Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          34i3QO8KymLs3V5WZjWxy54hJhiBkvuOycT6DHI8v0s=
Subject key identifier:   7A:B5:59:CD:31:FB:94:8A:4A:28:59:33:AE:F9:27:C8:07:CF:C4:70
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       191E1FC3289B3080BE887F89FDAB887314EDB611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0494
Signing time:             Thu 10 Sep 2026 17:49:02 +0000
Manifest this update:     Thu 10 Sep 2026 17:44:02 +0000
Manifest next update:     Fri 11 Sep 2026 18:39:02 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: EKxkVA/egE/PC/9U6KoWIpcs/2XRqWQrYVTw836+BaY=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1e:1f:c3:28:9b:30:80:be:88:7f:89:fd:ab:88:73:14:ed:b6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 10 17:44:02 2026 GMT
            Not After : Sep 11 18:39:02 2026 GMT
        Subject: CN=7AB559CD31FB948A4A285933AEF927C807CFC470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:fb:6d:76:6f:75:21:cd:46:8e:31:52:fe:
                    6b:5c:c2:ea:3c:0a:57:f8:10:ee:43:36:a8:32:65:
                    69:1e:89:5f:d3:6f:59:6b:88:4e:92:ff:ff:38:ce:
                    63:d8:28:49:0d:6a:2c:a6:61:ef:c1:08:51:f7:83:
                    ed:d8:55:8d:f7:6a:34:e6:fc:b8:cd:92:fc:2f:c1:
                    67:9e:c3:47:2b:f8:df:83:fd:2f:f8:13:e5:5e:b1:
                    8c:56:d1:51:23:c5:62:cd:50:c3:de:55:f1:35:9c:
                    8c:ef:c9:7b:6d:7d:b7:11:f4:ef:69:fc:35:f1:e0:
                    55:fc:cd:4b:07:1c:a7:b0:65:05:29:bf:93:5a:60:
                    f8:e2:76:13:31:75:b9:ac:48:db:2b:d7:29:cd:5a:
                    90:51:75:52:d7:1f:b7:cf:1c:e9:32:97:99:6f:3c:
                    20:20:eb:05:63:9d:f2:22:4c:ab:db:2f:69:e7:d6:
                    9b:04:e1:e3:5c:01:69:2a:97:00:fd:ab:bc:2b:b7:
                    6b:cc:a4:ea:f0:ed:0c:a1:74:96:4d:89:68:c0:b9:
                    e3:df:4e:e0:33:51:a5:0e:30:00:95:a4:7f:2d:22:
                    20:57:63:b8:b3:cf:d5:3d:59:bb:48:c9:1e:74:81:
                    f5:0b:a8:a3:ba:19:b0:1b:8e:30:23:c1:b5:fd:be:
                    82:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:59:CD:31:FB:94:8A:4A:28:59:33:AE:F9:27:C8:07:CF:C4:70
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d0:00:2c:c8:81:db:4f:33:01:b8:45:b9:57:df:67:9b:1f:
         ee:19:f8:b5:8f:8d:13:e2:87:a2:2d:62:ac:92:2d:f6:47:6e:
         11:e2:37:f1:0b:17:91:d7:9f:f0:36:9d:bf:32:bc:03:72:31:
         23:77:e9:fb:5d:74:12:8c:1a:0e:97:7c:a8:dd:69:1b:3c:9b:
         51:27:f2:dc:bd:a5:88:ff:56:42:28:73:78:96:1b:69:d1:01:
         34:bd:62:87:a5:6b:e6:f4:81:be:3f:80:c4:0f:fd:0e:98:a2:
         06:9c:63:f2:e7:7f:4e:cd:b4:08:5b:62:7b:11:9f:df:d8:38:
         f8:c2:22:b0:06:e2:61:3c:33:de:14:e3:54:9a:08:5f:a8:55:
         2d:1a:c4:e6:bc:00:40:f7:14:b0:3d:98:32:59:bc:ce:1f:da:
         60:ce:5f:3e:6b:2c:a6:16:da:7e:3c:5d:bf:5c:f5:f5:5f:ba:
         5a:67:ab:38:1c:fb:66:73:db:6e:99:ed:0a:bf:69:05:38:b5:
         24:10:68:f9:11:f6:98:e2:0f:ce:2a:db:7c:4d:e0:9e:68:7d:
         be:c2:2d:39:e3:33:a6:40:ff:e5:c5:19:7a:f4:dc:e8:62:00:
         8c:96:3b:13:70:66:46:ee:36:48:a6:03:ca:2a:c1:c5:73:ca:
         d5:64:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:02:13 2026 by rpki-client