Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          aBP860w2Zmi0UD3Dr+76e058MNJCl6gilKRLnPlJn0Q=
Subject key identifier:   ED:5A:AF:DC:05:26:B8:8B:09:88:DC:78:FB:0F:EE:3C:6D:D9:07:CE
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       09BF8B955C7D8FDD3A680B306450466C96E66C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0414
Signing time:             Fri 05 Jun 2026 23:10:33 +0000
Manifest this update:     Fri 05 Jun 2026 23:05:33 +0000
Manifest next update:     Sun 07 Jun 2026 02:43:33 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: +FtyhKpE7bctOxH3eIdIW0BTLvKUTnNWUt1ecZHq0JA=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bf:8b:95:5c:7d:8f:dd:3a:68:0b:30:64:50:46:6c:96:e6:6c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun  5 23:05:33 2026 GMT
            Not After : Jun  7 02:43:33 2026 GMT
        Subject: CN=ED5AAFDC0526B88B0988DC78FB0FEE3C6DD907CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:81:bb:e2:b5:bf:94:9b:e9:18:7d:17:38:
                    1a:6b:7d:fb:2c:ad:21:c0:a1:58:ed:20:d6:f0:95:
                    dc:8b:c8:20:31:59:c5:ae:eb:ec:56:e3:c6:ff:22:
                    fa:e4:5e:e4:1c:b3:26:4a:c2:81:29:47:0d:0a:30:
                    2c:d2:e4:d0:8a:67:07:0b:28:64:cc:26:6f:2e:b3:
                    e3:b1:2d:c7:c5:c6:bd:20:ee:04:60:39:d7:40:6d:
                    0f:a3:40:c0:6e:5c:ca:50:3c:6a:59:5e:bd:f4:61:
                    e7:a9:6a:8b:77:29:d0:54:36:78:53:b2:d9:18:e6:
                    d9:e1:ab:90:c7:51:d5:93:ca:f8:f0:ff:6e:7f:de:
                    79:4e:d1:a8:0a:40:a0:00:c8:9b:af:ff:9a:9a:c6:
                    03:c9:b9:7d:5a:27:b8:ff:3d:55:10:de:8c:72:b6:
                    d4:bf:9b:c9:58:ba:ad:32:1b:92:b9:d2:1e:ae:fa:
                    74:95:e9:64:48:32:d0:29:57:bb:ce:04:08:83:92:
                    68:bb:94:d2:21:bf:fb:7f:9e:a8:63:9b:92:01:a2:
                    d1:4d:87:66:c5:5e:18:75:a3:c4:f5:d2:a8:7c:bb:
                    3b:a5:7c:ee:a6:67:12:4d:1a:7c:94:16:28:30:b7:
                    ce:62:8d:f9:d6:d6:90:a6:1b:26:0e:03:99:c4:68:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5A:AF:DC:05:26:B8:8B:09:88:DC:78:FB:0F:EE:3C:6D:D9:07:CE
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:ed:90:68:f7:e0:4a:31:60:cb:08:99:67:ac:99:60:00:
         80:c9:5e:4a:3d:77:f4:25:50:a6:8d:cd:d7:26:ee:f3:75:47:
         9e:84:59:2e:9b:c5:9d:73:0b:b2:f7:67:78:15:9d:40:aa:b2:
         fe:49:13:c4:f6:6c:ec:a9:43:c7:9c:18:1b:e0:84:76:2e:7c:
         bb:58:3e:f9:94:ed:24:0b:50:5c:34:93:60:62:d7:f9:29:66:
         31:2a:ad:1b:40:17:51:5e:90:c3:f9:66:04:4a:82:be:98:ea:
         c6:d2:e5:23:21:0b:32:f3:61:2e:df:92:a9:72:45:41:53:89:
         cd:6d:86:d9:67:76:64:21:31:35:b6:3f:cf:b8:71:5f:cd:c2:
         72:9c:5b:2c:a0:52:f8:c7:a0:79:51:fa:0f:3e:10:29:4d:c8:
         a6:e0:c8:dc:97:7f:d0:0b:32:ef:5b:89:e3:5f:7d:88:54:99:
         83:d0:16:0e:f5:1c:df:3e:7b:65:a5:2c:a4:75:c2:e9:c5:58:
         d1:59:5f:06:da:8e:c4:aa:37:a6:12:e2:c8:95:e4:8c:8c:84:
         21:de:a5:3f:af:04:f1:47:31:63:f4:19:bb:c5:bb:98:a3:15:
         78:87:23:c5:82:63:0c:77:75:c6:fd:f7:f7:fe:7f:6d:61:68:
         84:64:b8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:18:09 2026 by rpki-client