Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          EL/Dkad8rKTEwxjoATDOpfWlPFhPxJjzd4pX7PIh2Q4=
Subject key identifier:   D0:B1:96:B5:B3:F6:99:62:3A:B7:E9:87:93:A5:9F:6C:B3:E0:5F:68
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       14B12F2B665A78622382B86D5F9A924F52FC4FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0407
Signing time:             Wed 27 May 2026 20:34:20 +0000
Manifest this update:     Wed 27 May 2026 20:29:20 +0000
Manifest next update:     Thu 28 May 2026 20:53:20 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: ko2wLDsmzQal7GXekqzCPMxd8DMLhonQGS9I94HEK5o=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 May 2026 14:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b1:2f:2b:66:5a:78:62:23:82:b8:6d:5f:9a:92:4f:52:fc:4f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: May 27 20:29:20 2026 GMT
            Not After : May 28 20:53:20 2026 GMT
        Subject: CN=D0B196B5B3F699623AB7E98793A59F6CB3E05F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:cb:9c:23:b7:59:41:7c:bd:e0:e9:26:18:
                    9e:76:27:2d:d9:78:30:5c:73:0e:ba:09:cd:17:11:
                    05:5b:1c:5b:41:1d:6b:ed:f5:35:39:1c:19:66:26:
                    26:12:e8:a4:19:70:8d:a8:4f:59:01:e9:cf:b2:e4:
                    37:76:54:c8:12:80:59:50:d3:62:96:78:52:92:da:
                    af:17:0b:68:16:bc:11:13:91:4d:6d:68:4f:49:78:
                    0a:b2:fb:be:68:53:89:74:af:6d:6f:04:75:10:b4:
                    c6:df:3a:ff:b1:5f:92:cc:5d:04:82:7f:04:0b:78:
                    78:fb:23:4c:f7:21:3d:77:cf:a6:c5:54:dc:f2:4e:
                    ec:d7:b4:75:d8:f4:62:0f:95:33:1d:7a:7c:27:e1:
                    16:7c:9d:08:04:8b:27:b6:95:c6:7e:56:e4:05:68:
                    e8:27:35:7e:c4:80:33:7b:d9:e0:2e:85:f0:57:f3:
                    2e:a0:57:3f:f8:e2:2b:0f:fe:df:51:42:5e:7c:48:
                    36:e9:41:af:1b:22:fa:f9:50:10:aa:19:42:bf:86:
                    9f:4a:53:cb:5c:c6:72:2a:e7:f6:6d:cd:62:81:cb:
                    ea:40:94:21:be:d3:41:80:82:81:23:8d:3d:e2:e9:
                    93:d6:e1:2d:16:86:b3:27:6d:e8:96:bf:c4:c8:c5:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B1:96:B5:B3:F6:99:62:3A:B7:E9:87:93:A5:9F:6C:B3:E0:5F:68
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:90:23:5d:a7:5b:ef:29:50:c4:62:9a:1d:87:72:6a:1c:7d:
         96:fe:0c:67:7a:d6:91:a2:c4:de:e0:64:a0:76:7f:e9:1a:d2:
         ac:97:27:38:5f:05:fe:d3:f1:76:da:35:a5:f1:a5:6a:09:09:
         60:de:ac:67:e6:ea:0a:dc:c6:dc:c1:99:a8:97:b8:af:5a:7d:
         0f:a1:c0:24:82:bb:20:96:f7:9b:06:ed:d5:d1:0e:b3:6b:25:
         41:85:cb:33:9b:6e:3e:2a:3b:24:93:70:f2:fe:2b:19:38:59:
         78:0b:65:54:b3:f8:60:ca:ae:cb:1e:a9:72:d1:19:a6:ab:83:
         cf:43:bc:40:b1:49:75:b5:15:c0:0f:ba:98:15:ab:25:61:ef:
         65:30:3d:23:0e:0e:fc:89:c0:24:7a:d9:21:a8:50:57:b3:d1:
         1d:3b:ca:c2:d7:a0:d0:6d:f7:07:51:bb:a0:82:56:c4:af:9e:
         98:a1:da:d5:1c:69:27:6e:7c:fc:0b:13:66:51:28:9e:12:35:
         6c:6d:4d:8d:17:f8:39:72:ca:22:ab:e5:88:b7:3c:31:68:db:
         a5:01:e9:d8:e0:5a:a7:72:50:cc:4e:6c:75:e3:d2:5b:d3:65:
         f7:b9:f0:fd:1c:45:bb:69:65:00:04:1f:55:66:a2:f6:93:cd:
         b6:d5:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 23:19:06 2026 by rpki-client