Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          mDD+msA5iSpYiHvhUGEbw2nrYhFWaSWRgU7yUHJaAEU=
Subject key identifier:   1F:1E:73:0C:88:04:F6:EA:87:CA:2F:FD:BE:A4:2A:33:16:C8:48:42
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       27DF3A5C6EE50E1EE8426E8D29C8A851092F5F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03C2
Signing time:             Thu 09 Apr 2026 09:04:07 +0000
Manifest this update:     Thu 09 Apr 2026 08:59:07 +0000
Manifest next update:     Fri 10 Apr 2026 11:02:07 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 3so8l1oNaE6i2/n0qBZFxwjwQdFXDgN6FwqmK2Vbkj8=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Apr 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:df:3a:5c:6e:e5:0e:1e:e8:42:6e:8d:29:c8:a8:51:09:2f:5f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr  9 08:59:07 2026 GMT
            Not After : Apr 10 11:02:07 2026 GMT
        Subject: CN=1F1E730C8804F6EA87CA2FFDBEA42A3316C84842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:7e:d7:fa:20:aa:02:b7:57:67:3e:24:cf:
                    0c:d2:0e:60:4f:e9:14:8c:4d:15:1b:a4:8d:33:9a:
                    75:56:c1:29:b8:c7:9e:af:48:45:52:09:c8:18:38:
                    69:9c:1b:9b:42:31:e1:83:47:c7:4a:28:08:c2:95:
                    19:28:82:26:e0:4e:2d:ca:6e:a3:79:45:c0:6c:94:
                    a1:28:52:f1:c1:2c:f5:99:ad:20:aa:02:54:cd:65:
                    8f:55:e1:0b:5e:47:42:39:81:cc:e3:2a:a0:95:df:
                    6a:e6:7c:b7:97:e2:64:ee:15:57:6d:8d:72:5c:3b:
                    df:b7:30:be:50:34:b4:08:f1:6d:93:c0:2c:da:96:
                    a6:5c:59:48:21:9b:85:1f:7e:a8:81:4a:ce:29:45:
                    1b:78:1e:e8:00:8d:07:80:e4:1b:42:ab:0d:af:16:
                    18:31:5a:0f:60:24:94:a5:fc:10:2d:93:ff:bf:e9:
                    ba:bd:3f:f0:02:93:a0:69:f1:0f:51:51:06:f0:61:
                    3a:f1:c1:39:33:ff:aa:8e:93:d9:38:4e:66:57:e8:
                    77:d0:4e:8f:fb:37:ec:1b:db:b9:c8:b2:a5:ba:94:
                    37:9c:e5:90:92:54:5e:0c:fc:5b:9b:bd:f8:5e:dd:
                    74:aa:2d:af:a9:07:e9:0a:64:35:e3:1a:fd:7a:9c:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1E:73:0C:88:04:F6:EA:87:CA:2F:FD:BE:A4:2A:33:16:C8:48:42
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:33:36:92:49:07:ef:af:fa:c0:cb:1b:c1:8b:5a:b5:d7:
         17:b2:d0:3a:fd:b9:5d:8f:f7:99:d8:fe:08:ce:05:12:e4:d6:
         b9:0b:cd:a8:87:b2:98:55:a6:74:fc:9d:d2:63:a5:cb:eb:3c:
         6b:b5:a8:5d:b2:09:32:72:e0:65:35:c0:31:a4:85:b0:19:aa:
         7c:52:17:8b:02:32:37:0f:b8:81:0d:30:4e:87:ca:86:e7:6a:
         3b:f9:7f:a8:c6:bb:13:37:00:ea:27:74:4c:d7:be:ad:37:90:
         e2:25:a4:69:da:08:7d:10:c4:7c:21:06:f3:ec:2f:39:84:03:
         b8:2b:19:ed:81:60:12:fd:34:b9:fd:68:bd:c2:aa:7e:77:36:
         15:a0:8c:6f:4d:18:13:62:ff:16:c5:a2:b4:8f:73:dc:0f:61:
         a6:6a:47:c9:cc:9a:58:09:0c:0f:40:df:c0:f6:84:0f:f5:4b:
         35:8b:4c:11:2b:d1:3b:d6:be:1a:5a:08:78:d9:3f:19:bd:b7:
         3a:36:8e:a2:06:c8:6f:bb:96:12:00:3a:ef:8a:9e:46:f2:87:
         3b:f7:da:49:06:aa:81:88:67:8e:43:f2:d0:76:13:15:6f:fa:
         89:db:d4:92:b1:c5:ea:7e:ee:05:c6:b5:7a:e3:90:0e:9c:b3:
         51:50:83:45
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJ986XG7lDh7oQm6NKcioUQkvXzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA0MDkwODU5MDdaFw0yNjA0MTAxMTAyMDdaMDMxMTAvBgNV
BAMTKDFGMUU3MzBDODgwNEY2RUE4N0NBMkZGREJFQTQyQTMzMTZDODQ4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFen7X+iCqArdXZz4kzwzSDmBP
6RSMTRUbpI0zmnVWwSm4x56vSEVSCcgYOGmcG5tCMeGDR8dKKAjClRkogibgTi3K
bqN5RcBslKEoUvHBLPWZrSCqAlTNZY9V4QteR0I5gczjKqCV32rmfLeX4mTuFVdt
jXJcO9+3ML5QNLQI8W2TwCzalqZcWUghm4UffqiBSs4pRRt4HugAjQeA5BtCqw2v
FhgxWg9gJJSl/BAtk/+/6bq9P/ACk6Bp8Q9RUQbwYTrxwTkz/6qOk9k4TmZX6HfQ
To/7N+wb27nIsqW6lDec5ZCSVF4M/Fubvfhe3XSqLa+pB+kKZDXjGv16nDyzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHx5zDIgE9uqHyi/9vqQqMxbISEIwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjgzNpJJB++v+sDLG8GL
WrXXF7LQOv25XY/3mdj+CM4FEuTWuQvNqIeymFWmdPyd0mOly+s8a7WoXbIJMnLg
ZTXAMaSFsBmqfFIXiwIyNw+4gQ0wTofKhudqO/l/qMa7EzcA6id0TNe+rTeQ4iWk
adoIfRDEfCEG8+wvOYQDuCsZ7YFgEv00uf1ovcKqfnc2FaCMb00YE2L/FsWitI9z
3A9hpmpHycyaWAkMD0DfwPaED/VLNYtMESvRO9a+GloIeNk/Gb23OjaOogbIb7uW
EgA674qeRvKHO/faSQaqgYhnjkPy0HYTFW/6idvUkrHF6n7uBca1euOQDpyzUVCD
RQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:24:08 2026 by rpki-client