Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          EZRebM4fc5n3kdYv2+PoKQIbs2ayKe1cuwfZE/PVs5c=
Subject key identifier:   BF:E1:10:37:C9:48:3C:E2:2C:98:35:84:ED:FF:3A:08:44:E0:E6:57
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       24478FC2E8230AB89AF974672FBAA0544DA9FEBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          043C
Signing time:             Mon 06 Jul 2026 13:58:03 +0000
Manifest this update:     Mon 06 Jul 2026 13:53:03 +0000
Manifest next update:     Tue 07 Jul 2026 17:07:03 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: oCl6PpnHjKg/q6hambBwhUr/MTSlHQjJP6Cq9FoC6lw=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:8f:c2:e8:23:0a:b8:9a:f9:74:67:2f:ba:a0:54:4d:a9:fe:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jul  6 13:53:03 2026 GMT
            Not After : Jul  7 17:07:03 2026 GMT
        Subject: CN=BFE11037C9483CE22C983584EDFF3A0844E0E657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:80:3f:26:2b:86:be:8b:70:56:b6:46:c1:
                    5a:c0:ee:69:4c:59:d6:6f:7d:db:68:4b:69:76:31:
                    0f:44:1d:7b:1f:33:f6:0e:f4:05:a8:bb:ec:5c:e7:
                    92:dc:cd:2d:ed:d1:ca:9e:9f:65:e3:5f:e7:d3:af:
                    4d:58:c7:20:6b:21:67:16:39:67:39:e6:99:14:bf:
                    ca:1f:e6:d1:84:13:1c:8d:3d:1d:ba:dc:c2:0d:f5:
                    49:f3:66:fb:5a:a1:35:95:50:88:4b:f5:18:dd:1f:
                    8a:7d:90:82:22:81:43:bc:1f:31:62:30:08:c5:ed:
                    0c:55:d5:5e:72:0d:78:a6:af:2b:c1:a9:cf:3c:76:
                    a9:f6:54:a3:dc:27:af:d3:1d:df:13:44:97:9a:0a:
                    a4:0d:c9:84:be:3a:cd:bf:c5:75:a9:df:a6:dc:e5:
                    1d:14:ac:43:e0:4d:80:75:96:fe:ba:d9:c0:5a:c8:
                    09:c0:ec:30:0c:b7:90:04:bf:df:a5:b7:f1:d4:0f:
                    ae:c0:69:11:5f:37:03:77:79:04:92:71:a8:95:25:
                    07:76:44:a8:a5:e4:3a:3c:20:a1:06:82:c9:12:9b:
                    9d:09:94:57:d4:6d:40:8e:11:be:25:b3:b0:19:48:
                    3b:11:3f:8c:de:c5:f1:60:f6:33:c5:2d:d9:87:34:
                    5e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E1:10:37:C9:48:3C:E2:2C:98:35:84:ED:FF:3A:08:44:E0:E6:57
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:33:2e:32:6c:4a:10:f3:5b:77:85:63:e8:5e:1f:74:38:
         97:38:55:59:5e:fe:1a:4f:30:e2:17:e3:b5:b0:e1:df:45:95:
         7e:26:17:a9:a0:56:34:cf:1a:c2:3d:cc:61:18:10:dd:86:8b:
         b0:7e:74:71:b8:2c:d7:29:f7:73:05:ec:f8:d0:92:2a:b2:41:
         8d:e3:e1:73:d6:e9:6c:01:dd:d6:40:42:f5:b6:02:4d:e7:76:
         c2:a5:fa:1d:46:d3:df:ff:ea:f4:65:7d:48:fd:1c:8b:c3:7f:
         51:93:39:7d:92:ac:8e:2a:4b:ff:cf:3b:33:61:b0:d3:71:cc:
         65:9e:f9:8b:5d:00:69:95:3e:f3:67:b6:df:52:91:90:7c:6f:
         01:75:16:05:41:04:ee:4a:2b:64:f9:a1:f0:05:63:64:b0:4c:
         46:19:82:d5:1a:c6:71:22:25:63:b8:fd:ee:b6:96:db:78:bd:
         a3:1f:56:8b:2b:6c:ee:56:35:db:e6:28:1f:81:d6:3e:42:fe:
         b4:9a:03:00:bb:da:27:ec:62:7a:d6:42:23:aa:02:b5:f3:a7:
         7d:77:fb:a0:47:cc:bf:d5:fa:f2:0e:4d:57:9c:06:4f:89:a7:
         42:50:b0:77:33:21:1e:5c:38:2c:d0:c9:f3:17:96:1d:77:e7:
         bf:be:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:16:49 2026 by rpki-client