Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          ZFglJf/qxf93xVfehIHItFnxWGYPuAwImmJAhcW5MlM=
Subject key identifier:   CA:8F:23:F7:3F:A9:9E:64:D7:0F:55:14:C7:16:13:31:61:1B:56:6D
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       551A2AE17EC7B85A346F0B0FE648540D9BBEE556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04BC
Signing time:             Fri 09 Oct 2026 15:39:15 +0000
Manifest this update:     Fri 09 Oct 2026 15:34:15 +0000
Manifest next update:     Sat 10 Oct 2026 16:35:15 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: zMbmFPXDWbylyfxlGB04iEmYyy87a8U9zd9/zxYJplg=)
                          2: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 16:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1a:2a:e1:7e:c7:b8:5a:34:6f:0b:0f:e6:48:54:0d:9b:be:e5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct  9 15:34:15 2026 GMT
            Not After : Oct 10 16:35:15 2026 GMT
        Subject: CN=CA8F23F73FA99E64D70F5514C7161331611B566D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:40:ba:c1:4e:c6:6b:8e:0c:ef:42:cf:cf:
                    45:4a:21:6e:12:a3:f6:e7:97:33:50:f5:da:50:14:
                    f8:3d:48:10:db:3a:ae:9e:6e:00:59:76:c0:8b:e1:
                    ae:b5:c2:f4:ae:1e:8a:60:9e:2f:81:20:4f:f1:c2:
                    12:2d:0e:6c:77:df:23:cd:71:68:07:db:aa:47:8b:
                    96:bd:39:7a:a6:08:2e:66:f7:df:b0:83:62:22:7f:
                    28:5d:8d:22:51:32:6c:28:51:25:4f:d4:a3:8c:eb:
                    f6:0d:38:fe:eb:f5:df:a4:84:39:15:14:84:08:fe:
                    ae:b8:03:90:35:99:a1:a1:10:d3:eb:14:29:b3:57:
                    44:92:cc:66:98:dd:eb:44:60:91:75:fc:6b:8f:53:
                    80:95:e1:ad:e9:27:06:1b:4c:ab:a3:c2:79:96:80:
                    ed:af:d7:a3:68:d2:75:17:da:01:01:42:7e:54:b3:
                    f4:06:05:01:1f:b2:7e:df:91:6b:09:4d:2e:0a:ca:
                    5f:fd:47:34:b7:9b:ca:96:24:c7:26:81:6e:49:92:
                    32:0a:3d:f5:9f:1c:40:20:13:38:a9:f4:47:b1:b8:
                    42:96:b3:59:06:a9:c4:ec:89:e1:62:13:1b:90:19:
                    ad:74:bd:33:d2:a8:16:fb:ac:e8:dc:e0:85:c7:d5:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:23:F7:3F:A9:9E:64:D7:0F:55:14:C7:16:13:31:61:1B:56:6D
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:33:ea:b5:dd:9b:b4:36:4b:79:1e:55:53:c0:cc:ac:bd:c0:
         c4:05:74:5f:6a:fe:19:95:8f:ed:b4:3b:c4:a4:79:fa:94:90:
         a2:23:ab:b5:a0:c0:29:f4:47:f5:27:e4:f3:a6:17:32:d7:d4:
         00:47:3a:90:65:0f:d5:93:47:b7:85:f2:ee:88:36:11:4d:e9:
         3e:8c:47:70:e7:58:1b:33:7c:44:b5:ef:00:e9:e0:a3:12:cd:
         16:1d:97:b8:56:e1:d1:10:bc:6b:5e:18:0d:2d:66:30:5e:e7:
         26:6a:c1:80:57:61:8d:c7:63:2e:6b:62:67:e1:19:3e:6e:35:
         1d:d8:31:8b:eb:74:6e:28:af:03:0c:7e:30:ac:12:d5:6a:13:
         c9:f9:af:fc:7a:9d:17:08:6d:40:6a:5b:e1:f3:e1:9c:5f:f4:
         4d:20:6e:65:a5:fe:2b:61:dc:29:35:a9:1a:87:54:cd:47:ff:
         11:d7:01:b7:b5:2a:af:4d:45:ce:80:53:0d:c9:73:02:3b:28:
         14:08:ab:26:1e:3c:a6:a5:fa:57:6a:83:ec:30:f5:6e:ee:65:
         6e:c6:89:e8:37:4b:71:6c:9c:1a:7b:55:6f:ac:bb:7e:d9:14:
         aa:d0:ec:3b:f6:cb:7f:ff:43:75:26:fa:30:74:3c:87:33:b8:
         28:70:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:33:13 2026 by rpki-client