Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          zrhP4+rvgHMr8UOhIGme3m8I1x0mRCxSevWmG2IFsN8=
Subject key identifier:   0A:80:AC:B2:27:53:47:7F:37:19:AE:72:28:65:BD:86:48:B7:22:D3
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       136786DC6BAE7AABD0CFC9215C85499A709AA94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04E6
Signing time:             Sun 08 Nov 2026 08:43:23 +0000
Manifest this update:     Sun 08 Nov 2026 08:38:23 +0000
Manifest next update:     Mon 09 Nov 2026 09:54:23 +0000
Files and hashes:         1: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: hZfrQKEH2fItnwwNxrghL2op9m2Sy7HmlFiXdH3j9ho=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Nov 2026 09:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:86:dc:6b:ae:7a:ab:d0:cf:c9:21:5c:85:49:9a:70:9a:a9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  8 08:38:23 2026 GMT
            Not After : Nov  9 09:54:23 2026 GMT
        Subject: CN=0A80ACB22753477F3719AE722865BD8648B722D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:52:74:35:6e:7d:c6:f2:55:3e:a4:1f:7a:6b:
                    11:d9:02:a7:07:01:12:97:b5:6f:f1:e9:65:ef:25:
                    3b:53:6a:6f:fa:fd:e9:79:8b:4c:0a:30:c2:5c:62:
                    05:65:8a:56:27:c3:62:f8:71:f5:8a:04:bc:dd:cc:
                    31:a9:07:f9:43:8a:6e:f2:5b:77:7b:20:57:02:f4:
                    e1:5a:58:ef:a8:cf:7c:83:41:ea:d7:b1:95:60:3d:
                    5e:50:db:4b:83:ea:ad:30:97:d3:b2:77:2c:7d:a5:
                    e0:85:76:da:ba:58:db:0f:f4:87:d5:91:48:e0:16:
                    7a:50:34:c1:43:5a:0d:8d:3f:54:3c:6f:81:81:47:
                    d5:ff:c0:03:2b:56:e1:bd:a9:bd:22:ff:52:2e:20:
                    5e:e2:8a:5a:d2:62:19:71:57:db:3d:24:dd:84:31:
                    eb:7b:08:b0:05:dc:48:3a:ce:51:c3:f5:b7:e0:8c:
                    9b:c4:4f:9b:2c:39:e9:f3:bd:7d:32:b3:cc:a2:57:
                    1e:b8:2e:38:88:95:db:31:4e:ae:87:25:ed:aa:44:
                    39:e6:bd:07:4a:1c:52:16:23:70:33:a4:93:15:82:
                    62:5f:23:32:8d:ed:44:00:fb:cb:e5:0c:f2:2c:b6:
                    d1:c8:89:df:ff:6d:44:a2:05:d2:63:d8:d5:a6:2b:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:80:AC:B2:27:53:47:7F:37:19:AE:72:28:65:BD:86:48:B7:22:D3
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:83:50:16:b9:fd:ba:0e:c3:86:c6:56:e7:ad:bf:e7:82:29:
         5c:83:d4:5e:e2:e7:f9:0a:6b:69:0d:69:79:e5:89:10:89:ce:
         6d:2e:4a:d6:ac:46:5e:f0:c1:9f:72:67:ff:5a:2f:0f:d0:5d:
         f6:ff:e1:78:4f:78:9c:6e:53:da:d2:c2:e0:42:50:97:28:0d:
         8a:a0:86:f7:7c:b1:de:e3:c0:8a:44:93:f2:04:1c:41:af:0a:
         69:9e:04:16:a1:b3:65:70:c1:2b:7d:c1:14:18:9e:b4:5f:35:
         c8:d8:00:98:07:74:5c:c9:90:e3:77:a2:d7:82:1f:f9:43:87:
         3e:11:2d:2e:9e:7c:0d:50:93:c4:f0:3c:92:8e:f5:b2:82:4b:
         e3:e1:7e:67:f2:e2:f2:94:7d:b5:5d:67:36:af:3b:2d:03:7d:
         91:f4:ec:12:03:fb:e1:19:75:c2:2e:03:91:45:82:3c:f1:5d:
         fc:bf:38:da:eb:7b:df:3d:52:7a:df:2a:f0:33:08:7a:a9:10:
         a1:34:a4:50:28:ca:5d:21:3d:28:33:f5:6a:af:97:8a:20:ee:
         58:7b:97:86:3b:3c:98:18:50:14:63:fe:c7:2b:5a:c6:02:2d:
         c5:2a:9d:3d:1d:9f:b9:d5:7a:e8:8d:02:9b:c2:72:a6:a3:f1:
         37:12:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 07:51:39 2026 by rpki-client