Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          EOEJDk3wfEl0ax4//ltnclIskxfwvMWBI42eUewMDnA=
Subject key identifier:   29:AE:C3:7C:19:D9:C6:68:FC:F6:82:AB:E1:72:2B:A0:99:50:B6:4C
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       7B933588A07BA1B8616390AA4512B0B29B63068F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          049A
Signing time:             Mon 14 Sep 2026 21:24:48 +0000
Manifest this update:     Mon 14 Sep 2026 21:19:48 +0000
Manifest next update:     Tue 15 Sep 2026 22:30:48 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 89TYRkvUq0UCiASTXrF2lum15na6e9uB+HVZQI0kUGw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:93:35:88:a0:7b:a1:b8:61:63:90:aa:45:12:b0:b2:9b:63:06:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 14 21:19:48 2026 GMT
            Not After : Sep 15 22:30:48 2026 GMT
        Subject: CN=29AEC37C19D9C668FCF682ABE1722BA09950B64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:97:92:a6:08:12:a0:b2:7f:2d:56:29:b7:
                    63:79:38:2f:7d:af:bb:92:49:74:2b:74:50:82:58:
                    47:29:1d:4e:b2:99:24:9f:67:67:39:d5:b9:cc:a8:
                    53:4f:e3:c7:ca:f5:32:d3:7e:79:34:71:e4:60:c9:
                    b0:38:a8:1f:3f:0e:4f:1e:84:bf:ea:f8:78:18:aa:
                    64:9d:bd:9b:65:04:8d:2d:ed:5d:84:52:ff:44:0f:
                    42:39:85:a3:88:83:f7:61:e9:2a:e3:f7:45:6e:84:
                    28:b6:eb:63:9d:7b:1f:a6:da:a0:f6:72:36:a0:a4:
                    0e:e2:ab:ac:ad:4f:80:e3:d7:3e:42:c5:72:4a:fc:
                    a1:46:2f:2d:b3:02:4a:6b:e2:09:67:23:b3:68:54:
                    07:5b:9d:6a:9f:fe:2b:da:bb:a7:21:f7:f1:f7:e2:
                    f3:d6:a7:0f:20:69:fa:50:63:ad:42:d3:fa:ec:7b:
                    86:72:05:53:18:dd:a7:f9:88:5c:c8:09:be:a1:26:
                    79:cc:3c:a4:df:a2:5e:d3:a3:61:71:f2:58:09:99:
                    96:16:7d:68:72:b8:38:71:7e:06:e5:a8:7c:ba:94:
                    f9:6e:09:5f:f2:1a:60:b5:c2:b8:3a:e9:40:93:4f:
                    49:bb:a2:51:8d:0f:fe:d1:5d:5a:10:85:34:df:01:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:C3:7C:19:D9:C6:68:FC:F6:82:AB:E1:72:2B:A0:99:50:B6:4C
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:98:9e:85:8e:fe:69:f6:6c:c2:85:f7:45:25:fd:19:8b:65:
         9a:d3:8b:1e:fe:25:c2:56:a5:7b:60:71:f5:e2:84:1c:59:73:
         77:c7:28:ef:51:cf:34:d3:4c:fc:8d:c9:62:4c:b2:59:dd:a2:
         d3:de:1e:fc:f6:8d:17:5a:6b:da:a9:be:24:a5:d0:47:44:b3:
         28:87:cc:7b:48:43:dc:95:f2:7d:83:e9:e2:90:fb:c2:f2:6a:
         c8:f8:cf:d2:8a:64:80:97:73:e7:aa:e8:ac:a4:9f:e5:a0:8d:
         c9:ea:3f:53:f0:94:b7:ef:05:c0:9e:1a:14:4d:51:00:b5:5a:
         3e:f0:20:63:68:59:10:f5:cf:31:bb:67:30:9e:63:bd:10:9e:
         d5:5a:08:f3:be:0f:65:f7:03:69:7f:17:b4:ae:f3:bb:bd:39:
         84:e1:38:d2:08:83:91:5d:6f:fb:4e:49:f7:82:b3:44:9d:09:
         91:a1:2c:11:5e:91:c0:c1:94:57:e8:32:5b:ce:3d:2e:62:bc:
         8c:49:a2:d4:67:13:07:ac:46:c8:3d:9d:d1:b4:06:5e:28:d7:
         08:95:ab:aa:e0:07:85:cf:30:4b:7b:bf:2c:c5:84:4d:35:cd:
         6d:9a:82:58:08:85:12:00:d5:ba:aa:84:4c:f1:e2:3d:fb:8e:
         9a:7c:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 23:13:11 2026 by rpki-client