Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          FFkv7xnKGiRLB3eReEC24fMiXHy9WzqoMo3QiF2+Rv0=
Subject key identifier:   64:F7:33:CE:D5:EF:62:7B:18:4D:C0:95:BC:D2:9E:FB:CE:BC:94:E4
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1D9F14260D2B29A4240044186FE812165588B12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03D5
Signing time:             Thu 23 Apr 2026 10:24:08 +0000
Manifest this update:     Thu 23 Apr 2026 10:19:08 +0000
Manifest next update:     Fri 24 Apr 2026 11:11:08 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: enZ8oDQuBajKoTTLKg1vKhnraT5iAT3lIB76I08UUuc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Apr 2026 11:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9f:14:26:0d:2b:29:a4:24:00:44:18:6f:e8:12:16:55:88:b1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr 23 10:19:08 2026 GMT
            Not After : Apr 24 11:11:08 2026 GMT
        Subject: CN=64F733CED5EF627B184DC095BCD29EFBCEBC94E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3e:ae:96:51:a8:67:76:23:6b:2f:fb:bb:e1:
                    c8:52:0b:65:83:eb:30:cd:cb:df:61:2a:e8:ff:df:
                    bf:e2:8f:ca:9c:9b:6e:2a:7a:6b:59:1f:12:c1:a0:
                    15:50:2f:02:89:ed:f1:ab:33:f7:a1:e3:03:35:ae:
                    3b:78:29:1a:c3:d8:96:70:af:ce:5f:cc:4b:1a:54:
                    a6:c8:40:f2:6e:c4:23:64:c7:82:73:d0:72:2a:0d:
                    2f:b0:b5:00:cb:c0:af:0b:60:52:27:53:a3:62:cd:
                    41:09:67:98:44:27:1c:f6:f2:8e:2d:fe:0c:10:ca:
                    93:60:0d:53:ba:85:fa:5c:cd:62:dc:48:8a:ac:dc:
                    78:99:f8:22:b1:d7:98:31:d9:c8:54:9e:bd:b7:1f:
                    d7:56:78:04:da:52:1c:29:15:2b:6a:3b:4a:94:19:
                    86:76:e8:91:bd:f3:15:a4:49:81:67:69:35:0f:c7:
                    c1:f4:5b:4b:a4:e4:d5:b3:fb:d3:3c:7c:96:3b:9a:
                    e3:7d:ed:e7:bb:5f:c6:a7:d3:88:86:66:00:59:17:
                    b5:ac:78:a2:3a:31:59:4e:9b:76:9b:84:0c:43:84:
                    94:f2:00:e8:02:f4:2e:66:54:93:e0:a5:f8:fa:db:
                    4f:9d:87:e0:d5:08:0b:64:20:9c:2b:d7:78:bd:54:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F7:33:CE:D5:EF:62:7B:18:4D:C0:95:BC:D2:9E:FB:CE:BC:94:E4
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:34:8a:2d:a2:1e:59:1d:5d:76:ba:4a:09:b3:15:97:51:
         ea:25:4b:95:63:3e:c0:a9:78:96:c2:cf:e0:11:1f:55:00:0d:
         5c:d4:37:c6:47:9f:1d:38:e9:23:e9:24:d8:4f:b0:a5:88:47:
         ca:01:6f:bb:23:be:5b:27:77:57:ce:24:fa:0e:90:af:db:8d:
         06:e6:30:3d:c5:1b:3a:d2:e3:b6:da:be:9f:04:a9:e2:35:eb:
         bc:32:7b:7f:e3:4c:ec:88:8f:7d:ea:6f:18:dc:0b:db:5f:79:
         30:1d:5c:97:21:e1:54:f7:5b:5c:b1:7b:ec:dd:a1:3b:0b:d6:
         1c:ff:d8:a8:b9:d5:58:d1:20:09:30:e6:eb:1a:45:6a:e2:d1:
         f4:c7:2f:50:8a:74:e9:a9:1b:ca:ed:6f:71:9d:49:df:d9:9d:
         5b:6b:c3:99:a7:ef:08:b6:d3:ac:78:5e:01:de:ac:3f:af:97:
         09:9e:b6:9b:d1:57:20:f2:ba:1a:21:49:a3:b5:1c:ef:fe:6c:
         0a:02:0a:b8:82:c9:c4:50:ce:ce:87:60:12:f9:6d:b1:e6:bb:
         6f:04:68:57:8c:08:b7:4d:61:f8:c2:9f:66:48:1d:91:f9:58:
         08:9a:86:4d:59:e7:aa:ef:3f:a3:f0:3d:f1:21:bd:7f:16:61:
         9c:25:0b:48
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHZ8UJg0rKaQkAEQYb+gSFlWIsSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA0MjMxMDE5MDhaFw0yNjA0MjQxMTExMDhaMDMxMTAvBgNV
BAMTKDY0RjczM0NFRDVFRjYyN0IxODREQzA5NUJDRDI5RUZCQ0VCQzk0RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmPq6WUahndiNrL/u74chSC2WD
6zDNy99hKuj/37/ij8qcm24qemtZHxLBoBVQLwKJ7fGrM/eh4wM1rjt4KRrD2JZw
r85fzEsaVKbIQPJuxCNkx4Jz0HIqDS+wtQDLwK8LYFInU6NizUEJZ5hEJxz28o4t
/gwQypNgDVO6hfpczWLcSIqs3HiZ+CKx15gx2chUnr23H9dWeATaUhwpFStqO0qU
GYZ26JG98xWkSYFnaTUPx8H0W0uk5NWz+9M8fJY7muN97ee7X8an04iGZgBZF7Ws
eKI6MVlOm3abhAxDhJTyAOgC9C5mVJPgpfj620+dh+DVCAtkIJwr13i9VP53AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUZPczztXvYnsYTcCVvNKe+868lOQwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZw0ii2iHlkdXXa6Sgmz
FZdR6iVLlWM+wKl4lsLP4BEfVQANXNQ3xkefHTjpI+kk2E+wpYhHygFvuyO+Wyd3
V84k+g6Qr9uNBuYwPcUbOtLjttq+nwSp4jXrvDJ7f+NM7IiPfepvGNwL2195MB1c
lyHhVPdbXLF77N2hOwvWHP/YqLnVWNEgCTDm6xpFauLR9McvUIp06akbyu1vcZ1J
39mdW2vDmafvCLbTrHheAd6sP6+XCZ62m9FXIPK6GiFJo7Uc7/5sCgIKuILJxFDO
zodgEvltsea7bwRoV4wIt01h+MKfZkgdkflYCJqGTVnnqu8/o/A98SG9fxZhnCUL
SA==
-----END CERTIFICATE-----
Generated at Thu Apr 23 19:18:42 2026 by rpki-client