Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          lxtvs3F8PpzrF04p6L1H4P/JSm1bjmGbGqvRBG2T7M0=
Subject key identifier:   14:0E:7B:EF:C4:4B:29:DC:6D:B5:7A:06:8A:0A:56:C1:FA:8D:00:0D
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       063CFEA6BAAC4AB8E4160985CDEEF6C6CABC922F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          039D
Signing time:             Fri 12 Jun 2026 16:37:13 +0000
Manifest this update:     Fri 12 Jun 2026 16:32:13 +0000
Manifest next update:     Sun 14 Jun 2026 18:36:13 +0000
Files and hashes:         1: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
                          2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: +HBy+HWm/zaJFBk3NbK8asw6KQ6iXZg1JNGwh5ALb1w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3c:fe:a6:ba:ac:4a:b8:e4:16:09:85:cd:ee:f6:c6:ca:bc:92:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Jun 12 16:32:13 2026 GMT
            Not After : Jun 14 18:36:13 2026 GMT
        Subject: CN=140E7BEFC44B29DC6DB57A068A0A56C1FA8D000D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:27:43:4c:f5:79:0e:c1:6c:cf:1d:75:89:
                    24:df:18:c6:75:43:a2:8d:d8:d8:42:0e:72:8f:c4:
                    34:36:69:e1:12:35:b2:c4:49:61:31:36:7d:53:71:
                    b2:93:34:96:47:4a:73:cb:02:c4:2f:34:bc:7a:c8:
                    80:f2:6e:ba:95:46:8c:e3:4d:81:0a:8a:5f:ae:3e:
                    65:21:eb:77:2d:b6:1b:3f:d1:39:a5:53:ce:c8:19:
                    f5:68:4c:e8:79:24:16:8b:03:51:cd:05:25:90:4d:
                    bc:23:6c:2a:a3:4e:3a:29:47:af:94:5c:3a:eb:cd:
                    01:11:37:83:23:40:0d:12:0d:aa:4c:b6:d3:b1:4f:
                    55:c7:dc:cb:7e:62:f8:06:ed:43:8f:76:38:4a:ad:
                    37:18:41:23:65:08:98:f2:98:38:c3:f4:a9:56:d5:
                    c3:25:d7:50:44:aa:cc:9b:a9:3e:5c:9f:ff:44:4e:
                    df:c3:f8:8e:02:09:e5:62:29:6e:27:d2:39:9f:d2:
                    d3:3a:b6:96:79:79:3c:6a:91:3d:58:48:cf:5b:88:
                    ed:e4:4f:04:ae:7e:b5:69:09:df:d7:ce:28:4f:a2:
                    7e:c2:cb:7c:16:0e:4a:76:7b:48:13:7f:63:04:9c:
                    0c:20:78:e0:9b:ad:ef:69:03:9f:9a:56:32:56:31:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:7B:EF:C4:4B:29:DC:6D:B5:7A:06:8A:0A:56:C1:FA:8D:00:0D
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:49:b3:05:c1:08:6f:8b:ca:d6:95:95:0e:76:76:4e:51:21:
         b0:1a:05:d1:b2:b2:32:6a:e2:20:f3:7a:0e:c2:1c:10:3a:7a:
         02:c5:92:6d:c6:5d:85:27:c3:89:12:a5:9f:29:f5:6b:2e:2e:
         36:46:c9:5a:a1:40:91:e5:bf:fd:8c:cd:8a:a6:51:07:4e:b5:
         2a:51:7d:2c:b9:89:37:ee:51:c1:e2:87:bd:ba:3f:cf:37:e3:
         67:fb:34:b5:29:ae:c0:88:1e:eb:f5:92:8e:b7:40:74:6d:5b:
         21:5a:a8:6c:7b:9b:e3:f6:5d:4d:7d:af:09:02:2d:b6:2f:86:
         bd:4f:f0:e5:68:40:5b:83:51:ab:f1:ed:92:83:1b:f3:f7:99:
         b6:e2:3c:dd:6b:d1:37:a3:71:ef:d3:8a:0e:be:81:08:02:0f:
         2c:17:d1:75:ff:ff:66:83:de:ed:52:df:26:6d:5e:d8:7c:29:
         fc:d7:d9:5d:4a:36:ad:b5:f0:2f:f9:0c:8d:cc:af:5a:93:5b:
         a2:dd:97:03:b4:b9:2a:d1:62:2e:b6:da:6c:26:86:d5:3d:cf:
         6f:80:45:1a:54:c4:89:24:f1:66:4a:50:46:22:8c:0b:6a:91:
         4a:f2:46:43:2b:dc:dc:6d:c9:20:46:e5:16:13:0f:2d:70:03:
         e3:88:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:03 2026 by rpki-client