34:ff:ee:61:5e:90:51:8b:24:d2:b9:4a:f3:ed:27:
                    c6:9d:25:3e:d9:2f:56:04:d8:0d:75:c2:40:f5:67:
                    da:2a:4c:7f:c3:9f:21:2e:91:a8:08:78:d7:00:8c:
                    f3:12:1b:39:8b:c0:29:4b:68:e5:14:a5:aa:f5:cb:
                    0a:0f:b0:ce:aa:a8:c6:93:29:f2:03:ce:80:7d:6d:
                    ee:77:e0:2a:00:0b:6e:1c:37:ff:f9:34:10:4e:35:
                    b3:7f:2b:14:11:fa:73:85:45:cb:63:9b:f7:b1:dd:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:8A:C2:94:E7:37:28:65:1B:74:34:BC:9F:91:9B:93:3C:F7:0F
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:72:90:51:e7:07:05:8d:2d:70:db:02:c1:58:d5:8f:c5:ca:
         bb:92:0c:0d:c0:f4:dd:53:e5:99:a7:cd:61:33:54:30:2a:e5:
         47:a0:1b:31:c7:51:59:6a:72:1d:a7:fd:74:32:c8:f6:3e:94:
         b3:a4:93:f5:b0:0d:87:bd:36:19:3b:43:08:ff:61:c9:01:c1:
         88:15:dd:3b:43:44:8b:d1:3e:cf:74:9b:39:c7:a9:9d:e8:d8:
         c3:f3:97:fb:dc:7e:29:c9:04:75:ce:e9:d9:f3:ea:98:35:15:
         60:95:77:9e:d5:c4:86:78:5a:22:ed:e3:7d:ee:0a:d2:bc:27:
         9f:20:45:05:53:cc:ab:d8:28:8f:2e:54:a3:56:1a:b8:cf:d8:
         c7:3f:6c:9f:5f:06:72:aa:17:92:a5:cf:4f:5c:1b:a5:e2:d7:
         f4:07:05:3d:34:30:c4:91:b4:c1:51:12:fa:f1:31:3f:38:6f:
         28:93:f4:29:a3:73:d1:82:48:8c:ae:fa:33:87:1c:ff:7f:3f:
         a7:30:14:06:03:c3:23:eb:1f:77:84:03:4a:df:8c:04:9f:6a:
         0c:54:ea:82:a0:53:86:69:d9:da:96:35:52:73:2d:90:cc:57:
         3a:f7:c5:bd:4f:1a:ef:2e:5b:36:93:4c:73:dc:4b:64:69:7b:
         28:ac:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:21 2025 by rpki-client