Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          jVQByHNOdEy9FEfaR3BHMuqDbNASEH8hKDrNTBHbBQA=
Subject key identifier:   4A:07:95:F2:5C:43:42:C4:35:FE:D6:7F:DF:2E:07:B6:85:70:F9:A9
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       7DE3E63614A31E16B8D19FF10384437653048216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04E2
Signing time:             Thu 05 Nov 2026 07:18:23 +0000
Manifest this update:     Thu 05 Nov 2026 07:13:23 +0000
Manifest next update:     Fri 06 Nov 2026 10:18:23 +0000
Files and hashes:         1: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: NV/22W00EpPFlw7iRh4bY+OO+VMmXvOuC7Bj7cgYtdw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e3:e6:36:14:a3:1e:16:b8:d1:9f:f1:03:84:43:76:53:04:82:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  5 07:13:23 2026 GMT
            Not After : Nov  6 10:18:23 2026 GMT
        Subject: CN=4A0795F25C4342C435FED67FDF2E07B68570F9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:43:59:67:02:c4:d8:94:76:6a:5c:78:7c:
                    1e:e1:a0:dc:77:3b:2a:52:09:24:3c:00:be:b2:46:
                    45:b8:2a:e2:66:e7:e5:61:a1:3c:40:5b:8b:ca:4b:
                    c9:39:d4:35:67:53:a9:42:e8:8a:49:2e:22:3f:c1:
                    fc:b8:01:ea:f6:06:bd:b3:4f:b0:db:55:b9:28:f8:
                    29:8f:8d:85:19:9a:77:14:29:ed:18:a3:4e:e2:94:
                    12:a3:ee:2f:f3:0a:b4:87:2f:03:bb:97:f7:40:76:
                    d7:c0:51:ff:d0:6b:8a:c0:c9:db:a2:52:44:e8:97:
                    ca:c6:78:09:be:5a:19:63:fd:81:26:40:d6:fe:0e:
                    9c:87:a7:c1:2a:5f:eb:47:40:87:78:ca:b4:12:87:
                    a5:66:86:d1:20:6e:5d:de:1f:21:05:bb:77:8f:37:
                    7f:eb:fb:0f:67:95:d8:f0:f4:f2:dc:65:a4:87:9c:
                    ef:f8:72:4a:61:4d:6e:6b:96:b8:0e:15:59:70:36:
                    36:54:e7:ed:43:61:74:bc:64:18:12:31:37:6b:b6:
                    e1:80:72:76:08:23:57:f1:18:75:23:06:1b:1c:ed:
                    55:95:38:01:4f:f7:f0:66:cd:6b:d6:e7:84:4f:f0:
                    f1:f3:10:96:25:36:15:6d:d4:b8:15:59:c4:fb:1a:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:95:F2:5C:43:42:C4:35:FE:D6:7F:DF:2E:07:B6:85:70:F9:A9
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:8d:5c:43:93:86:c4:d6:f4:88:e8:16:36:ba:c8:98:27:
         54:f4:c7:d8:17:79:fb:de:79:60:b6:65:05:9b:5d:0c:e3:f0:
         3c:1b:fd:f6:c2:a4:d9:17:b8:b9:83:ec:76:44:6d:6f:2e:5a:
         85:b5:03:3e:be:f8:fb:d1:2b:02:d0:60:f2:00:e8:4d:cc:9e:
         1c:43:c8:47:88:94:ef:70:54:7b:78:be:e4:0a:2d:80:4f:7b:
         55:09:85:cf:7b:37:c3:32:f0:1f:53:59:1b:22:d7:ae:79:9c:
         4c:84:f7:77:49:b6:8b:1c:6d:29:56:50:a2:63:5d:22:cb:02:
         68:08:54:d8:88:81:cb:98:20:42:09:f5:0a:45:d2:3f:cb:70:
         c3:6e:33:47:c1:0a:62:c1:20:9e:19:c2:ca:97:97:42:1d:76:
         a4:d1:0f:21:e7:b5:e2:76:f0:ba:6d:38:23:54:2e:ed:cc:64:
         e6:a4:97:d1:ce:05:16:bc:31:f3:68:ef:e7:8e:21:11:a7:85:
         c0:77:bd:0b:1b:92:78:ed:74:1b:9f:49:d7:23:e4:2a:45:73:
         16:9e:25:da:1f:09:81:da:99:c5:bd:bd:30:06:d1:9d:c4:e0:
         6f:80:da:d0:3a:92:aa:2d:ed:dd:37:0e:a9:62:93:8e:84:83:
         9c:f0:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:03:22 2026 by rpki-client