Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          mVvs+VDFTVo78LXDKmZUcOhHtLwZTEZIHrNhCZkV/vg=
Subject key identifier:   09:C1:48:9A:C1:53:85:7E:8B:B0:85:14:B4:FC:94:EA:CA:67:E1:B6
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       2341A31AA3F61EC7AE3AFC1D7CAB06D2AFB11DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04B5
Signing time:             Sun 04 Oct 2026 12:44:13 +0000
Manifest this update:     Sun 04 Oct 2026 12:39:13 +0000
Manifest next update:     Mon 05 Oct 2026 13:48:13 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: ftFurM9GETQo+SHqRGPfB8RaVX0cXpbQynxxVI11wj0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:41:a3:1a:a3:f6:1e:c7:ae:3a:fc:1d:7c:ab:06:d2:af:b1:1d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct  4 12:39:13 2026 GMT
            Not After : Oct  5 13:48:13 2026 GMT
        Subject: CN=09C1489AC153857E8BB08514B4FC94EACA67E1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:83:be:34:ee:18:e7:88:63:6c:85:db:1e:
                    93:27:cc:b5:3f:1a:b2:2a:e4:f0:e2:18:15:d2:3d:
                    16:02:42:7b:e8:e5:34:24:88:12:03:8b:37:10:c6:
                    b3:73:a1:6a:10:52:ef:cb:07:c4:28:e6:8a:e1:a3:
                    20:e7:04:85:59:dc:c5:54:b5:b0:6b:3c:f1:36:4b:
                    60:8d:89:35:ee:f4:6d:92:da:c0:e3:ab:08:3c:af:
                    99:98:5e:8e:8f:99:91:21:45:c3:a1:c3:62:4d:1c:
                    bd:e8:a5:ea:49:a5:91:3a:f0:7c:7e:38:e4:19:3a:
                    32:3e:96:93:36:cb:70:b7:54:ec:1c:be:d3:ac:50:
                    bb:b7:7d:98:2c:bb:d5:3c:12:a8:87:7f:e2:cc:16:
                    35:7c:20:47:3d:99:38:cd:af:3c:7d:1a:b7:48:8e:
                    66:c8:92:62:9e:fd:75:e5:a7:25:c8:bf:2d:87:91:
                    c7:05:d9:9f:3f:75:40:f4:59:84:38:70:88:c3:08:
                    a2:e8:ec:01:a2:6b:8f:8c:ea:8f:c7:02:6f:fc:01:
                    fe:10:91:8c:a4:f8:0a:63:26:99:10:6e:3d:f6:f1:
                    45:68:a5:fd:d9:9a:ba:3d:02:ae:9a:15:1f:08:fe:
                    87:20:77:77:a6:f3:3f:cc:2f:ef:b3:60:7a:64:9f:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C1:48:9A:C1:53:85:7E:8B:B0:85:14:B4:FC:94:EA:CA:67:E1:B6
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:c2:08:c0:20:de:5b:a9:01:c4:4a:dd:2e:65:6a:af:26:
         d4:59:97:8f:92:bb:36:e2:e0:16:8d:2d:c7:57:d6:86:d1:fe:
         1d:89:be:bd:40:09:ab:d7:19:1b:6b:02:93:74:42:7f:64:38:
         1e:35:09:5c:cc:0b:f1:67:43:21:1c:3f:d6:2f:53:71:6c:aa:
         9c:87:bb:ff:42:02:25:8c:61:80:ed:77:b4:f6:b4:15:90:60:
         dc:1c:72:b9:cb:61:53:2b:0d:9b:e4:fb:89:13:e2:8f:73:b9:
         93:62:ae:a7:98:1a:3f:c8:97:7c:e1:6f:05:e5:87:db:9c:72:
         50:65:ca:9c:bb:fd:ca:19:21:0a:e5:70:bb:fb:b1:d0:7f:c2:
         01:06:2a:82:0d:57:ed:72:fb:a7:1d:fc:73:37:c8:8f:b9:9b:
         3b:1c:8c:c2:41:c3:0c:c0:37:90:67:f9:d2:7d:38:85:2b:ec:
         7e:9e:53:4d:85:80:46:12:58:6a:72:8a:07:ff:25:a8:ec:f9:
         48:a1:70:5e:50:e8:83:0e:36:11:30:26:2f:0b:5b:54:1a:3f:
         5b:a0:31:0d:5a:7d:7d:45:fe:7b:d3:2e:6f:31:48:49:a5:de:
         2c:47:71:c5:e5:32:89:67:4d:09:a2:55:2c:82:e8:1b:c3:3e:
         04:36:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:02 2026 by rpki-client