Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          UKlRt8XTS9EQw1daPFYd2s4EMpBLkNSpBUp/kwV2J5o=
Subject key identifier:   24:8C:67:23:E3:41:CA:C7:1D:71:60:35:0B:A1:47:BF:9C:A5:CD:9E
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1069F7B2C7D9FC12C6C8402E599FB66C4B672B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03EE
Signing time:             Sat 09 May 2026 14:59:17 +0000
Manifest this update:     Sat 09 May 2026 14:54:17 +0000
Manifest next update:     Sun 10 May 2026 15:08:17 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: hkdFhhWFxsmyP7bIs2Pr9yVEBFGdEbnPgmZKOo7DHLY=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 15:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:69:f7:b2:c7:d9:fc:12:c6:c8:40:2e:59:9f:b6:6c:4b:67:2b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: May  9 14:54:17 2026 GMT
            Not After : May 10 15:08:17 2026 GMT
        Subject: CN=248C6723E341CAC71D7160350BA147BF9CA5CD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:6d:c0:ea:dd:ec:c8:c9:84:d6:48:99:b2:
                    49:cf:5e:a4:a3:06:8a:c5:77:a4:9b:19:59:8c:0d:
                    b8:5b:33:1b:fc:f5:70:ae:d4:ad:cf:5c:63:6d:ec:
                    65:33:3b:78:85:14:ed:96:ed:d0:16:f5:c7:4f:48:
                    59:1f:f0:e7:e4:c4:8c:d2:66:0a:08:93:18:0f:ec:
                    ce:ce:b9:79:f9:82:ad:80:3c:8e:7f:1d:dd:4b:34:
                    0d:f8:c9:45:a5:14:22:f3:c7:0d:7a:9e:42:b7:30:
                    38:63:49:ad:5d:a9:5c:f8:a1:a3:46:d7:b9:4c:13:
                    57:a7:e4:09:94:48:ba:6e:92:44:62:75:64:3c:eb:
                    44:b1:97:2c:10:75:2b:80:ec:8c:bc:b2:b7:31:fe:
                    2d:51:71:97:79:a2:4e:ad:e2:27:93:41:6b:f5:c6:
                    76:fe:9e:32:e4:10:e9:e5:5c:40:ff:de:91:eb:38:
                    3c:75:b5:61:19:35:46:e6:3d:7c:9e:b8:93:42:77:
                    cf:82:be:b1:ac:61:13:7a:04:47:e4:17:dd:f6:6b:
                    1d:c0:59:bc:b6:af:40:dc:90:5b:5c:79:c8:4f:b0:
                    3d:9f:bf:16:16:a1:8d:dd:3b:3c:59:07:35:97:47:
                    fc:d8:82:c2:97:b3:1b:21:c2:d9:be:e3:e2:5d:a4:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8C:67:23:E3:41:CA:C7:1D:71:60:35:0B:A1:47:BF:9C:A5:CD:9E
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:44:e4:1c:ba:28:14:81:3c:7c:08:bd:b2:74:6e:a2:10:
         59:92:74:41:46:8e:4d:ce:54:d3:97:46:01:46:1f:dc:6b:dc:
         1f:dd:b4:8a:3b:8a:e4:6b:25:5f:89:cf:6d:3d:40:da:5a:23:
         80:19:21:de:5f:9f:3a:16:66:80:4e:d9:1c:38:82:4a:a4:01:
         e8:a4:38:36:dc:85:ff:11:72:a1:c6:23:b7:d7:54:62:90:cd:
         5e:57:79:fd:2a:fb:d5:34:27:99:7d:fb:62:2c:19:9d:82:8e:
         ab:d3:12:8a:59:c6:0f:42:19:a2:7e:6c:49:ca:ee:dc:49:8d:
         ec:f8:4c:9c:9a:3c:62:96:78:8a:51:f9:79:29:47:54:ae:80:
         53:06:bb:06:b4:fc:8a:44:e2:da:d9:8a:7e:de:0c:6a:96:08:
         07:d1:ba:14:9b:15:c8:90:ab:5e:03:aa:df:20:dd:b3:ed:81:
         2e:62:d9:e6:24:82:7c:b8:e5:bb:6e:44:d2:42:66:0d:d7:90:
         e4:a0:bc:45:bb:76:2f:5b:0b:e9:b1:8f:39:85:41:56:43:cd:
         a7:b0:b6:0a:33:a6:f2:fe:0b:d1:79:95:ce:c4:5e:24:ee:1d:
         b2:4f:2d:56:7e:f4:dc:f4:10:26:75:b3:04:d5:de:bf:70:86:
         61:46:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 00:52:11 2026 by rpki-client