Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          VVma4P0S47lL7gzi/XqV/6Ul2XQVoQ28nmvKVdVsqFA=
Subject key identifier:   27:1A:AC:FE:6B:6E:B4:D3:A7:19:D6:F7:9F:10:D4:7A:9E:F1:51:DA
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       3272E3091D2C2BCB288184789BD79F2330DDACA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0396
Signing time:             Sat 07 Mar 2026 14:54:04 +0000
Manifest this update:     Sat 07 Mar 2026 14:49:04 +0000
Manifest next update:     Sun 08 Mar 2026 17:04:04 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: Sdb09azWXGKL8XZPyQqzu0FMA4k+0vbjJrir5WcwvcE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 17:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:72:e3:09:1d:2c:2b:cb:28:81:84:78:9b:d7:9f:23:30:dd:ac:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Mar  7 14:49:04 2026 GMT
            Not After : Mar  8 17:04:04 2026 GMT
        Subject: CN=271AACFE6B6EB4D3A719D6F79F10D47A9EF151DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:a3:85:57:65:e3:4f:c7:73:f7:d0:36:21:
                    83:dd:66:4f:00:7a:82:13:45:30:f0:ac:59:8a:50:
                    d5:ea:3a:fd:95:4d:bc:a5:46:9a:27:de:b9:04:5f:
                    ee:3b:1a:3b:9d:75:20:d4:d0:03:69:bc:f6:0b:0a:
                    6a:8d:e2:06:d8:75:a6:2c:ea:b5:06:2c:9d:45:c0:
                    6f:d1:2e:8d:65:d1:8f:8d:38:83:fe:65:a1:47:c5:
                    14:10:e2:72:ff:a4:40:b9:00:a1:5e:9c:83:d8:df:
                    13:39:7b:85:ac:2d:45:ed:12:0f:2c:3c:e4:fd:08:
                    48:9f:db:52:9e:0d:70:95:ca:99:29:54:73:fa:5f:
                    0c:6e:29:a0:0e:53:c1:b5:2b:78:85:74:a0:a4:a5:
                    50:33:2b:f5:65:04:ec:2c:96:d6:3f:f0:e9:57:66:
                    0b:f0:6f:d3:05:78:c3:11:b1:33:2f:60:63:03:5e:
                    e8:cf:9e:44:48:03:7a:21:6b:2f:ce:df:d8:51:77:
                    d4:c0:c9:d9:02:99:bf:d2:df:55:ac:bb:12:15:86:
                    03:89:8c:a1:81:f1:de:18:b8:a1:d9:a7:e6:74:9f:
                    af:e0:73:4d:06:f3:5b:0f:48:51:a0:9e:93:22:b7:
                    6e:18:ee:17:4d:72:54:3f:da:7b:1c:a6:21:e2:85:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1A:AC:FE:6B:6E:B4:D3:A7:19:D6:F7:9F:10:D4:7A:9E:F1:51:DA
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:05:7c:49:93:ea:6e:f7:23:e9:71:d2:fe:5d:9f:c9:dc:
         d1:94:94:78:7e:61:0a:1b:20:b6:bf:a6:0c:82:e9:7d:17:6b:
         22:94:0e:81:af:dd:1a:bb:a7:18:21:de:67:e9:f6:50:e8:96:
         d7:b3:e3:52:0c:a9:d9:b5:90:d1:11:e5:0a:84:3b:bd:6e:23:
         6e:12:2d:71:17:ac:f8:c3:2b:13:c9:9f:c9:85:b2:2a:c1:3a:
         ad:1f:50:11:c0:71:eb:1a:1e:1e:a0:aa:dd:2e:51:d1:77:65:
         37:a9:f7:ec:e4:ec:f3:f2:88:70:cd:83:59:34:d3:b4:50:bc:
         06:c1:9f:97:68:90:0d:39:f6:0b:e9:ca:aa:e3:b1:bc:05:67:
         31:92:9a:22:57:93:96:8b:cc:9c:5f:9e:0a:45:64:f5:bb:4c:
         35:a1:1c:56:88:cb:4b:99:76:6f:e8:d4:07:dc:dc:f4:cb:7b:
         9e:ff:ee:5c:e0:ff:ec:48:d5:43:f2:8a:69:c6:d0:cd:c7:dd:
         34:c0:9a:26:62:e6:24:e9:ee:5a:3e:c4:24:76:dc:8d:6d:89:
         13:70:c2:c2:3f:ab:1f:92:55:06:fb:e3:0b:1f:b2:04:5a:e1:
         40:31:36:0d:33:cd:75:18:ed:d0:cd:38:20:75:ed:7d:4b:e0:
         9f:33:77:0d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMnLjCR0sK8sogYR4m9efIzDdrKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjAzMDcxNDQ5MDRaFw0yNjAzMDgxNzA0MDRaMDMxMTAvBgNV
BAMTKDI3MUFBQ0ZFNkI2RUI0RDNBNzE5RDZGNzlGMTBENDdBOUVGMTUxREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4aOFV2XjT8dz99A2IYPdZk8A
eoITRTDwrFmKUNXqOv2VTbylRpon3rkEX+47GjuddSDU0ANpvPYLCmqN4gbYdaYs
6rUGLJ1FwG/RLo1l0Y+NOIP+ZaFHxRQQ4nL/pEC5AKFenIPY3xM5e4WsLUXtEg8s
POT9CEif21KeDXCVypkpVHP6XwxuKaAOU8G1K3iFdKCkpVAzK/VlBOwsltY/8OlX
Zgvwb9MFeMMRsTMvYGMDXujPnkRIA3ohay/O39hRd9TAydkCmb/S31WsuxIVhgOJ
jKGB8d4YuKHZp+Z0n6/gc00G81sPSFGgnpMit24Y7hdNclQ/2nscpiHihbO9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJxqs/mtutNOnGdb3nxDUep7xUdowHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtsFfEmT6m73I+lx0v5d
n8nc0ZSUeH5hChsgtr+mDILpfRdrIpQOga/dGrunGCHeZ+n2UOiW17PjUgyp2bWQ
0RHlCoQ7vW4jbhItcRes+MMrE8mfyYWyKsE6rR9QEcBx6xoeHqCq3S5R0XdlN6n3
7OTs8/KIcM2DWTTTtFC8BsGfl2iQDTn2C+nKquOxvAVnMZKaIleTlovMnF+eCkVk
9btMNaEcVojLS5l2b+jUB9zc9Mt7nv/uXOD/7EjVQ/KKacbQzcfdNMCaJmLmJOnu
Wj7EJHbcjW2JE3DCwj+rH5JVBvvjCx+yBFrhQDE2DTPNdRjt0M04IHXtfUvgnzN3
DQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 05:50:53 2026 by rpki-client