Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          wr02cN3niN7U1Z5qHcQLqxwlyHShQCYumsfzkvE0dFc=
Subject key identifier:   DA:B2:2E:AA:15:FB:90:D3:7C:10:48:5A:4F:F9:37:27:3D:0D:32:D6
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       45B691E1252F2BF5AE1B4DEDDADD8FA91C706C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04DD
Signing time:             Sun 01 Nov 2026 13:03:17 +0000
Manifest this update:     Sun 01 Nov 2026 12:58:17 +0000
Manifest next update:     Mon 02 Nov 2026 14:23:17 +0000
Files and hashes:         1: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: RdFHXNOxNQXuUmH2+MzT0j42i2+ZShvUoOF7BQYiCr8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 13:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b6:91:e1:25:2f:2b:f5:ae:1b:4d:ed:da:dd:8f:a9:1c:70:6c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  1 12:58:17 2026 GMT
            Not After : Nov  2 14:23:17 2026 GMT
        Subject: CN=DAB22EAA15FB90D37C10485A4FF937273D0D32D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:cd:56:60:4f:47:21:2c:53:4c:e2:dd:cf:
                    bd:85:f5:06:ea:1f:bf:cd:69:ec:8f:2c:fa:3e:77:
                    60:31:53:c7:6e:84:9a:52:0d:1f:ce:09:01:c8:bc:
                    78:22:0a:45:7f:8f:9f:77:f6:48:c7:4e:31:50:85:
                    5d:89:92:f5:68:d1:a7:8c:d8:af:3f:8a:83:c5:9e:
                    8e:f2:3b:fb:b0:6b:b6:53:ca:f3:fd:a7:39:82:92:
                    a9:3c:8b:4f:1e:7a:0f:7e:bd:a7:4e:b4:f6:33:68:
                    4f:a1:ab:8d:a3:dc:d9:83:1f:9c:1a:44:b8:ce:65:
                    73:02:e3:89:59:46:c4:5f:93:9c:19:81:17:63:99:
                    83:58:e5:fa:66:6d:36:ae:7a:c2:fc:cd:e8:55:6d:
                    95:76:09:15:d0:a2:71:35:20:56:16:b1:b9:53:c4:
                    c5:9c:17:76:3a:52:af:cc:b1:75:e3:50:20:2e:83:
                    39:b4:5b:fd:ee:f6:39:85:cc:36:2e:1c:cd:c8:4a:
                    36:19:e7:39:de:ba:d8:50:3c:99:3f:9e:2d:e7:45:
                    bc:6b:ec:f9:2a:5a:c3:c4:d1:3a:83:d0:fb:04:d7:
                    a0:b2:05:90:da:85:dd:98:84:25:1a:1f:79:ae:0e:
                    e3:31:b6:d4:35:b0:8a:ab:b3:00:63:1f:da:dc:22:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:2E:AA:15:FB:90:D3:7C:10:48:5A:4F:F9:37:27:3D:0D:32:D6
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:33:d4:48:2e:a3:cc:4a:66:79:84:65:13:be:6c:08:7e:
         8e:fc:b0:fb:4b:aa:aa:32:31:df:64:f9:47:31:f8:6e:14:51:
         ed:fe:56:c2:fc:5b:f1:99:b0:b5:4e:6d:91:82:e9:3c:22:83:
         4e:76:fa:38:f0:92:e1:1c:11:51:ca:32:22:35:21:5e:2a:91:
         1e:d5:6a:28:8f:87:ee:e8:ea:81:6a:13:5f:15:65:1b:12:fa:
         92:78:0c:90:26:32:d5:52:53:2a:08:43:5b:d2:26:b6:db:99:
         c8:60:c2:1e:b8:bb:e1:a2:1e:a6:8b:69:4c:46:6c:42:56:a3:
         6e:30:62:fe:3d:ad:d3:52:9f:da:00:62:4a:86:d9:da:e2:7a:
         6a:73:2d:ff:16:21:23:fb:b4:f3:bd:04:d0:e8:e5:81:6e:66:
         94:ef:1e:f8:9f:2c:7c:d5:79:54:2a:84:87:cf:40:23:9b:23:
         3d:54:1b:75:12:3f:47:86:d1:f2:da:fe:c6:f8:4c:8b:9c:bd:
         f4:47:28:33:e1:92:fc:f7:14:1c:74:36:d4:6e:24:ac:58:0b:
         4c:88:33:a9:e3:fc:d9:fc:61:15:fe:d9:c6:7c:f8:28:63:5a:
         ec:25:51:3f:68:e7:df:54:32:d6:21:f2:45:2c:be:a2:ce:64:
         fc:d9:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:40:29 2026 by rpki-client