Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          US83TPBa92xPmnMpL6GE3z3Vw4XDKmj3l0MJxgyZ7mQ=
Subject key identifier:   B3:BB:5A:C2:E4:17:C8:79:14:32:B9:FF:84:83:C2:62:FE:BF:D2:52
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       25AA873339C6F86F0303F94E633E1AFD615FE006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03C9
Signing time:             Tue 14 Apr 2026 14:24:08 +0000
Manifest this update:     Tue 14 Apr 2026 14:19:08 +0000
Manifest next update:     Wed 15 Apr 2026 15:03:08 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 1WFnahIHgpkGXMozwEagnTby1myeSu0xr+AwNZhU9Yk=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 13:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:aa:87:33:39:c6:f8:6f:03:03:f9:4e:63:3e:1a:fd:61:5f:e0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr 14 14:19:08 2026 GMT
            Not After : Apr 15 15:03:08 2026 GMT
        Subject: CN=B3BB5AC2E417C8791432B9FF8483C262FEBFD252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:16:78:cc:74:71:73:3c:14:e8:6e:02:e9:
                    57:5d:c5:2d:77:fc:59:43:4c:9e:1f:92:b3:cc:08:
                    ef:d5:30:40:a6:80:04:45:f5:2e:0b:9d:41:89:5e:
                    e6:20:43:3b:e7:1f:68:cb:65:da:28:64:17:b9:73:
                    16:3a:5b:3d:91:df:f8:ff:10:e3:bf:90:0c:5e:48:
                    9b:26:ee:ee:2a:cd:33:b7:50:cd:a5:97:38:12:d4:
                    ea:53:35:4b:39:3f:6e:e3:09:7c:a3:6c:19:3a:a6:
                    90:d5:1e:39:a9:4a:3c:b5:f1:e6:45:9e:dd:17:56:
                    07:f4:b0:7f:21:ef:50:4d:e2:45:9e:85:77:eb:4d:
                    df:16:c5:f0:50:e0:cf:d1:7e:7b:40:34:32:ec:c6:
                    80:38:5c:a4:da:5b:7d:b2:11:a7:99:5b:e4:30:f2:
                    37:19:87:9f:16:bd:59:c5:b9:c9:75:63:d6:9f:b8:
                    45:34:6c:3f:10:4e:4e:e5:a1:46:b3:93:01:2c:11:
                    b6:e1:bd:7b:49:38:fe:f1:3c:29:fa:84:3c:3b:30:
                    1c:b5:9f:b4:d9:9e:bd:fd:d2:45:bf:1e:84:b0:22:
                    49:8b:50:28:8a:9d:79:2e:c3:c1:ab:a8:9e:aa:ad:
                    df:d9:bf:1d:dc:65:f8:df:32:43:e4:8e:49:84:c6:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:5A:C2:E4:17:C8:79:14:32:B9:FF:84:83:C2:62:FE:BF:D2:52
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:e7:95:cc:61:ad:8b:4f:73:be:e6:73:72:34:d6:a8:de:
         28:b9:f0:0c:46:3a:6e:31:04:9c:d2:d1:ed:c3:cb:b9:63:23:
         be:f4:d7:b8:0d:1b:0d:90:c5:f5:42:1c:ff:ab:07:51:4c:e9:
         a6:8b:ba:b9:da:16:19:da:41:35:0f:39:94:9a:44:f0:11:46:
         3c:1a:4c:d5:90:7c:e1:bd:4f:e4:55:d4:4c:2c:0d:a7:e4:31:
         91:0a:f1:73:1f:b5:b6:d3:bb:da:cd:67:cb:e9:4d:8a:83:b6:
         c3:79:9d:a8:45:fa:b0:17:c6:15:43:55:52:c4:4b:d1:32:45:
         63:48:e1:70:d0:99:46:da:1f:f4:b9:d6:ca:32:4a:a5:fc:ba:
         b3:e1:14:2d:db:8c:51:e8:6a:97:dc:42:06:9a:12:cd:47:3c:
         47:31:c8:94:ed:0e:38:be:2e:64:39:75:c5:10:1c:e5:22:6d:
         58:02:22:04:4f:3d:4d:78:09:39:b2:11:26:8a:13:e2:8d:f1:
         27:a8:21:6e:e9:07:22:00:14:a4:e3:26:e5:c1:df:3a:fe:e3:
         66:7c:7f:1d:3d:58:72:6d:81:b3:55:40:6e:81:cc:db:9d:39:
         c0:10:8d:58:89:62:06:6b:e6:0b:1f:ad:8e:9e:20:00:c7:06:
         18:71:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 16:35:14 2026 by rpki-client