Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          PkesrN6tc0D1czONYasFu0MDZg8iFSE7zUVyH4vxmCY=
Subject key identifier:   5B:C9:2B:30:FF:86:AF:1D:F6:E9:4D:99:47:8C:0C:70:60:A9:74:9D
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       558BE327290800A57D3E4B2BCEFA6AAF519BBC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0431
Signing time:             Sun 28 Jun 2026 02:08:01 +0000
Manifest this update:     Sun 28 Jun 2026 02:03:01 +0000
Manifest next update:     Mon 29 Jun 2026 05:44:01 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: U4xzGsedgQgoOnRKDtdAZfBJHNprVPdVjpZoMf9jhQg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 18:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8b:e3:27:29:08:00:a5:7d:3e:4b:2b:ce:fa:6a:af:51:9b:bc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun 28 02:03:01 2026 GMT
            Not After : Jun 29 05:44:01 2026 GMT
        Subject: CN=5BC92B30FF86AF1DF6E94D99478C0C7060A9749D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:38:61:a4:c3:17:31:0e:a0:ac:d5:ab:f2:
                    eb:63:26:cd:a8:77:b3:a2:95:c1:67:b8:0c:4e:ea:
                    22:33:38:8d:be:df:9c:5e:0a:9a:82:34:c4:61:22:
                    95:97:41:c3:eb:9a:b8:92:5c:c5:ce:5d:81:c3:50:
                    0d:99:21:ac:36:8c:31:5f:9e:e5:f9:44:47:bf:62:
                    6b:dd:f8:02:91:32:2c:4d:d3:91:c1:80:ed:30:7e:
                    0e:0b:83:8b:39:32:7e:db:2d:31:f1:bf:ae:89:b0:
                    82:6a:99:6c:c4:9a:b6:85:77:fc:f1:2e:b8:0d:b9:
                    13:2c:9a:25:c3:00:47:02:a7:2e:9b:21:31:fc:4a:
                    48:7d:55:f6:c0:86:68:3a:c6:d9:21:e6:63:d2:8e:
                    17:fe:90:9f:e7:5b:b9:90:7a:b8:62:88:82:ad:b7:
                    a1:73:fc:cb:0d:84:a4:69:8c:a3:99:46:10:ab:76:
                    fd:65:91:3e:a1:0d:69:4b:87:cd:25:b8:95:c4:52:
                    e0:d6:b9:e0:7a:56:b7:b2:d8:a1:59:5e:b3:65:50:
                    96:3b:be:c5:66:b2:a2:0e:0b:b8:ba:e5:e1:32:9d:
                    82:5e:ae:38:3e:02:d9:7c:79:d6:3b:a8:53:05:9f:
                    d5:11:5c:eb:b6:b0:d7:8e:1a:40:1e:8a:9d:b2:31:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:2B:30:FF:86:AF:1D:F6:E9:4D:99:47:8C:0C:70:60:A9:74:9D
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:30:42:0c:06:0b:91:26:40:b8:4c:19:fc:94:7a:3f:4a:f0:
         9e:cf:0c:6e:5d:b5:67:3f:e4:a6:00:b7:98:cd:6c:c4:c3:65:
         d8:8d:72:56:ed:37:53:6f:53:46:19:4f:3f:03:ec:d3:fb:b8:
         0b:98:9d:08:56:2a:6e:ab:00:a3:2d:0c:cd:3a:79:47:3f:88:
         1d:fb:c9:8f:60:d6:c0:11:70:db:ce:46:57:f6:01:63:4d:16:
         7d:3b:12:0a:cc:4f:7a:69:3d:30:7c:5c:19:66:ff:90:4c:dd:
         51:b8:65:c5:5b:08:1e:be:58:88:94:4a:f4:9a:cf:ce:22:bb:
         05:3b:0f:73:6b:e7:e5:0c:47:6a:86:a5:e3:f5:88:03:49:1d:
         0b:9b:00:cd:94:c4:3f:f2:c3:8c:a5:67:53:f2:1c:51:ae:1c:
         ab:9a:c0:85:97:24:e3:f9:1c:16:bb:6e:a3:d4:68:84:20:6a:
         34:9a:91:22:47:d1:cb:6a:25:a8:46:54:6d:21:66:97:48:2e:
         ed:5d:ed:d0:a3:83:36:a7:88:96:f3:14:ec:ae:8a:c0:3a:61:
         ad:44:bb:7e:67:06:7c:d7:05:bb:b5:eb:60:f6:5c:70:a3:39:
         51:d9:2a:5d:7a:94:ce:08:04:6d:9e:2e:21:f8:e4:3b:19:21:
         ee:d0:12:7b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVYvjJykIAKV9Pksrzvpqr1GbvC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA2MjgwMjAzMDFaFw0yNjA2MjkwNTQ0MDFaMDMxMTAvBgNV
BAMTKDVCQzkyQjMwRkY4NkFGMURGNkU5NEQ5OTQ3OEMwQzcwNjBBOTc0OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiDhhpMMXMQ6grNWr8utjJs2o
d7OilcFnuAxO6iIzOI2+35xeCpqCNMRhIpWXQcPrmriSXMXOXYHDUA2ZIaw2jDFf
nuX5REe/Ymvd+AKRMixN05HBgO0wfg4Lg4s5Mn7bLTHxv66JsIJqmWzEmraFd/zx
LrgNuRMsmiXDAEcCpy6bITH8Skh9VfbAhmg6xtkh5mPSjhf+kJ/nW7mQerhiiIKt
t6Fz/MsNhKRpjKOZRhCrdv1lkT6hDWlLh80luJXEUuDWueB6Vrey2KFZXrNlUJY7
vsVmsqIOC7i65eEynYJerjg+Atl8edY7qFMFn9URXOu2sNeOGkAeip2yMQw7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUW8krMP+Grx326U2ZR4wMcGCpdJ0wHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTBCDAYLkSZAuEwZ/JR6
P0rwns8Mbl21Zz/kpgC3mM1sxMNl2I1yVu03U29TRhlPPwPs0/u4C5idCFYqbqsA
oy0MzTp5Rz+IHfvJj2DWwBFw285GV/YBY00WfTsSCsxPemk9MHxcGWb/kEzdUbhl
xVsIHr5YiJRK9JrPziK7BTsPc2vn5QxHaoal4/WIA0kdC5sAzZTEP/LDjKVnU/Ic
Ua4cq5rAhZck4/kcFrtuo9RohCBqNJqRIkfRy2olqEZUbSFml0gu7V3t0KODNqeI
lvMU7K6KwDphrUS7fmcGfNcFu7XrYPZccKM5UdkqXXqUzggEbZ4uIfjkOxkh7tAS
ew==
-----END CERTIFICATE-----
Generated at Sun Jun 28 04:30:52 2026 by rpki-client