Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          bkF9jXDXKQSaHHms8XRLSWnbKMIYf7l3b1dds7Y/86c=
Subject key identifier:   2D:52:B0:C2:8D:16:13:E3:0D:60:F4:DF:C3:9A:83:65:AF:2D:DE:3A
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       31EADEA6552AF62C0287AAA3D070B191F72F3F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03D1
Signing time:             Mon 20 Apr 2026 10:54:08 +0000
Manifest this update:     Mon 20 Apr 2026 10:49:08 +0000
Manifest next update:     Tue 21 Apr 2026 14:00:08 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 967H5RSHUZuazAkAPRO1VnLcOQ9fNto2igZ4rrBGwdw=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 13:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ea:de:a6:55:2a:f6:2c:02:87:aa:a3:d0:70:b1:91:f7:2f:3f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr 20 10:49:08 2026 GMT
            Not After : Apr 21 14:00:08 2026 GMT
        Subject: CN=2D52B0C28D1613E30D60F4DFC39A8365AF2DDE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:ac:03:b2:0c:45:57:2a:e1:6c:63:e5:a7:
                    35:42:24:d4:4b:f5:6d:9b:11:d0:3e:59:dc:61:91:
                    25:24:4c:ed:8d:fa:8a:ae:a6:d0:e2:9d:ba:57:f8:
                    5d:47:8f:89:07:bd:1d:3b:0d:23:32:2c:05:af:19:
                    f5:5d:61:a5:03:da:7c:94:76:8a:a5:bd:c6:9a:5e:
                    fe:a4:8c:2d:3f:60:09:86:32:67:b7:69:c4:41:8a:
                    66:2c:3e:b5:b9:69:5b:ac:a5:3e:4a:ce:06:13:67:
                    c5:26:63:80:38:82:da:1c:8c:b3:c3:10:d6:09:0b:
                    ff:04:c6:1c:eb:6c:4a:61:48:00:67:bb:9e:f6:9c:
                    9b:50:d9:41:b1:ca:59:10:8d:80:5f:93:3b:e1:a2:
                    19:a8:cf:26:95:21:b4:59:3f:ca:30:35:20:bd:d5:
                    55:ec:33:f3:48:13:94:74:77:86:06:30:c0:70:10:
                    47:f5:ea:0d:f4:af:b6:fe:49:06:4b:f8:6a:a8:b1:
                    fd:59:20:2b:57:a7:be:3b:dd:7a:61:38:60:53:4c:
                    87:e4:2c:08:f3:38:bd:64:48:f5:73:ba:f4:06:8d:
                    ad:c1:ef:30:87:e8:db:37:00:22:2e:13:f8:0a:09:
                    74:20:94:19:1b:1f:a7:ae:a6:59:5f:d6:58:0b:36:
                    84:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:B0:C2:8D:16:13:E3:0D:60:F4:DF:C3:9A:83:65:AF:2D:DE:3A
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:49:49:86:a5:d3:c7:b2:ab:b2:b5:57:f5:20:ea:c6:af:64:
         ba:e3:ff:4c:2b:e2:bb:4d:7f:d6:00:f0:9f:7b:96:6c:d3:64:
         0d:48:bd:72:f2:2b:fb:fd:01:f9:08:cf:ad:1c:57:95:d8:b1:
         2d:df:fe:e4:fc:6b:83:1c:89:00:37:83:16:e8:51:5a:95:7d:
         0c:23:4c:b9:25:e2:92:9d:b2:98:1d:30:27:fe:3e:79:4e:5d:
         3e:55:bf:b9:ef:f8:3c:33:83:f3:ee:f1:d4:84:e1:7e:ad:e1:
         4c:83:29:6b:06:99:71:d5:f3:cd:93:fc:6c:8c:71:d7:33:54:
         61:ea:32:5f:d9:b2:9e:f3:84:25:d1:02:62:a0:71:6b:e0:ef:
         f5:21:29:b1:5b:76:a4:6b:97:55:3c:d5:b9:ce:1d:d8:75:c2:
         f6:09:c6:cb:fe:7c:65:2b:e1:45:1a:89:62:0f:da:9c:de:52:
         04:3f:f5:8a:f0:f4:16:24:c2:4d:46:fd:af:7c:b6:05:d2:5a:
         7a:38:08:f2:7d:f1:c0:84:d2:8a:da:1c:79:b8:55:a2:8f:63:
         5f:3a:48:97:06:f0:35:da:df:e1:8d:95:0d:23:42:dd:ef:bf:
         b4:b1:39:c5:f4:46:05:82:41:d3:ac:d9:56:19:41:5c:02:e2:
         60:89:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 18:26:21 2026 by rpki-client