Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          MpObcUejHf26wya+OPJofHW24RNcPJ/JUcyFzCdK3yQ=
Subject key identifier:   D9:B7:B2:99:0E:1A:E8:4D:23:95:A0:A6:69:AD:62:89:0D:7F:4E:67
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       68A83198A539FF5EB9758DAFFF54AEA47FD0C034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          039A
Signing time:             Tue 10 Mar 2026 13:24:04 +0000
Manifest this update:     Tue 10 Mar 2026 13:19:04 +0000
Manifest next update:     Wed 11 Mar 2026 15:13:04 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: lIb7pw2ZPF/m3J14wA+eZ3aqorHtIpjQKN0TB2Hq86g=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 15:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a8:31:98:a5:39:ff:5e:b9:75:8d:af:ff:54:ae:a4:7f:d0:c0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Mar 10 13:19:04 2026 GMT
            Not After : Mar 11 15:13:04 2026 GMT
        Subject: CN=D9B7B2990E1AE84D2395A0A669AD62890D7F4E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:6c:36:01:b9:51:31:ba:49:f8:2e:cd:be:
                    af:14:d2:bb:2e:47:f7:0e:b4:4b:c6:43:63:87:39:
                    62:1e:91:d6:e2:f4:aa:4e:7b:3a:e7:7d:38:9b:9a:
                    1d:a7:7b:9f:72:ba:43:a3:88:e1:a0:4d:1a:13:41:
                    dd:46:27:3a:86:a7:6c:02:77:ac:c9:e1:22:08:1f:
                    b4:62:72:78:f1:40:88:24:d9:19:18:dc:f8:b3:31:
                    38:2d:33:ae:f9:98:6e:7b:00:97:72:38:f6:55:ad:
                    e3:5a:ab:2b:d5:e2:14:25:78:99:d2:d8:8d:86:8a:
                    da:49:24:32:96:d0:73:96:a7:dc:f7:7b:af:9d:21:
                    3b:93:a5:31:34:94:b2:ca:07:33:fb:52:34:44:bb:
                    2b:1e:be:a6:a3:92:dc:82:e7:89:de:6a:2c:bb:49:
                    f5:17:7f:d8:fd:c7:4e:5f:cf:68:55:ef:ee:59:d4:
                    52:42:4c:f3:a4:43:d3:05:b4:05:0f:f6:15:9c:d4:
                    cb:9e:09:b0:df:c5:9e:c1:fc:63:0a:af:76:75:3d:
                    30:1b:0a:2b:f9:73:58:ee:c6:b9:75:55:e0:4e:c9:
                    33:c2:20:7f:0c:68:c1:39:42:20:12:18:81:21:70:
                    ac:df:d6:db:50:f3:b4:ef:47:9d:55:ef:96:e6:5f:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B7:B2:99:0E:1A:E8:4D:23:95:A0:A6:69:AD:62:89:0D:7F:4E:67
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:07:0e:fb:2c:18:41:50:0d:b4:e1:2d:04:ad:e7:15:fd:ac:
         85:e8:a7:96:a1:05:2e:76:27:9c:98:20:a2:ef:96:21:81:ef:
         5e:96:11:65:dc:d9:91:1f:35:b1:3a:a2:78:ec:4b:eb:84:57:
         73:fa:43:62:1a:1e:1d:89:c4:4a:76:18:28:fb:94:16:bc:0c:
         dd:cd:68:57:f6:d8:bb:dd:a6:cc:30:f0:9c:5e:8a:7f:da:5b:
         8f:6b:3b:26:34:18:b9:53:da:bc:a2:72:6c:d0:0e:bd:04:97:
         0d:e4:73:30:7a:08:8f:e9:b9:02:6b:60:58:20:9c:6a:f9:95:
         0a:a0:3d:db:9e:23:94:00:03:06:3f:5f:bb:99:f4:09:6b:50:
         76:6b:72:05:73:3c:89:c2:5f:a0:53:70:a2:20:24:2f:26:cb:
         2f:dc:c4:05:c7:04:d8:68:87:6f:b4:2b:f0:0a:f5:28:b2:cd:
         25:ab:ce:74:e8:d5:07:53:9a:a0:f2:e4:0d:6d:a8:97:f1:98:
         62:f4:11:17:6a:7e:1d:07:a5:84:94:72:3d:3e:03:48:b3:96:
         e6:a1:5c:c7:69:68:50:ee:2e:01:fb:b0:6d:9c:13:ae:55:a7:
         d4:c6:32:0e:bf:75:c2:c5:0f:11:a1:e6:74:da:28:ea:40:53:
         b8:87:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 08:57:05 2026 by rpki-client