Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          5g7YuJOZ3fEhV8UUhixDKpH8eIITlNBVAk7AXMqNVPA=
Subject key identifier:   97:45:A2:0C:D1:D0:9A:E9:67:62:7B:C9:23:D4:83:FC:26:2F:AD:75
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       2AADD9AF7F3F68639E0B5D7DDD14CABC2FED8E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          049B
Signing time:             Tue 15 Sep 2026 14:34:03 +0000
Manifest this update:     Tue 15 Sep 2026 14:29:03 +0000
Manifest next update:     Wed 16 Sep 2026 14:54:03 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: FfTGAjruXT/KIO5Wqq1vu5jOGPjUbVYXJW9HCb4Z7Qs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ad:d9:af:7f:3f:68:63:9e:0b:5d:7d:dd:14:ca:bc:2f:ed:8e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 15 14:29:03 2026 GMT
            Not After : Sep 16 14:54:03 2026 GMT
        Subject: CN=9745A20CD1D09AE967627BC923D483FC262FAD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:18:d6:24:05:b5:a9:e8:f5:40:a0:ec:36:
                    8b:4b:87:1d:bd:8b:a7:3b:7c:02:97:e8:10:3a:98:
                    e1:da:93:51:fe:df:df:e8:f8:3e:9a:ab:60:ea:77:
                    86:05:2b:c8:6a:d9:80:b8:90:1c:eb:63:03:45:a8:
                    78:5a:4b:f8:44:00:de:7c:7f:46:9a:89:65:d6:a8:
                    1c:76:f1:ae:60:5e:1c:2e:c1:a6:7c:1d:a0:28:f7:
                    6d:61:54:4a:30:19:74:cc:17:7c:0d:35:6e:44:35:
                    11:de:af:f7:db:4b:f0:92:a9:ba:da:47:ef:3c:d3:
                    52:0e:01:83:2d:e2:ca:89:78:15:6f:9b:7a:2e:0e:
                    c2:b9:05:14:0a:8c:56:3e:8a:53:03:57:71:a3:fe:
                    d8:b6:15:a0:cc:0a:90:d7:66:5e:84:06:5a:00:6a:
                    e3:a0:d7:a9:2c:3d:c4:16:da:fd:a8:47:96:10:62:
                    ed:42:47:a5:cd:62:57:cf:47:05:b9:53:be:46:0a:
                    dd:74:df:d7:f3:36:6c:59:1f:6c:37:ce:a6:27:aa:
                    81:b4:a1:81:7d:ad:e8:ba:f3:6a:92:8c:1e:21:1b:
                    2d:dd:17:b0:07:27:1f:74:c2:c0:46:4e:be:bc:f4:
                    6a:6c:54:82:0c:53:21:8b:5d:92:6c:05:c3:b8:e5:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:45:A2:0C:D1:D0:9A:E9:67:62:7B:C9:23:D4:83:FC:26:2F:AD:75
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:7f:27:ca:6b:3e:e7:c3:21:04:ef:bf:2d:98:7f:00:a2:
         f0:9f:bf:70:6f:f0:42:05:6a:56:88:33:d3:a7:db:ad:d0:cc:
         40:bb:4d:83:e6:62:fc:4d:56:e8:8f:a5:0e:5b:44:2d:50:7b:
         1c:25:19:46:a3:2b:6c:73:ce:80:39:be:90:ae:93:6b:a6:fe:
         36:27:51:11:4c:70:ac:65:c4:94:08:af:ce:c8:dc:5e:66:70:
         91:91:32:94:b8:cf:56:17:d1:6a:c2:e8:b7:6e:7a:d1:04:7f:
         b3:0d:85:45:71:24:77:1b:00:86:11:46:59:e3:14:b7:96:36:
         d6:2f:41:60:7e:33:84:36:85:0b:91:28:c3:fb:c8:70:f6:e5:
         5c:4e:ad:0a:5b:89:6a:0b:c0:ec:90:1c:a1:e6:80:5c:00:da:
         91:d9:3f:63:1c:d5:30:71:e3:fd:14:c6:9c:8f:81:81:82:52:
         08:d0:f0:f1:d4:a7:f6:f7:53:41:de:dd:66:89:a8:7e:b7:be:
         53:ba:aa:f5:e4:78:99:38:90:3a:b1:0d:da:ec:25:82:4d:83:
         55:d8:bb:50:9f:de:08:32:b3:13:29:08:de:4f:51:1f:24:82:
         07:e5:27:ff:70:2f:1e:32:54:f4:83:80:3d:83:1e:37:a2:1d:
         56:47:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 01:06:51 2026 by rpki-client