Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          8LQ66IloFI4f9ZRtnvPPKR3wKBSzhJfc+xTLF5vLnvU=
Subject key identifier:   87:67:9F:B1:7F:0F:14:14:1F:37:54:66:F6:79:FD:AA:FC:2C:7C:0C
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       344AC93D19A732AE76EDDAA8CEF3F2C7E5F65270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          048F
Signing time:             Sat 10 Oct 2026 22:50:16 +0000
Manifest this update:     Sat 10 Oct 2026 22:45:16 +0000
Manifest next update:     Tue 13 Oct 2026 01:32:16 +0000
Files and hashes:         1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: zRZ8qft82hS9TIMw+I4V8NZux91d7r28ZCt5TCqIqbk=)
                          2: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4a:c9:3d:19:a7:32:ae:76:ed:da:a8:ce:f3:f2:c7:e5:f6:52:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Oct 10 22:45:16 2026 GMT
            Not After : Oct 13 01:32:16 2026 GMT
        Subject: CN=87679FB17F0F14141F375466F679FDAAFC2C7C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:16:3c:d3:af:60:ba:17:40:69:e0:0f:5b:
                    50:db:88:f5:3b:95:db:9d:e6:ff:26:0c:19:eb:9b:
                    6d:96:94:8f:4f:e2:72:8e:ab:9d:20:86:46:b4:71:
                    b9:f0:41:2a:9a:fc:1c:36:bf:ac:54:39:1b:d7:b6:
                    c3:2a:57:ce:63:05:a1:78:51:75:2a:bb:57:03:f8:
                    fa:0d:59:d4:63:75:9b:f7:c7:da:ef:ff:16:87:41:
                    f9:6f:b8:01:00:55:5c:31:a3:61:c4:d2:d8:18:71:
                    e6:9c:d0:03:81:f7:e3:0b:97:d3:be:b0:5a:6c:08:
                    7a:dc:77:ba:a7:05:74:7d:2c:80:21:32:cc:08:76:
                    d4:d1:4b:27:fe:2e:38:d0:a7:8b:45:a4:74:af:fe:
                    df:86:da:f6:7d:fb:6f:d9:f0:09:dd:22:25:46:23:
                    2f:d2:57:b6:44:6a:50:47:da:64:85:f2:3d:45:a3:
                    a0:3b:d3:40:2a:73:3d:47:04:4f:17:f7:b0:2d:89:
                    21:18:a5:ff:68:6d:03:3e:0b:77:dc:5d:13:88:6f:
                    1b:be:73:50:29:2a:fd:92:ce:11:ec:36:75:d9:ba:
                    a7:7f:9b:f2:c8:96:46:9c:23:a3:08:e0:4e:37:e4:
                    e3:40:fe:00:cc:61:d6:fc:85:33:4e:6e:dc:20:17:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:67:9F:B1:7F:0F:14:14:1F:37:54:66:F6:79:FD:AA:FC:2C:7C:0C
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:30:50:47:75:0c:b5:2f:d5:01:cc:1d:e7:a6:c8:23:55:
         94:0d:79:a8:b9:fc:c4:77:f4:57:76:d2:1f:47:ad:11:a6:c2:
         b0:3a:2a:93:ef:f1:00:76:13:90:71:06:d9:08:66:d6:37:cc:
         60:54:5a:f1:50:b2:03:f5:44:ef:5c:63:d1:6a:3a:7f:b8:2b:
         62:5e:78:79:41:ca:7e:0d:1a:79:bf:70:54:0d:18:05:fb:7c:
         3e:45:23:e8:c3:d0:f8:82:f9:51:65:a1:b4:59:66:b9:1e:73:
         c3:85:ca:d8:75:33:14:2a:a7:99:4c:50:6b:e5:4a:bf:6b:19:
         d8:d7:90:c8:b2:2b:24:7d:66:50:fa:60:45:a0:2d:fd:a2:6b:
         9d:a1:6b:c2:9b:75:98:73:a4:6a:55:d7:01:b1:d0:11:ad:03:
         15:3d:15:57:63:6a:64:1c:e7:ae:77:9a:44:f9:d2:d5:e9:ca:
         10:bd:27:6d:2e:94:88:5e:7a:54:28:bf:70:7c:90:a9:8d:21:
         e6:3b:91:42:17:27:6e:98:7c:1a:f5:a8:9c:5e:b0:df:a6:1a:
         86:bd:2e:aa:ca:38:fa:db:06:ac:5e:08:91:87:73:f5:93:36:
         d4:02:96:ba:6a:7d:50:48:69:db:bd:dc:30:64:1f:32:fc:d8:
         79:a8:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:27:08 2026 by rpki-client