Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          45NI+MHFdGeE8S5HSxzt7fTQS/Jd6LDc+qBKLwPJjV8=
Subject key identifier:   C4:BD:AC:33:81:31:E4:3D:E4:4D:BA:62:8F:06:75:B4:39:73:DB:A2
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       436038F1BDC73D2C778B5FEF4BBE7A6E3292F003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0488
Signing time:             Tue 01 Sep 2026 21:34:00 +0000
Manifest this update:     Tue 01 Sep 2026 21:29:00 +0000
Manifest next update:     Wed 02 Sep 2026 23:12:00 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: yZW55b0mt3iwwQtvAeX5ST4c/V6lm8Z3sOezXuv3YPM=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Sep 2026 23:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:60:38:f1:bd:c7:3d:2c:77:8b:5f:ef:4b:be:7a:6e:32:92:f0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep  1 21:29:00 2026 GMT
            Not After : Sep  2 23:12:00 2026 GMT
        Subject: CN=C4BDAC338131E43DE44DBA628F0675B43973DBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:f3:f9:e1:83:d8:6b:f4:bb:f8:09:6d:c9:
                    08:0a:7c:2c:59:5e:f7:1c:c6:58:f3:18:72:76:14:
                    0b:78:3a:75:67:ed:46:fa:da:5f:64:90:6e:3d:fc:
                    c6:eb:a1:1d:59:71:96:64:d2:05:89:ca:08:26:7a:
                    43:0e:ee:63:7b:eb:e5:44:32:52:e5:6a:36:c0:bb:
                    4f:6a:03:04:ef:76:ff:26:2b:a6:76:7b:23:37:d1:
                    e6:02:a8:a5:bc:15:4e:51:d6:d0:98:ec:2d:e6:88:
                    d3:c4:53:a2:20:b0:5d:91:2f:42:14:ac:bc:96:bf:
                    cc:39:04:f0:9f:63:07:3d:02:c1:01:b5:66:d8:e6:
                    7e:c9:87:fa:5b:37:d6:3a:2b:81:d7:53:ac:8e:df:
                    ab:3f:15:f0:e9:b2:8b:f1:ee:f5:8a:bf:15:55:86:
                    2d:b9:99:a3:08:40:ac:8a:7e:80:b6:df:41:0d:80:
                    cc:db:b7:58:b2:9e:2d:75:8e:7d:60:1e:f0:68:5d:
                    57:97:07:c3:49:64:c7:41:19:22:b1:4e:5f:63:02:
                    96:58:f5:2a:9f:8c:c3:25:c2:72:5d:6d:9f:6f:b2:
                    8e:03:f3:bd:d7:58:39:03:18:69:d7:f3:3b:14:1e:
                    fe:d1:88:b3:9e:51:2c:9d:f3:38:d4:3d:ca:b2:e4:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BD:AC:33:81:31:E4:3D:E4:4D:BA:62:8F:06:75:B4:39:73:DB:A2
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:9a:03:8a:1b:91:64:8b:36:ad:a6:18:ea:19:4a:6f:80:
         14:f4:90:39:e0:f2:57:7e:05:b4:0b:32:a3:c0:7c:d6:75:c3:
         16:48:15:34:9a:a5:dd:e2:6e:ab:12:f8:60:1c:75:9c:01:1e:
         8b:39:91:7c:b1:1e:7d:5f:6f:4d:8c:7a:d6:a9:f1:4f:d7:5a:
         44:7d:05:40:2e:ad:19:51:4b:f0:34:7e:41:d3:9b:28:37:23:
         5b:6a:5c:fc:70:fa:0a:68:3d:b3:90:e0:fb:f4:5f:39:b1:b4:
         53:ac:5e:45:99:1c:7a:2f:37:80:79:a3:59:39:32:33:6f:ed:
         75:e5:8d:30:b9:45:39:d0:ba:ef:a0:c2:3a:87:a9:6f:21:e1:
         62:71:c9:9e:51:ef:2c:78:46:d1:69:45:ef:72:11:22:f7:5b:
         b4:45:a5:1b:36:1a:56:68:69:2e:6c:f8:35:76:78:f0:1f:40:
         5d:5b:90:76:f1:33:50:1e:67:eb:5e:59:95:08:05:0c:cf:74:
         9a:42:f2:ee:7d:95:55:61:61:ce:6f:36:aa:69:9d:c7:80:b2:
         0c:e2:79:41:a4:f2:03:54:d7:6e:65:29:89:ef:59:a8:8e:d3:
         6a:14:bc:d8:b0:ce:0f:b0:0d:b2:f4:9e:89:cf:bd:ac:54:50:
         3f:8a:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 15:03:00 2026 by rpki-client