Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          kvm8DcHSlugeCkOmY5CsFnpCY3Eq1EHPO5GEgyfYTH4=
Subject key identifier:   5D:0D:87:8D:3B:0B:C7:9D:05:DB:79:21:45:E6:82:80:7C:B6:9B:C4
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       657BF0C49E8229A7A1EE8280CC927D36A1E38E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          048A
Signing time:             Thu 03 Sep 2026 07:34:00 +0000
Manifest this update:     Thu 03 Sep 2026 07:29:00 +0000
Manifest next update:     Fri 04 Sep 2026 07:55:00 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: Zht7k720j5skv/gS3D6oMW9rTheY9kMmGmASHgz+8m0=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 07:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:f0:c4:9e:82:29:a7:a1:ee:82:80:cc:92:7d:36:a1:e3:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep  3 07:29:00 2026 GMT
            Not After : Sep  4 07:55:00 2026 GMT
        Subject: CN=5D0D878D3B0BC79D05DB792145E682807CB69BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:13:64:0d:b7:92:90:7e:82:d4:21:71:31:
                    02:6a:36:cc:e5:d1:22:2e:e9:99:ea:c5:ac:7c:cf:
                    33:b7:5f:f3:50:f5:df:6d:a5:7f:94:2a:f9:b5:37:
                    8a:fc:51:e5:a7:42:19:70:a4:51:30:6f:91:93:d7:
                    36:f4:75:68:b7:15:e0:a3:d3:3a:98:a9:4f:3a:c0:
                    37:75:f2:ec:43:1d:bc:8c:f0:b4:34:c5:1b:df:3b:
                    e1:8e:b3:ac:53:d8:28:0e:e8:1c:90:53:71:b1:a5:
                    be:7b:a5:11:d6:7e:ac:2a:83:0f:50:be:01:8d:e9:
                    1e:31:78:0f:de:a6:48:96:d8:23:f4:15:c9:83:40:
                    fc:d9:03:95:61:59:96:de:37:cf:bf:eb:c7:1d:7f:
                    47:4f:a5:90:b4:b2:95:df:08:f0:f9:06:80:1b:80:
                    74:47:47:27:16:eb:55:12:1d:f9:a4:ea:13:bb:16:
                    1c:99:c7:e3:8f:14:8b:10:f9:0e:d4:a3:42:41:b6:
                    e9:60:40:2d:7d:a7:ca:a4:0d:b0:95:9b:6e:b5:6a:
                    e3:9b:46:5c:1e:ac:6a:22:bb:7c:54:9e:5f:0f:8a:
                    9a:77:6a:92:54:0c:3f:be:e9:44:d4:29:fb:23:69:
                    eb:91:ee:6a:93:be:0f:e4:33:60:48:c8:cd:d2:3d:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:87:8D:3B:0B:C7:9D:05:DB:79:21:45:E6:82:80:7C:B6:9B:C4
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:95:2e:ba:1e:7e:ab:78:ee:d1:d0:a1:3f:a5:87:ca:69:4a:
         c2:f1:75:f1:a6:e8:05:7d:28:a9:cd:1c:d6:d5:6d:e4:bc:01:
         75:d1:1c:06:90:25:d4:8b:fd:1f:13:4a:15:cb:e5:e4:3e:37:
         79:22:dc:89:70:40:12:07:77:45:00:79:13:a3:1f:2b:45:4c:
         c9:48:7c:a1:c7:6a:7f:ba:99:0e:92:ec:03:c4:83:1b:31:b4:
         2d:05:95:15:46:a6:1a:61:26:b8:b8:fd:7f:e2:d1:78:76:52:
         76:96:16:70:2a:c3:89:d7:94:22:99:42:2d:b4:6b:a6:4d:4f:
         9b:fa:d9:47:24:8d:b2:69:cd:c5:7f:8c:49:b0:78:e2:3a:8e:
         6a:36:a0:6b:fd:ef:c9:73:fe:a0:91:00:ab:0c:c7:7f:aa:1d:
         89:c5:c1:64:b7:38:30:c7:e7:80:c2:67:9d:ef:00:db:91:80:
         41:13:83:38:eb:3c:c1:5d:7b:81:76:ce:c6:64:7e:ad:e4:8b:
         d7:a9:9b:d7:03:22:b0:78:fb:74:21:4b:3d:83:e3:2a:6e:51:
         5e:2e:42:ff:82:e1:eb:e4:09:fb:c8:c0:48:a0:20:92:5d:63:
         f6:f2:af:ad:26:2a:34:a1:23:34:41:6d:21:ae:2b:bd:89:d7:
         70:16:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:22:33 2026 by rpki-client