Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          YeOhojGdOc2Cvupn+EZdMTI/wp+pDAZ3Km38e1tCoHE=
Subject key identifier:   8E:39:A0:AA:89:BF:71:41:48:33:A2:00:E1:30:C6:95:FF:E6:BE:A2
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       28C5E3960AA410E354B0556735EF8561791C8267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          01E6
Signing time:             Mon 15 Sep 2025 13:34:55 +0000
Manifest this update:     Mon 15 Sep 2025 13:29:55 +0000
Manifest next update:     Wed 17 Sep 2025 14:17:55 +0000
Files and hashes:         1: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
                          2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: vvJhV/9dE208LbfzUYBkO1gM3kEyHBYBFBnr5Dz1lAE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c5:e3:96:0a:a4:10:e3:54:b0:55:67:35:ef:85:61:79:1c:82:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Sep 15 13:29:55 2025 GMT
            Not After : Sep 17 14:17:55 2025 GMT
        Subject: CN=8E39A0AA89BF71414833A200E130C695FFE6BEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:03:06:ec:d5:21:ec:23:5a:69:7e:a4:5c:
                    bc:30:8b:d1:7d:f3:55:a7:8b:10:07:c4:1c:ee:fb:
                    19:a9:34:7e:7f:49:dd:99:b2:3e:2e:75:d6:b8:9f:
                    d6:2e:cd:54:78:84:55:62:d4:9f:b6:bc:72:b8:d7:
                    22:e9:94:1e:38:a3:7d:7a:1a:ee:ef:66:74:d6:9a:
                    10:d1:fe:7a:5f:d4:5c:06:d4:fc:41:c3:15:93:2c:
                    ed:d1:ea:ed:88:33:30:68:93:ce:22:3e:c6:07:a3:
                    52:74:d2:29:ab:fd:81:2d:5e:f4:59:92:50:b8:b6:
                    af:f8:b1:e4:f1:4c:ba:3e:27:a6:c9:4a:e5:2e:c1:
                    71:7e:f2:41:45:61:70:d3:38:b0:ce:23:2a:d0:87:
                    2b:37:b8:f3:f2:b6:4a:44:76:c7:34:f8:4e:87:70:
                    57:9b:09:6f:98:fb:5b:aa:fb:f3:a6:54:2e:e0:6b:
                    c3:79:48:a8:97:09:02:97:50:b6:8f:3f:73:78:0e:
                    5a:1e:d5:d7:8e:ed:d0:05:2b:2f:29:f2:c9:3f:51:
                    4e:24:a6:28:74:69:60:68:65:7e:f8:3a:46:2f:b6:
                    61:f8:1b:3f:d7:d1:fc:c3:52:d7:5c:2a:b7:6f:fd:
                    1b:22:9f:a6:16:51:39:54:7e:d5:c6:f8:cb:24:98:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:A0:AA:89:BF:71:41:48:33:A2:00:E1:30:C6:95:FF:E6:BE:A2
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f9:99:42:99:bf:48:f5:37:c9:a4:7f:51:6c:30:fc:58:c3:
         d4:84:e4:6c:98:b2:78:a4:eb:d1:73:7f:5a:ce:f2:1c:8a:5c:
         23:17:99:28:02:0a:3f:4e:2c:6e:2d:73:c6:b1:24:4e:51:f3:
         ad:4f:8c:b3:da:5c:b3:01:a4:67:30:5d:ea:24:57:de:39:20:
         19:37:a3:c3:5e:5d:9b:b3:b2:a8:10:a4:11:2a:72:ca:e2:80:
         35:78:7b:9c:0c:8d:37:be:7b:ad:38:80:b0:ce:f5:3f:a8:10:
         78:06:8c:4c:62:4e:9f:9b:8e:19:f7:0a:5a:b2:5c:ad:81:5f:
         a8:df:12:bf:02:93:b9:cd:e0:28:e4:93:e3:51:ce:17:f2:21:
         46:32:a8:b8:f2:19:2c:02:77:0d:54:42:a1:46:67:cd:a4:96:
         ba:1b:fd:76:37:7e:c0:09:8f:41:38:af:9c:3b:1e:e9:ea:ad:
         86:e5:3c:35:56:1a:c3:e6:9a:81:44:76:72:a3:50:e8:5b:68:
         61:46:27:6c:21:ba:2d:9f:92:74:b7:35:39:ae:e1:04:c9:df:
         7e:2f:5e:97:7f:c7:74:6a:3f:d3:a9:de:d3:2a:cd:cc:d3:89:
         23:ee:3a:56:5c:fb:14:be:b9:c3:4d:8b:f4:6a:18:62:49:16:
         4d:fc:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:46:47 2025 by rpki-client