Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          NG+NR+h5VOUbg9VhZba7N+t7PjEMwjZWuJ4UpbQPU6s=
Subject key identifier:   24:0C:30:BD:58:1B:8A:F1:21:17:C6:5B:E0:F6:BA:80:1B:0D:B8:93
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       761BD57C2C3F20C470C11FBF99C1D694D6505FF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          048F
Signing time:             Sun 06 Sep 2026 22:14:00 +0000
Manifest this update:     Sun 06 Sep 2026 22:09:00 +0000
Manifest next update:     Mon 07 Sep 2026 22:48:00 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: KHL3rOY0T2PABXefCsBwt9ERhDS4JE5qPy2XGK1vl3U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Sep 2026 22:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1b:d5:7c:2c:3f:20:c4:70:c1:1f:bf:99:c1:d6:94:d6:50:5f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep  6 22:09:00 2026 GMT
            Not After : Sep  7 22:48:00 2026 GMT
        Subject: CN=240C30BD581B8AF12117C65BE0F6BA801B0DB893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:97:b0:c1:63:54:17:8c:8e:56:3f:d7:e6:
                    88:ea:7b:a7:32:1d:f0:b8:be:94:dc:74:7a:19:1f:
                    0e:a3:60:0c:21:49:cd:19:01:9e:c0:45:c4:ef:87:
                    69:49:aa:5d:ad:d3:81:42:89:ed:32:64:c7:a2:1a:
                    68:6d:5b:6d:69:aa:47:33:53:92:36:42:cd:c3:8a:
                    af:46:47:92:a7:d2:c2:97:34:71:f9:7a:89:28:73:
                    2f:01:c0:c5:35:c9:bc:1b:96:6a:a6:10:de:69:f9:
                    f8:ad:fc:3f:f4:c3:5c:fd:07:22:00:49:ea:b8:b0:
                    3f:96:8c:cf:51:1e:1f:b4:cb:33:1e:bb:30:d3:07:
                    07:13:92:95:17:07:0c:ec:2b:06:89:14:e6:5f:fb:
                    b6:aa:ba:9b:4b:ad:92:cb:19:7c:69:14:59:9d:1f:
                    dc:01:1a:ff:8c:1b:4f:44:50:2e:a7:f6:cf:8c:95:
                    e5:2c:1e:a7:60:51:02:0b:57:55:b1:f3:4e:69:d4:
                    9d:78:9b:53:5e:75:e0:88:eb:02:65:1a:83:77:43:
                    44:ec:36:45:dc:da:22:75:27:ac:34:42:3c:9d:54:
                    1b:46:69:91:f0:5d:38:ec:ce:8b:4c:e9:a6:ef:3d:
                    c4:75:24:2c:e7:33:45:18:22:62:2d:af:d0:b4:6a:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:30:BD:58:1B:8A:F1:21:17:C6:5B:E0:F6:BA:80:1B:0D:B8:93
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:41:ce:46:e7:5c:ec:60:7f:76:4c:b6:3c:07:44:40:eb:65:
         fb:a0:9f:ef:bc:16:fe:54:81:42:8b:f1:a3:7c:76:23:5c:de:
         b4:97:19:78:46:2c:5c:35:0d:ab:5f:29:c5:30:ce:31:a7:68:
         cd:b8:0f:74:73:11:d7:30:14:6d:3c:7d:54:db:05:ca:12:de:
         26:48:14:97:98:c9:ac:65:99:f6:ce:3f:81:24:3a:20:a0:6b:
         b0:e8:3a:c0:9a:b2:ad:f5:34:46:fc:af:70:f1:ee:2c:de:08:
         ef:1c:f7:ac:4b:db:45:02:42:48:5f:4e:44:77:ed:6a:da:50:
         af:61:ce:ee:25:0b:47:a8:21:df:75:ad:01:5e:cd:b5:e7:d0:
         49:dd:07:d2:2c:47:75:30:04:c3:1d:db:42:b6:c7:3e:2c:ec:
         c5:d6:f0:d6:2e:43:eb:e5:c1:ba:8d:bb:12:32:d7:4e:06:6f:
         b9:01:33:4e:51:45:37:63:79:3a:c6:9c:f7:ce:88:5b:58:24:
         b6:5e:5b:5c:48:0d:06:12:47:ef:06:bc:dc:c2:f4:44:48:b7:
         e4:69:13:b8:b8:30:1e:3a:a0:29:b6:00:aa:ca:88:94:72:75:
         ea:08:43:12:42:95:c5:44:f3:ab:32:e5:0f:64:81:97:84:cf:
         a9:41:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 12:59:38 2026 by rpki-client