Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          1vnoeqtcSL5Q75JjMVGJlMY90K90ghvPrVynMYjPE0g=
Subject key identifier:   5C:D8:47:05:D4:90:F8:FC:EC:4E:C0:98:B1:FC:04:D8:DA:86:1C:17
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       61A10DF88F057D97C7A651972D658C4F0021F3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04AF
Signing time:             Wed 30 Sep 2026 03:54:10 +0000
Manifest this update:     Wed 30 Sep 2026 03:49:10 +0000
Manifest next update:     Thu 01 Oct 2026 04:31:10 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: zLNUuQuPfi0b/OFWtlL5oinfeOAKgCrIXrAxi2Tm/W8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 04:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a1:0d:f8:8f:05:7d:97:c7:a6:51:97:2d:65:8c:4f:00:21:f3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 30 03:49:10 2026 GMT
            Not After : Oct  1 04:31:10 2026 GMT
        Subject: CN=5CD84705D490F8FCEC4EC098B1FC04D8DA861C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:0c:8e:17:b1:21:06:ec:3f:93:10:54:08:
                    c9:70:aa:16:cf:9b:c0:4a:d9:2b:0a:4b:fa:3b:9d:
                    08:57:bf:9a:bd:9b:d9:f9:9e:5e:1b:2a:6c:04:d0:
                    9c:0c:2f:33:61:2e:1f:13:b3:dc:ba:c5:05:f1:eb:
                    f2:34:dc:22:9c:3b:db:8b:d9:f1:7a:ff:16:1f:bc:
                    33:26:0d:0d:2c:ca:94:7d:55:21:d3:05:71:d8:0e:
                    9e:cc:67:67:bf:a2:7b:8d:fb:5c:60:85:c7:7a:c6:
                    37:09:20:5b:b1:71:56:71:1d:38:ce:22:13:9a:18:
                    09:1a:c6:1f:cf:3a:c5:ee:b0:68:92:a1:00:12:8c:
                    b6:9c:a9:8a:b7:34:38:b1:07:6f:6d:7e:0b:c4:f5:
                    26:81:42:29:f6:4d:c9:80:e9:32:f6:8f:0c:21:02:
                    d2:c7:90:09:ac:8b:3f:fa:ac:1e:64:cd:fd:c8:7f:
                    04:45:b8:f9:f9:cb:87:5e:ee:63:de:86:23:57:7b:
                    06:45:0c:06:9f:32:52:92:ea:13:ff:82:bd:0e:a7:
                    2a:ee:2f:c2:0c:f8:5b:49:d4:ff:d9:c8:b2:63:aa:
                    7b:58:d6:0a:c0:c7:59:c1:11:d7:dd:35:33:1a:42:
                    2d:66:f8:db:ea:fb:74:09:cc:3c:03:60:77:f2:d6:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D8:47:05:D4:90:F8:FC:EC:4E:C0:98:B1:FC:04:D8:DA:86:1C:17
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8e:de:ef:18:8f:e9:84:7b:9f:8c:a3:bb:d4:a4:97:6c:39:
         46:bd:68:4f:ce:13:cf:be:20:f4:f4:9b:a5:61:6c:31:5a:3a:
         91:2b:f5:36:84:e5:81:89:f3:4b:70:07:5a:4a:4c:11:10:9d:
         88:33:35:00:c4:f7:47:f3:c0:97:84:d0:d9:6d:f7:14:1f:7e:
         d1:55:48:1f:28:0b:97:11:b3:d3:38:80:05:60:99:d3:42:ed:
         e7:70:ce:58:e3:cd:73:89:ef:1c:2a:1d:b5:89:53:00:85:75:
         bb:da:ba:a3:2c:76:c7:e7:d2:45:06:af:a0:0e:e9:48:34:e0:
         ee:d7:4f:dd:8f:0f:ce:10:3c:e4:64:8f:09:1b:1d:95:b6:27:
         af:63:8d:a9:68:e0:63:47:3e:53:30:f7:64:f3:3f:0e:0e:fd:
         2d:00:02:89:dd:1a:11:42:2f:e9:1f:b4:b0:1d:c5:53:75:58:
         6d:2d:da:f6:3a:76:a8:f2:dc:da:23:11:81:ba:dc:6f:3e:23:
         91:ec:94:12:ae:42:1d:44:31:05:10:75:87:9d:2a:b4:f7:ac:
         24:0f:bf:76:56:1a:82:43:2c:22:a1:32:4c:fa:6b:e9:8a:cd:
         d2:ba:1e:a0:a2:72:7f:21:7f:70:2b:fd:94:61:93:14:6e:66:
         e2:12:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:50:14 2026 by rpki-client