Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          vqQbAROZpjnU7H5h1xjEVNEU58nz7DJTBlZCum2kBZg=
Subject key identifier:   DD:3A:B2:BC:82:8B:88:4D:89:02:B6:6A:87:D5:0D:3C:C7:2C:EB:4A
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1F26E8F8EDEE88B05DCE20B40611399D1BD6F3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04C3
Signing time:             Wed 14 Oct 2026 18:59:15 +0000
Manifest this update:     Wed 14 Oct 2026 18:54:15 +0000
Manifest next update:     Thu 15 Oct 2026 22:20:15 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: Rnjlgwrvf+hQTvkSW2hJQA/g5xR0zBWhHqju0ryjtq8=)
                          2: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:26:e8:f8:ed:ee:88:b0:5d:ce:20:b4:06:11:39:9d:1b:d6:f3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 14 18:54:15 2026 GMT
            Not After : Oct 15 22:20:15 2026 GMT
        Subject: CN=DD3AB2BC828B884D8902B66A87D50D3CC72CEB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:06:6e:b1:3e:71:f0:e6:ee:e9:91:0f:2a:
                    91:65:ae:62:70:90:40:3c:0c:57:7c:f4:25:f6:de:
                    a4:4f:2a:71:26:1a:06:84:50:5d:61:88:9a:22:1c:
                    55:0f:62:53:0a:29:c3:d2:e3:16:16:ec:c3:c3:14:
                    38:7e:78:d7:70:0e:a8:12:30:af:19:e6:f6:3a:ac:
                    09:d2:ec:65:01:df:24:05:6f:68:11:a9:60:09:27:
                    cf:82:cc:85:42:71:70:6c:49:3d:29:08:4b:a0:e7:
                    94:f7:c1:73:16:19:63:5b:43:75:5e:27:36:0d:9e:
                    9d:be:a3:df:9b:c3:43:9d:af:a1:a7:c3:77:4c:fb:
                    88:ec:e5:72:7c:92:1b:ae:6d:43:a2:c6:d0:e9:99:
                    ed:09:1f:66:a2:3b:3e:7a:9b:bd:f6:92:89:64:1d:
                    8c:19:6e:ae:25:0e:80:ea:71:bf:3c:11:ea:c9:f1:
                    36:e3:33:73:15:e4:21:fa:92:3d:78:25:c2:a9:90:
                    d8:75:ae:4e:08:47:3e:5c:0e:d7:6c:17:18:c3:29:
                    0c:3a:4c:a7:c3:1e:3d:fe:0c:ab:73:77:f4:7c:2e:
                    61:57:ae:ce:d8:86:83:e4:cc:b6:15:4a:3c:ef:4a:
                    ea:f2:ac:f1:c3:d5:ed:5d:08:ce:8c:60:71:ac:70:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:B2:BC:82:8B:88:4D:89:02:B6:6A:87:D5:0D:3C:C7:2C:EB:4A
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:11:69:c7:22:b5:62:b3:a1:dd:8c:bd:13:7a:23:af:56:d7:
         79:95:59:97:6e:1e:ee:a1:fb:bb:85:6d:22:4a:ad:f7:56:0f:
         d9:57:f9:4b:ba:ee:6e:9a:3c:e1:41:a1:9e:19:98:92:57:44:
         0b:bc:b4:60:ac:21:85:6b:1f:86:2b:23:b1:5f:cc:ad:e0:a1:
         db:44:da:10:41:82:9f:47:37:d0:5a:03:9b:28:5c:a4:13:8d:
         e8:ee:a3:01:a9:88:eb:2b:f1:4c:10:85:25:95:0e:3a:62:85:
         2d:05:f3:27:73:13:a9:54:da:bb:bc:52:65:88:5e:9d:37:bc:
         7f:c6:90:ed:0b:02:ea:eb:7a:1d:14:f6:b7:c3:95:5c:9e:90:
         63:77:17:6c:2f:4d:1e:e0:43:c8:eb:de:6d:c7:c0:7b:78:47:
         5c:ad:ad:a4:87:c8:cb:10:6c:19:c5:84:09:69:6e:89:a7:e9:
         d8:a6:2e:dd:9a:a8:62:63:ec:bb:62:23:38:d5:14:bc:c6:b0:
         9a:10:8a:dc:00:a2:09:b5:08:36:5c:17:f5:39:b5:2a:62:30:
         82:1f:68:c7:84:a7:22:f0:22:8d:cc:e1:35:d1:c5:0c:40:82:
         a3:f4:4e:5a:d2:5e:32:2f:f4:45:4d:24:96:8e:0a:44:a6:43:
         ca:23:2d:0c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHybo+O3uiLBdziC0BhE5nRvW8/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjEwMTQxODU0MTVaFw0yNjEwMTUyMjIwMTVaMDMxMTAvBgNV
BAMTKEREM0FCMkJDODI4Qjg4NEQ4OTAyQjY2QTg3RDUwRDNDQzcyQ0VCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6wZusT5x8Obu6ZEPKpFlrmJw
kEA8DFd89CX23qRPKnEmGgaEUF1hiJoiHFUPYlMKKcPS4xYW7MPDFDh+eNdwDqgS
MK8Z5vY6rAnS7GUB3yQFb2gRqWAJJ8+CzIVCcXBsST0pCEug55T3wXMWGWNbQ3Ve
JzYNnp2+o9+bw0Odr6Gnw3dM+4js5XJ8khuubUOixtDpme0JH2aiOz56m732kolk
HYwZbq4lDoDqcb88EerJ8TbjM3MV5CH6kj14JcKpkNh1rk4IRz5cDtdsFxjDKQw6
TKfDHj3+DKtzd/R8LmFXrs7YhoPkzLYVSjzvSuryrPHD1e1dCM6MYHGscCFJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3TqyvIKLiE2JArZqh9UNPMcs60owHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBFpxyK1YrOh3Yy9E3oj
r1bXeZVZl24e7qH7u4VtIkqt91YP2Vf5S7rubpo84UGhnhmYkldEC7y0YKwhhWsf
hisjsV/MreCh20TaEEGCn0c30FoDmyhcpBON6O6jAamI6yvxTBCFJZUOOmKFLQXz
J3MTqVTau7xSZYhenTe8f8aQ7QsC6ut6HRT2t8OVXJ6QY3cXbC9NHuBDyOvebcfA
e3hHXK2tpIfIyxBsGcWECWluiafp2KYu3ZqoYmPsu2IjONUUvMawmhCK3ACiCbUI
NlwX9Tm1KmIwgh9ox4SnIvAijczhNdHFDECCo/ROWtJeMi/0RU0klo4KRKZDyiMt
DA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:17:03 2026 by rpki-client