Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          +b3ZTYe72eYylv0xZJpGLjXwGS2B54hbaWYikz4c0nc=
Subject key identifier:   41:2A:A7:D3:7C:51:10:44:78:AE:25:3A:DF:1E:9D:BE:DD:0F:47:D0
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       0163D2654FC90F87913786E10ADE6D7CFAE6316C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04BF
Signing time:             Sun 11 Oct 2026 18:34:15 +0000
Manifest this update:     Sun 11 Oct 2026 18:29:15 +0000
Manifest next update:     Mon 12 Oct 2026 21:44:15 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: dJutY529EF6qA1KSurLRf9FrBQIaBrKohgTrv16VuoQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:d2:65:4f:c9:0f:87:91:37:86:e1:0a:de:6d:7c:fa:e6:31:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 11 18:29:15 2026 GMT
            Not After : Oct 12 21:44:15 2026 GMT
        Subject: CN=412AA7D37C51104478AE253ADF1E9DBEDD0F47D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:c9:8d:49:f1:84:c7:ff:91:00:cf:fc:65:
                    17:26:5a:4d:06:ad:ee:26:b5:97:c0:5a:dc:1f:4b:
                    43:df:9a:17:b1:4b:4b:e1:7f:b5:fb:8a:60:24:d0:
                    33:08:01:cd:1d:81:33:b4:59:98:a4:dd:03:04:d1:
                    13:5a:3b:9b:7e:27:d4:2e:b7:92:7f:13:7f:65:05:
                    98:7b:81:70:b4:0a:e3:d2:1d:4f:ea:85:28:1b:1c:
                    e5:2c:b0:c3:bf:88:1d:c1:de:f4:e6:15:91:6a:13:
                    c4:00:a5:84:e7:76:8d:b2:f8:d0:f7:86:d6:6a:de:
                    af:84:f7:f9:3b:d7:42:02:ef:01:df:ef:c7:cb:b0:
                    86:7a:ba:59:cf:1a:4e:6b:18:fb:af:94:1b:97:fb:
                    3b:86:78:87:68:2e:aa:ba:2d:a5:9b:e8:63:6b:43:
                    c8:61:eb:83:31:dd:ab:a8:8c:38:31:ef:04:e5:82:
                    64:d0:65:af:3b:4a:9c:d2:90:24:54:0b:b3:ea:84:
                    7d:7f:19:71:4f:4c:f2:36:31:4c:06:78:0c:ae:a8:
                    4c:ab:30:fb:17:73:9b:26:fb:4e:15:a8:e1:31:61:
                    3a:28:9a:e7:9a:67:1b:41:73:90:b8:b5:6b:8b:cd:
                    ff:b3:89:e1:06:44:ad:6b:e6:48:8f:92:b3:8a:7b:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2A:A7:D3:7C:51:10:44:78:AE:25:3A:DF:1E:9D:BE:DD:0F:47:D0
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:e2:34:ec:67:d5:bd:5d:40:03:f7:e6:5b:64:32:56:47:
         5b:d1:c6:0a:c6:b0:b4:8a:84:48:32:b8:c2:a2:d5:51:d6:ad:
         ed:33:45:62:4a:24:7d:ae:8e:91:bb:c2:ff:9b:cb:27:f3:05:
         5e:b7:f0:53:95:a6:70:d9:ca:ec:6e:54:d1:3c:76:15:fd:e8:
         04:1b:32:4d:62:96:28:0f:51:8a:c2:5c:9e:0c:d5:50:fb:53:
         d2:73:15:5f:36:29:90:fa:2f:12:ab:17:24:10:ed:76:07:9c:
         a8:b2:aa:87:7b:64:35:89:b8:e1:4e:14:da:a6:03:1b:c2:fd:
         e2:1d:0a:14:24:28:9e:9e:14:f7:ac:d6:46:65:4f:65:36:60:
         85:d3:8a:1d:8c:e8:dc:5d:7c:77:69:35:b4:8d:aa:25:6f:db:
         65:36:ca:40:42:58:f3:ed:20:44:3e:7f:ba:64:b3:32:45:6e:
         56:83:8f:eb:ff:87:1a:6d:95:55:e2:53:9b:ea:b5:ea:f9:e9:
         90:4a:d5:f0:e7:88:0d:46:32:3b:79:90:ba:e9:c5:11:85:33:
         b7:2c:b7:93:2b:fa:c5:37:15:77:72:27:d0:c6:b9:d5:ff:d2:
         ab:ef:cf:86:ad:4b:72:c7:9c:62:ff:9b:5a:5d:f0:50:e3:9b:
         71:2e:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:59:28 2026 by rpki-client