Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          aiT4idr8OZVDDDoaHb+AB+tfUS9gCeGliOosj3iAIqk=
Subject key identifier:   59:33:27:61:EE:18:4A:7A:C9:8C:A0:2C:56:6F:5B:03:10:7E:44:DF
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       5E754CC48B5C2CF2548B34736866F31666EAC864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04AA
Signing time:             Sat 26 Sep 2026 08:49:10 +0000
Manifest this update:     Sat 26 Sep 2026 08:44:10 +0000
Manifest next update:     Sun 27 Sep 2026 12:37:10 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: r4zYxMzqitJQ/LiqrNF81I04fpelltB8o7hcl1KAyco=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:4c:c4:8b:5c:2c:f2:54:8b:34:73:68:66:f3:16:66:ea:c8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 26 08:44:10 2026 GMT
            Not After : Sep 27 12:37:10 2026 GMT
        Subject: CN=59332761EE184A7AC98CA02C566F5B03107E44DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:a2:d0:d9:07:21:24:fb:0d:c0:8b:c9:65:
                    21:7b:33:3c:14:e9:1f:ef:32:ed:25:61:12:38:ad:
                    9e:c4:cf:ca:2c:88:2d:a1:ef:8a:4c:72:86:24:2e:
                    16:a1:fb:d9:5d:c5:bf:c3:96:42:4d:66:4a:a6:8f:
                    84:86:7d:f1:98:bc:5c:cf:7b:bd:aa:0c:6d:c6:71:
                    4d:c0:aa:05:6a:b5:dc:2e:e3:07:ec:dd:49:ad:05:
                    ef:c7:c8:fe:fc:74:09:25:14:15:76:5c:6a:54:e8:
                    99:f8:b6:d5:41:0d:cc:4d:07:77:33:e4:da:4d:93:
                    67:c0:b7:3d:36:11:e3:16:a0:74:78:30:da:54:60:
                    46:54:5b:2b:7d:16:34:3c:d9:04:63:c4:d2:dc:a1:
                    0e:6a:32:0c:42:50:2b:05:69:bb:93:1c:cd:fb:c3:
                    e2:f9:ee:51:92:63:5a:87:ba:72:d0:27:c0:9d:10:
                    7e:14:1d:7e:04:87:91:32:fd:77:de:09:18:8a:ca:
                    c8:21:9a:4c:70:25:8d:0f:78:92:9c:52:24:d6:4c:
                    54:62:37:5c:b2:16:2b:24:65:b1:f3:1b:3c:6a:f6:
                    2c:a6:59:32:de:13:82:a6:33:51:99:57:53:58:c2:
                    bf:1f:96:f5:5d:c3:18:b2:8b:d8:3e:ea:9e:14:43:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:33:27:61:EE:18:4A:7A:C9:8C:A0:2C:56:6F:5B:03:10:7E:44:DF
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:79:b6:0c:59:1c:48:d1:d1:b6:be:8a:87:8a:0a:d4:d4:5a:
         ca:9b:82:a7:66:19:39:52:74:8e:52:20:de:70:70:07:cc:af:
         64:e2:0c:4f:59:5c:d3:15:76:68:bb:3d:e4:dc:c5:ac:19:cd:
         a5:32:7c:eb:15:38:bd:2c:c3:a4:37:fc:12:98:22:2a:c0:10:
         1e:4b:06:ba:a6:c3:60:71:12:36:4c:3b:b8:b3:53:b3:10:14:
         80:f1:4b:bd:d1:0a:77:9a:e0:36:c0:e0:b3:44:0f:1d:03:79:
         15:d5:a5:1a:7a:13:ae:da:95:26:bd:26:00:7d:b8:17:2d:9a:
         d8:80:ab:e8:8a:aa:02:80:4e:19:6f:e7:10:be:e6:e0:74:b3:
         56:59:27:9c:a7:52:02:9a:51:3d:56:7b:44:ff:2c:ef:20:89:
         52:7e:5f:11:14:48:e7:62:29:a6:e7:24:6b:42:dc:06:7a:8e:
         c6:a3:de:17:8a:eb:26:f9:92:d4:ff:2c:a0:41:d5:54:66:81:
         4a:e6:a0:6d:6b:9b:ee:29:1c:7e:77:7e:88:47:9b:44:28:66:
         7c:ec:dc:54:75:ec:10:66:4f:fb:06:e9:a5:dc:95:0b:3c:bf:
         94:9e:ad:c9:74:9e:8c:53:54:a5:45:e0:f2:f3:8f:a0:55:0f:
         35:27:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:38:36 2026 by rpki-client