Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          CWpVcjmFU+ecZM+dQ5uheXAKeYv0F0loDdkS77pj5Hg=
Subject key identifier:   66:AB:B7:B9:4E:DF:30:39:C9:A4:57:37:D2:4C:D8:9F:45:15:EA:08
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       7CF12BDC189DF8B8D304DCDDCB000AD1683862CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          0186
Signing time:             Thu 07 Aug 2025 10:17:17 +0000
Manifest this update:     Thu 07 Aug 2025 10:12:17 +0000
Manifest next update:     Sat 09 Aug 2025 11:39:17 +0000
Files and hashes:         1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: AQ3oADkpqB6xftzSs8zjGsbdnkxT0Y7j5OrnBIYtJfo=)
                          2: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:2b:dc:18:9d:f8:b8:d3:04:dc:dd:cb:00:0a:d1:68:38:62:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Aug  7 10:12:17 2025 GMT
            Not After : Aug  9 11:39:17 2025 GMT
        Subject: CN=66ABB7B94EDF3039C9A45737D24CD89F4515EA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:7e:38:90:ef:a5:94:28:b9:e6:19:4f:85:
                    7b:3c:c7:ae:8a:ee:63:87:b3:cc:ff:9e:c1:63:94:
                    74:db:ee:97:75:8d:39:eb:f5:9c:15:32:da:58:66:
                    75:66:09:57:eb:81:d0:0f:5c:db:0e:e0:ac:16:4c:
                    37:d0:94:b8:36:98:61:a9:51:c5:a2:70:13:e1:70:
                    72:a7:b5:36:56:a3:79:d0:22:57:e7:f8:30:35:c9:
                    79:11:27:11:e0:9f:ea:98:50:93:ea:f4:13:32:3f:
                    ed:14:cb:82:41:57:94:45:41:b1:80:70:08:1d:09:
                    b4:4a:39:8f:1d:ce:41:58:a8:85:83:5b:3e:0a:c1:
                    85:42:39:60:59:0a:34:ed:e4:53:5b:08:41:28:13:
                    cb:1d:18:3e:c9:a1:26:28:9a:39:54:b1:2e:4c:8c:
                    f1:8b:92:7e:74:9a:7c:cf:b2:b2:c1:ca:a3:d4:54:
                    ac:31:79:3c:0f:22:87:59:41:43:3a:48:4b:75:23:
                    04:80:06:f9:ed:3c:d1:f7:0a:c3:dc:a0:e9:66:75:
                    8d:5d:eb:02:fe:d0:98:01:a2:77:8c:9c:c8:4f:e5:
                    94:d5:27:84:cc:33:09:5a:03:ab:64:27:a2:c8:7e:
                    59:5e:01:82:c0:cd:60:f8:61:71:e5:06:1c:f9:60:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AB:B7:B9:4E:DF:30:39:C9:A4:57:37:D2:4C:D8:9F:45:15:EA:08
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:be:81:81:8c:ea:da:54:84:65:9d:e6:5c:5d:44:39:f9:
         70:6c:00:22:74:0e:0f:c8:1b:16:15:47:73:75:1b:1f:4f:aa:
         d5:b2:ae:00:3e:1a:51:8a:63:9a:a5:8f:7f:b1:2b:8d:cd:ab:
         f0:49:5d:0a:01:28:c7:73:52:d4:f2:d3:ea:05:12:83:a1:b7:
         b5:bb:22:29:92:83:86:dc:b3:01:b1:5b:62:00:66:27:bb:78:
         b1:8f:96:01:ff:73:83:3f:c7:01:42:42:f4:02:f5:97:69:ea:
         05:a5:a7:35:6d:78:1f:6e:75:d1:4b:2b:c5:df:9f:1e:97:18:
         33:5f:75:91:53:5b:d8:fc:8e:5f:87:b7:fa:e0:f0:c8:8e:41:
         19:4f:5e:1a:05:04:f1:93:8b:13:0c:62:ee:b5:83:b8:6a:eb:
         37:20:c6:3a:e8:b7:c5:c5:75:f4:80:6e:89:25:61:c2:6c:36:
         ad:18:19:b4:44:fa:70:68:91:94:1d:45:29:0b:8c:29:d3:88:
         f5:7b:b6:ea:19:e4:10:88:da:6e:0b:41:7c:16:dc:04:fd:7c:
         72:8b:99:6c:c4:1d:8e:a1:6b:ce:67:59:3e:be:9c:6b:e7:0c:
         7b:b4:e6:bc:bf:42:a9:37:f7:36:42:a8:d7:56:b2:c9:b7:8f:
         73:b2:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:01:08 2025 by rpki-client