Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          YKB87nEcpRc3qGzWDHoe/DwD8rBuL0zyQ3Or0fedYh4=
Subject key identifier:   B1:30:55:AF:9C:C2:AD:0B:56:7F:B1:10:D2:64:C7:76:AA:D2:C9:23
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       3D2FA310880FA80E6414D8D89E7D0715BDAC596D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0484
Signing time:             Sat 29 Aug 2026 16:34:00 +0000
Manifest this update:     Sat 29 Aug 2026 16:29:00 +0000
Manifest next update:     Sun 30 Aug 2026 19:10:00 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 17O7GtQkeXIKKj2Ab8MbgIf8agVZCJd382FB61m7OQw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2f:a3:10:88:0f:a8:0e:64:14:d8:d8:9e:7d:07:15:bd:ac:59:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Aug 29 16:29:00 2026 GMT
            Not After : Aug 30 19:10:00 2026 GMT
        Subject: CN=B13055AF9CC2AD0B567FB110D264C776AAD2C923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:2f:a7:67:f0:06:80:63:4c:94:ea:32:3e:
                    6e:b0:2b:4a:4e:6f:ec:06:46:34:10:29:7f:09:c7:
                    2b:7f:02:37:d5:d3:d4:0a:c6:a0:94:6b:dc:3b:7c:
                    fc:9f:26:d2:82:48:f7:27:36:2e:2f:ac:9d:75:06:
                    57:99:64:21:0f:ac:34:c2:79:23:c8:86:e0:a5:49:
                    58:a7:59:d2:b1:04:22:91:15:cf:0d:12:7c:1f:38:
                    9e:bb:1a:33:89:84:fd:bb:8a:e7:ff:bb:f7:e5:fe:
                    f1:87:08:40:6a:f6:fc:0f:72:90:12:95:52:4f:9d:
                    36:ba:2e:c9:60:01:e2:97:d4:30:e7:42:db:f6:bf:
                    b1:ea:c8:e6:c1:39:3e:ac:55:5c:aa:77:38:81:6b:
                    1c:63:31:0b:7b:bb:95:c5:3a:f9:5f:1b:70:e2:08:
                    a8:39:3d:59:e9:fa:0a:dd:e7:fb:fc:97:40:22:9b:
                    43:45:9c:5a:5c:38:db:e0:ec:a5:1e:7d:cd:05:ab:
                    4e:fc:a5:0d:4e:e7:e8:4a:23:b0:4a:2e:6d:41:68:
                    a7:43:f8:ef:15:68:99:88:d4:a9:50:9e:23:c7:e4:
                    0b:f7:a4:ab:37:67:6d:cd:59:15:f5:0b:26:8a:13:
                    9e:f1:9c:5b:ef:71:a3:39:0d:0f:02:4f:66:5c:5a:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:55:AF:9C:C2:AD:0B:56:7F:B1:10:D2:64:C7:76:AA:D2:C9:23
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b0:e3:f7:f7:43:66:0f:df:fc:79:3a:7d:ea:21:e6:79:bf:
         0a:17:c5:48:0f:fa:18:15:9a:38:5e:3b:94:2b:a1:c8:a1:a6:
         9c:d4:24:b9:9c:58:08:11:0b:52:21:78:f2:0f:7f:1a:cf:70:
         5d:ef:07:fb:3f:41:0f:28:ba:1a:b7:eb:48:f3:0c:1b:a6:75:
         a5:62:c6:4c:eb:ae:23:c2:f9:9c:6b:41:16:ad:1e:39:89:1e:
         5c:8a:d8:b2:bd:85:1f:fe:ca:4d:17:43:c8:94:ff:6e:42:b7:
         8c:84:2a:9c:8d:04:2a:3f:70:22:bc:d3:a4:9f:bf:cd:9f:43:
         77:74:1e:d5:ee:5e:ae:62:12:82:af:37:e9:4e:94:88:4d:68:
         36:5d:de:dd:b0:4f:45:2d:69:20:d2:fc:b0:3a:50:b3:83:eb:
         fc:12:07:28:b5:e4:5d:7f:8e:75:97:07:89:fa:c6:3c:f9:ae:
         8f:99:ff:78:66:c3:b0:3f:38:b2:d3:86:3e:a8:36:2e:a7:a4:
         0d:a4:0f:b8:79:e8:5b:26:85:24:b8:51:a3:e5:d6:13:c2:61:
         13:f5:97:67:96:5a:54:23:72:98:00:11:47:23:77:51:e3:e7:
         45:98:e6:f0:2c:4c:1c:e8:46:38:37:f8:5d:8d:0a:cf:59:a6:
         b4:fd:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 06:25:10 2026 by rpki-client