Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          tDW6V5Nf2HeOZTDZ0EwDxQdkvkJLShdm9CyV/Kc0LDA=
Subject key identifier:   76:BE:40:C0:B4:F5:9A:1F:E5:51:3B:06:B3:FA:9F:60:88:01:62:00
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4C59D249ECDB54BA2201F41953760D55E81FD001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0401
Signing time:             Sat 23 May 2026 13:04:20 +0000
Manifest this update:     Sat 23 May 2026 12:59:20 +0000
Manifest next update:     Sun 24 May 2026 14:45:20 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: /YF9mxmqpdQoy3zlyU4ddEvC1XnOx1YUD4OVOhltzfE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:59:d2:49:ec:db:54:ba:22:01:f4:19:53:76:0d:55:e8:1f:d0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: May 23 12:59:20 2026 GMT
            Not After : May 24 14:45:20 2026 GMT
        Subject: CN=76BE40C0B4F59A1FE5513B06B3FA9F6088016200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:fd:23:38:44:f9:f3:4b:74:a7:e9:60:98:
                    6a:5f:d2:d2:50:d4:6e:8a:84:11:7d:2d:53:36:58:
                    46:7c:35:98:90:fd:2f:b0:41:e8:c2:4f:c1:d5:09:
                    2f:8f:d2:68:d6:41:20:24:68:c5:09:44:7e:18:6c:
                    85:41:c6:2f:fa:2e:57:3a:8a:a1:07:57:82:fb:08:
                    11:35:12:c1:7d:2a:b2:a1:3c:25:7e:71:45:82:8b:
                    8b:6b:f3:74:c5:72:71:39:28:b3:24:7b:3f:b7:46:
                    fe:d4:92:93:02:81:11:40:c1:74:05:f7:05:2d:f4:
                    3d:e0:c7:8a:ee:32:5b:88:fc:b1:3c:ad:60:d9:ab:
                    a3:84:27:13:85:5c:46:c8:c6:af:eb:bb:7f:97:12:
                    46:f8:18:92:35:28:00:b1:2d:48:60:c7:6b:15:8f:
                    c5:70:d1:d3:58:6e:f8:e5:9f:e2:9a:3d:77:9f:d1:
                    69:0f:e5:09:af:92:83:c7:15:44:64:70:36:a7:4e:
                    c8:d0:a6:81:18:07:8d:12:c4:95:9c:c4:70:c3:35:
                    9c:17:9e:27:56:1f:c2:2f:55:de:a2:4d:cf:7e:e6:
                    cb:14:98:67:1d:3c:33:32:50:82:fb:8f:90:be:61:
                    4e:04:83:13:b8:f6:ec:75:0a:b3:05:07:94:a3:e9:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BE:40:C0:B4:F5:9A:1F:E5:51:3B:06:B3:FA:9F:60:88:01:62:00
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d6:e4:05:e0:44:d3:b1:8b:5b:a9:8e:e7:80:38:7f:98:22:
         66:06:a5:cc:ac:d9:ed:fb:bc:13:88:9d:7b:d7:4b:b1:72:c1:
         ad:31:28:77:e1:12:bc:82:cf:5c:82:ad:25:6c:ab:06:3d:39:
         45:6a:30:f6:ea:f8:b8:f6:31:43:20:40:04:b5:11:f6:33:f2:
         88:d4:a4:d9:9c:89:02:e9:3c:2c:5e:24:d0:3e:17:59:12:fe:
         2e:60:75:a7:7f:b6:8c:aa:93:25:6a:5c:e4:88:1e:98:e0:ff:
         76:bc:e1:0c:b2:bc:84:af:8a:10:f4:0c:a8:ba:85:41:7f:df:
         c7:00:62:d9:4b:dd:87:fd:ca:f8:41:51:ec:ed:97:56:d9:e7:
         b0:93:ca:1f:79:db:b2:30:2c:65:d7:15:3f:54:5b:92:6f:b6:
         50:5a:b2:c7:91:73:20:1d:89:2e:eb:0e:7f:3f:50:8e:23:04:
         af:49:66:cb:ef:82:33:25:1d:41:94:42:60:3c:08:7a:5a:43:
         de:fb:af:b7:b9:b8:39:23:e4:3f:53:0a:df:dd:6f:f5:8a:d1:
         03:70:a6:06:98:f0:7d:46:a5:30:5f:ab:b2:0f:a9:19:7b:41:
         02:be:3a:7b:2d:c7:fd:e7:c0:ac:f4:8a:da:39:34:b6:e9:13:
         17:39:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 19:52:35 2026 by rpki-client