Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          qD5mGU4F1P3edbOU03qV9WmhFphVaqOZfOqeRjd9GHc=
Subject key identifier:   14:8C:57:CD:18:A2:84:46:D0:92:B4:4E:CA:03:19:7E:A0:56:FA:66
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4B0E6CFC57C8D7F32E9B67AFECFF80785DE9EAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0429
Signing time:             Mon 22 Jun 2026 00:52:57 +0000
Manifest this update:     Mon 22 Jun 2026 00:47:57 +0000
Manifest next update:     Tue 23 Jun 2026 01:27:57 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: ie28sIA1/xOmV+6XJmF8Xoi8LPugFpV/sAeLXC0r4Ow=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0e:6c:fc:57:c8:d7:f3:2e:9b:67:af:ec:ff:80:78:5d:e9:ea:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun 22 00:47:57 2026 GMT
            Not After : Jun 23 01:27:57 2026 GMT
        Subject: CN=148C57CD18A28446D092B44ECA03197EA056FA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:74:3f:7c:64:71:e0:4f:1c:c2:a0:8e:ad:
                    ae:a9:13:31:97:01:b6:a4:f7:0a:30:59:b6:9c:fc:
                    50:46:08:d2:66:02:1e:02:51:76:ee:57:48:36:26:
                    9f:a3:f4:62:80:b7:70:7e:53:ba:ef:69:36:5e:e8:
                    38:4a:48:aa:46:f4:0e:66:7f:52:53:ab:f7:ab:1a:
                    a2:bd:0c:5f:13:5a:00:aa:91:f3:b4:80:19:52:eb:
                    99:6f:e2:ea:ff:38:fb:85:97:ed:f0:1e:0c:db:5c:
                    a9:44:ca:75:be:bd:bb:13:a4:3f:dc:b1:9c:c3:1d:
                    cd:a5:19:2a:5f:9b:6a:b4:64:f0:01:78:cf:12:24:
                    d3:c2:dd:2c:40:3e:e8:20:c4:fe:5f:57:ff:0f:91:
                    59:0f:82:c5:d2:9f:72:13:2e:41:1f:96:e3:c8:6f:
                    24:93:a4:5c:a0:69:8a:9c:c9:3e:db:fd:34:d7:ab:
                    e6:18:71:28:49:56:68:7d:1d:99:a2:55:0a:ca:ab:
                    da:5e:32:50:60:7c:60:1d:21:77:e7:a7:b8:ae:45:
                    76:1f:8b:24:13:42:94:29:ee:36:c5:dd:5a:c0:49:
                    f9:82:59:ca:2c:5b:d2:db:0f:35:39:ec:b1:33:30:
                    38:a1:d5:c9:8a:41:00:23:eb:03:b5:1d:ba:3e:0a:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:57:CD:18:A2:84:46:D0:92:B4:4E:CA:03:19:7E:A0:56:FA:66
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:65:31:0a:e6:83:16:eb:1f:43:90:73:94:65:1e:3d:73:
         53:7f:ea:86:24:53:e9:8d:31:a3:bc:e6:b8:8a:be:02:0d:84:
         06:9d:50:b4:1e:67:e0:da:73:f5:96:bb:f4:32:85:fc:a3:8d:
         28:58:b2:8d:dd:b2:e7:19:6d:ba:6f:bd:ab:17:7f:11:0d:94:
         72:0e:75:95:f1:d2:64:89:39:f4:bb:0d:2b:bc:21:4c:9a:aa:
         41:a3:69:2a:38:b3:ac:76:a6:0a:39:ee:bb:d7:12:e7:65:fa:
         03:85:98:2d:b2:a8:a9:2d:d5:ab:d2:b8:5c:ef:86:25:04:da:
         cc:80:58:1d:a1:56:85:5c:a8:d5:45:7a:dd:13:a5:44:11:2c:
         aa:75:66:33:6e:6b:b2:4c:20:e2:1e:be:c9:c2:df:1f:03:ad:
         71:5f:33:c8:5b:2d:0b:c5:ef:9b:a9:3d:16:64:1f:d0:f0:d0:
         28:d3:0a:a8:88:09:25:50:28:25:d0:8c:33:d1:7f:38:2b:57:
         f7:ff:fb:f0:9e:68:f2:7c:d4:91:a7:01:24:b7:c1:64:d8:04:
         86:fc:e9:cd:69:5c:e9:fa:76:29:f2:20:79:8f:f9:5e:9a:07:
         a4:c5:f6:8c:45:43:6e:49:6e:f6:a5:90:72:26:90:a9:f4:49:
         3e:d2:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 06:16:45 2026 by rpki-client