Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          fjA8ElhWCLtzVXVZ0UuQgOlBQIcDXRA+YuSoYZC0Yew=
Subject key identifier:   85:9C:20:93:38:F2:F1:68:98:D2:1A:8B:5C:B1:B2:AC:25:BC:A5:2E
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       0D2B77F96027CED3EA7C3AD6BC406F973130CBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0432
Signing time:             Sun 28 Jun 2026 21:48:01 +0000
Manifest this update:     Sun 28 Jun 2026 21:43:01 +0000
Manifest next update:     Tue 30 Jun 2026 01:23:01 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: kLD2Psy1Hzdyl1L0nIdj9O+6ZkVGExUdAE7TMLcdqzk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 22:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2b:77:f9:60:27:ce:d3:ea:7c:3a:d6:bc:40:6f:97:31:30:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun 28 21:43:01 2026 GMT
            Not After : Jun 30 01:23:01 2026 GMT
        Subject: CN=859C209338F2F16898D21A8B5CB1B2AC25BCA52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:39:d8:18:79:83:55:66:09:20:93:b5:40:
                    35:bc:5c:b0:4f:62:e5:9e:8a:29:25:2e:ed:e0:0e:
                    b0:42:51:b6:2e:15:92:29:11:b9:fc:f4:86:da:b8:
                    97:fb:23:df:b5:22:ec:df:ec:09:de:1e:0b:1e:0b:
                    f9:0d:9f:46:93:8c:9a:ce:14:5f:67:9f:b7:2b:a1:
                    f2:23:e3:0a:97:e1:5b:bb:0e:3b:ef:5f:a7:12:45:
                    06:32:fd:2d:e1:ff:af:3c:14:8b:f0:47:3d:cc:3d:
                    10:fe:8a:2d:69:03:6a:47:1d:72:a8:ac:9a:20:24:
                    2e:12:b9:cb:5f:a6:94:29:5a:69:4b:1a:b7:fe:89:
                    a4:19:d4:47:ff:e6:00:44:41:67:dd:d8:6f:c8:00:
                    dc:df:64:c4:3d:86:90:7b:89:98:7d:1a:db:2c:1c:
                    53:63:aa:8d:d5:06:4a:9c:ae:d5:f8:88:64:aa:b9:
                    9c:15:b6:ad:03:d0:06:ee:aa:77:c5:b1:7a:f5:cc:
                    c2:dc:a8:e8:08:78:b4:60:42:77:36:71:3e:d0:ce:
                    68:ed:ff:83:fc:a0:32:1d:ab:1e:96:b6:21:c3:65:
                    b5:c7:dc:bb:17:d3:00:67:4e:20:bf:51:21:b8:c2:
                    7d:97:fa:97:38:07:f3:1d:84:b7:6a:01:ce:e7:31:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9C:20:93:38:F2:F1:68:98:D2:1A:8B:5C:B1:B2:AC:25:BC:A5:2E
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e4:41:6d:2a:68:30:8d:cb:0e:5d:1a:cb:9f:a4:7f:4d:36:
         38:03:38:6e:50:6c:df:22:7b:39:72:88:28:b3:3f:b5:cf:c4:
         b4:59:b7:7a:40:7c:5d:ca:79:45:3f:65:a9:c5:71:ae:b8:bc:
         72:7c:b2:6c:fc:c8:61:f4:44:c8:0d:7a:93:18:2c:2e:f8:17:
         d5:16:92:23:6f:c7:03:04:0d:4f:69:dd:ea:c0:8e:7d:14:f3:
         b3:b0:23:0f:15:3f:d7:3f:58:df:52:02:65:1e:aa:ef:fa:a8:
         4f:92:42:ed:ae:f5:ec:0d:17:f4:29:25:28:6e:50:69:9e:f3:
         a9:f5:aa:7d:df:7e:a4:c5:81:81:b5:e8:7a:b5:04:cb:26:c7:
         fe:a1:87:d0:d2:59:c8:c0:66:67:b7:14:24:16:10:72:e0:db:
         58:ba:e3:f3:0f:a3:51:c3:09:6a:35:b8:1c:e9:56:72:4f:5e:
         93:28:a1:ed:15:66:5e:b5:60:03:3e:05:84:8f:84:15:9b:fd:
         4d:4a:ae:59:6b:e6:ef:78:a4:6b:c0:9e:01:38:ef:62:87:ec:
         3a:8e:0e:81:45:20:46:26:b8:29:b1:d6:80:4c:21:98:ee:bd:
         41:44:b3:24:99:f3:57:bc:4b:30:d3:28:d8:8d:c9:d5:37:70:
         06:3b:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 05:33:49 2026 by rpki-client