Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          SDMZqHCxnYpqUdFt204zQVHyzjhR4iJEiLKCpvyoBbI=
Subject key identifier:   B6:5E:D1:C1:0F:3E:53:D7:B6:4A:62:91:08:12:CB:93:7C:06:F9:CD
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       5011DE1F6EABE84A70D1D1289577D0C8B750B37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0490
Signing time:             Mon 07 Sep 2026 14:49:00 +0000
Manifest this update:     Mon 07 Sep 2026 14:44:00 +0000
Manifest next update:     Tue 08 Sep 2026 16:23:00 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: pziWBj40ALOp7VxqMF0oXJvMFgndaX27MgAjLN/4E6A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Sep 2026 16:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:11:de:1f:6e:ab:e8:4a:70:d1:d1:28:95:77:d0:c8:b7:50:b3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep  7 14:44:00 2026 GMT
            Not After : Sep  8 16:23:00 2026 GMT
        Subject: CN=B65ED1C10F3E53D7B64A62910812CB937C06F9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:24:88:e4:88:6f:50:b3:ba:4c:eb:c2:5b:
                    6c:65:4b:ae:3a:e7:2a:c9:d9:93:29:1c:66:8a:46:
                    57:c6:b3:e4:65:43:15:fd:c2:18:43:25:30:9a:7c:
                    2c:e4:7c:89:7f:f9:5a:be:a0:d6:3a:b2:4c:e4:19:
                    de:03:2c:94:5a:75:2d:c8:a1:1d:23:92:c9:b9:6b:
                    68:b3:29:b1:77:c0:ab:86:c7:c5:63:60:4c:61:54:
                    98:d5:82:8b:c3:d2:66:61:e3:a7:c6:4f:b8:fb:8a:
                    49:69:25:8e:e7:09:ad:0c:97:fd:41:2a:89:f1:67:
                    71:0e:b9:22:32:89:52:62:67:9d:9e:51:47:65:89:
                    28:31:a5:ca:d8:23:cc:42:6b:81:87:70:a4:77:81:
                    23:78:a3:3f:4d:fd:b1:13:bb:fc:37:86:5a:87:3f:
                    6b:30:1d:cb:09:30:1b:25:04:75:b1:98:01:f2:3c:
                    08:a4:a0:b8:60:dc:ca:2d:64:55:e3:91:de:31:e1:
                    15:1d:b5:4c:a2:32:56:fd:1b:1d:4c:92:46:d4:f1:
                    5d:c7:14:27:87:2b:df:cf:51:d6:ca:91:99:9a:19:
                    94:d9:df:ef:4e:11:bd:ac:c5:d4:aa:b1:ed:dc:31:
                    d6:a5:48:75:ce:d9:2b:2f:a4:00:ae:17:8b:fc:c8:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5E:D1:C1:0F:3E:53:D7:B6:4A:62:91:08:12:CB:93:7C:06:F9:CD
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:53:a0:c5:2a:f1:08:c9:f8:72:ba:eb:11:51:ef:88:45:8c:
         ec:92:28:ec:17:a0:ba:de:f5:8f:82:86:52:55:55:1f:9c:8c:
         5a:4c:45:e9:90:f1:a5:05:38:f3:6f:e1:0c:2b:98:2c:c3:1d:
         e5:2d:ee:28:2e:c9:e3:96:55:4c:2c:8d:e3:3d:ce:a2:66:d7:
         6d:31:4e:0d:f8:94:6b:88:6d:27:de:46:c3:4f:02:8d:5c:ec:
         a0:36:08:f7:23:f1:6f:3c:dc:8b:a7:e1:53:9a:22:3e:de:d2:
         a7:f5:ab:59:b9:4e:b0:d6:77:48:a9:c4:dc:9c:34:54:e8:4e:
         5c:7c:3b:d3:fa:65:32:45:da:4f:de:35:52:52:9f:77:6b:06:
         59:8b:40:bb:66:38:4e:2d:d1:cd:31:a5:98:27:3b:bc:dd:a9:
         30:b4:ec:3e:ab:08:a2:44:3d:c4:57:67:c8:a8:26:a4:00:cb:
         ce:17:c7:67:09:09:30:0d:10:c9:d2:a6:1d:ae:43:03:b3:d4:
         60:22:d5:7c:b2:1c:ef:8f:0b:c7:8c:a6:68:67:29:ae:df:f4:
         61:dc:66:81:b1:f3:db:ed:91:3f:42:90:57:4a:c1:07:1c:8e:
         9d:ba:c8:02:92:47:65:3a:4c:53:8d:ba:6a:2b:c2:82:e9:23:
         e1:31:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 03:31:50 2026 by rpki-client