Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          k2fY+HtPWfLNDJNXoV4j4TfPn3OFpfPzLKiWLDK4MNI=
Subject key identifier:   47:FC:F7:26:78:1A:54:DB:36:ED:7D:DC:E8:94:9A:2F:DF:73:E0:87
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       65F27491D36F00596BD0B4ACFA5FEEB47F8F2416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04EF
Signing time:             Sun 15 Nov 2026 00:33:24 +0000
Manifest this update:     Sun 15 Nov 2026 00:28:24 +0000
Manifest next update:     Mon 16 Nov 2026 03:17:24 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: ze4GM7/ouFgd8eyOERAIAiw01n7JJowT7Y6qDXeN8rQ=)
                          2: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f2:74:91:d3:6f:00:59:6b:d0:b4:ac:fa:5f:ee:b4:7f:8f:24:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov 15 00:28:24 2026 GMT
            Not After : Nov 16 03:17:24 2026 GMT
        Subject: CN=47FCF726781A54DB36ED7DDCE8949A2FDF73E087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:fe:1e:78:ca:ef:cd:ac:2d:6e:69:79:66:
                    4e:10:f7:d3:40:6a:6e:81:d9:3d:0f:92:99:b7:ca:
                    ed:45:68:42:74:8b:e3:a6:09:31:92:12:14:c1:c0:
                    cb:74:b1:0c:20:bf:f3:1f:d1:41:5a:fe:45:ae:23:
                    b7:9d:ba:be:f8:4e:36:34:80:64:da:48:70:e3:a9:
                    fb:81:03:d7:c6:fc:8a:0e:10:bd:5e:66:98:1f:7d:
                    27:18:a6:6e:d0:b0:60:a6:2b:04:73:58:76:19:53:
                    9f:49:36:7e:03:a9:17:41:ef:7d:0f:f6:77:02:a0:
                    8d:15:a0:46:2a:12:d7:dc:66:28:19:48:ef:b3:a1:
                    29:2a:a7:d0:d7:31:83:75:cc:d4:92:2c:53:fe:6f:
                    73:27:55:2f:e3:c7:3d:42:93:a9:30:af:eb:18:03:
                    e5:23:72:99:e3:81:e0:16:70:c0:a9:91:68:a8:a3:
                    d6:c7:75:f4:92:88:59:60:df:1c:f8:8f:f8:28:a1:
                    1a:a2:3c:b1:19:43:98:41:45:e6:4b:44:79:50:28:
                    4d:d6:8d:37:65:93:d1:e1:56:7a:bd:86:5b:e4:5b:
                    30:3c:4e:7e:c0:74:40:eb:fa:a9:ef:c1:73:6e:47:
                    5e:e9:29:0d:24:02:3b:41:bb:72:40:83:97:07:3c:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FC:F7:26:78:1A:54:DB:36:ED:7D:DC:E8:94:9A:2F:DF:73:E0:87
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:7f:9c:86:1f:4e:92:54:4d:27:34:7a:cd:d9:27:8e:8e:
         ee:8e:61:a9:bf:99:3f:da:fd:dd:69:55:99:01:54:ea:4c:19:
         82:01:48:e6:d3:4c:3e:0a:1e:26:2f:f0:a8:41:51:30:55:9f:
         ae:cc:42:e8:71:1e:f6:9f:44:98:66:77:21:aa:8a:d1:31:ea:
         87:e8:03:b1:bc:ba:e0:e5:46:71:95:ef:11:2b:63:09:aa:77:
         93:2f:fb:da:f2:ef:35:4d:fb:06:d1:8a:54:6d:d9:6c:c5:dc:
         e3:b3:a1:4e:c4:0c:af:26:b7:b0:b9:01:9f:41:1b:36:90:da:
         f1:39:ca:10:17:57:56:8b:e6:e0:c7:39:2d:c3:2d:23:45:cb:
         41:07:17:92:e5:18:c4:02:69:c3:64:83:1c:1e:f9:37:0c:9e:
         b2:82:58:98:81:c9:c9:39:4c:63:f3:12:3e:9a:72:dc:6d:cd:
         ae:e2:14:ca:bb:68:68:c4:30:96:1f:0a:58:e3:6f:15:1f:fb:
         1e:69:1f:80:82:24:55:cb:56:61:48:b9:05:16:db:d2:42:4c:
         9c:df:00:35:ed:b0:fc:da:8e:9a:8c:f9:81:de:56:82:24:cf:
         94:94:77:0e:2e:0e:a6:08:b9:57:de:42:5c:91:c2:74:e3:c9:
         a3:5a:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:20 2026 by rpki-client