Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          PQlwx5Mwp/C+Za3LBBamWNJfc9WP9mKUpUMmt2eghIU=
Subject key identifier:   63:BC:42:4C:26:61:E4:3A:0E:43:D6:5B:5A:E1:65:9B:CA:56:50:C5
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       6F8F02619FFBFD04FC450EEEEE945F65920605B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03E3
Signing time:             Fri 01 May 2026 06:14:10 +0000
Manifest this update:     Fri 01 May 2026 06:09:10 +0000
Manifest next update:     Sat 02 May 2026 07:43:10 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 0RwfKLDRjuTtgTqWkXu5jpoVwPL2wk5s9EAjME4ukyI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 07:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8f:02:61:9f:fb:fd:04:fc:45:0e:ee:ee:94:5f:65:92:06:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: May  1 06:09:10 2026 GMT
            Not After : May  2 07:43:10 2026 GMT
        Subject: CN=63BC424C2661E43A0E43D65B5AE1659BCA5650C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:e7:90:b1:1c:45:d2:0b:16:ed:a2:86:ba:
                    15:46:f8:80:4b:0d:c5:be:6e:33:d3:87:29:bf:cc:
                    ed:76:5b:4a:80:76:9b:75:be:7e:80:f5:df:f1:bf:
                    5b:1d:78:ff:ac:42:88:d3:b0:7b:ff:33:f1:6c:5a:
                    61:47:1e:91:56:a8:22:85:37:98:23:5f:65:12:2f:
                    6f:9e:fa:29:7b:5a:b5:b6:04:b2:6f:d0:90:23:0e:
                    f0:71:9c:03:53:5e:0d:39:ab:03:04:f6:1a:a6:50:
                    90:12:99:85:59:da:d7:da:02:d0:c9:a6:e7:e8:a2:
                    ef:35:24:53:d2:73:a5:c4:d9:c7:be:b2:e0:7f:9b:
                    b6:a1:d2:90:a5:4d:f4:c9:2c:93:86:f9:da:dc:c1:
                    52:34:ac:1f:5b:c6:24:c0:f0:00:af:1f:74:b7:ee:
                    3e:25:a7:b7:01:37:09:7d:81:82:7c:34:e4:09:3e:
                    bb:35:39:61:f0:fd:de:5a:21:6f:36:99:7a:5d:69:
                    fc:f1:80:fd:40:cd:2b:82:5e:f7:16:ed:e0:a7:e6:
                    d6:05:00:8a:53:53:2a:37:56:a7:ec:ec:19:09:d3:
                    6e:8d:76:74:85:97:69:a6:0f:e1:c8:95:f4:eb:8c:
                    fe:e5:37:45:b7:22:cc:ee:fe:f8:47:a0:3c:f4:5f:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:42:4C:26:61:E4:3A:0E:43:D6:5B:5A:E1:65:9B:CA:56:50:C5
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:17:8b:83:7b:82:58:cb:7d:e5:2e:ac:25:16:a4:c2:03:
         de:6d:3d:88:0a:fb:08:90:4b:c5:4a:44:33:9a:80:9d:07:72:
         51:33:b9:20:15:85:05:b2:fe:11:97:6b:1e:3c:14:f6:13:86:
         89:bd:f2:6b:66:d8:d4:8c:88:84:d1:54:c0:85:65:ea:50:77:
         80:8b:f5:e4:e5:97:4a:d1:b1:e8:69:fe:a7:18:68:f4:af:cf:
         0e:15:c1:a2:28:7c:22:4e:97:bc:00:a8:1c:d7:a1:49:f5:52:
         42:c2:8b:74:18:62:14:a1:c9:6d:fc:91:14:a2:fb:53:99:b4:
         2c:0a:98:d6:e5:d4:ab:01:1e:42:1c:69:0e:f4:38:d1:6b:39:
         e9:ff:96:80:c9:a3:01:c6:01:1e:d8:47:fe:2b:d9:57:7e:6e:
         cf:3a:7d:72:b6:c1:38:75:3a:e3:55:4a:70:ab:62:f9:d3:f9:
         d2:36:c5:b0:a5:fc:a0:43:f6:7e:5c:0a:43:06:f7:e6:bf:85:
         e3:fc:97:f6:8d:8a:a2:de:87:a5:09:76:62:f5:52:cc:75:8b:
         bc:dd:cb:2e:cc:31:98:6d:7b:87:51:1a:13:d0:35:8d:cb:31:
         ce:3b:a0:af:98:42:3c:21:25:32:1e:83:f4:1d:fa:b6:b2:af:
         a7:d9:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 21:37:57 2026 by rpki-client