Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          sBRBD8yMgokNZXcj6T76QrmkvKNXLnMMQLQCTIlVuLQ=
Subject key identifier:   75:77:08:5C:A9:07:5D:D8:8D:CE:97:6C:F5:CD:8E:C0:7E:72:4B:84
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       6C336CC5C146841C12AF729BD7296CE134747099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0475
Signing time:             Tue 18 Aug 2026 10:13:52 +0000
Manifest this update:     Tue 18 Aug 2026 10:08:52 +0000
Manifest next update:     Wed 19 Aug 2026 12:58:52 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: N81uV3+9toIwuBSV1NrmAU7MXjGmfBDgpNBkrkdSB1g=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Aug 2026 12:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:33:6c:c5:c1:46:84:1c:12:af:72:9b:d7:29:6c:e1:34:74:70:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Aug 18 10:08:52 2026 GMT
            Not After : Aug 19 12:58:52 2026 GMT
        Subject: CN=7577085CA9075DD88DCE976CF5CD8EC07E724B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:a6:d0:de:9f:6a:85:ea:8f:8a:79:ad:32:
                    f6:89:fc:a5:d9:67:fb:1f:1f:9b:7a:40:03:b6:05:
                    61:c5:19:9d:ec:c9:8f:59:ad:38:dd:36:3b:1b:7d:
                    da:6d:85:b7:be:47:04:6c:a8:82:2d:f3:f0:8c:3f:
                    df:80:6c:41:d8:19:17:35:dc:3d:46:61:e0:ac:11:
                    04:11:dd:f3:d6:7f:db:3e:e1:c0:28:6d:d4:16:78:
                    34:79:0c:1a:2c:35:65:73:60:1a:76:e8:55:12:1e:
                    9a:ab:dd:3f:e0:4e:36:0d:25:65:ba:34:70:1c:5f:
                    c4:45:de:c4:3a:37:78:ca:47:61:cf:da:a7:33:e8:
                    cb:bd:48:02:74:af:30:e2:4c:11:e5:4e:51:ee:88:
                    27:aa:c7:a0:f6:13:5d:5f:03:d0:8e:e5:77:69:3d:
                    a3:14:fa:a7:fc:dc:d0:db:fb:30:da:1a:39:64:75:
                    43:76:24:ac:62:54:5f:80:e4:2f:94:da:f6:4b:9a:
                    62:70:2e:a5:1d:39:15:89:39:2b:ff:a4:8f:cb:83:
                    1e:c9:61:a8:c3:8e:1b:8c:68:49:02:74:06:2f:54:
                    9b:b9:d3:58:27:36:ba:5d:b1:8c:7c:3b:18:15:29:
                    1e:7a:63:d7:43:d3:d7:db:af:10:1c:29:ba:3f:c3:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:08:5C:A9:07:5D:D8:8D:CE:97:6C:F5:CD:8E:C0:7E:72:4B:84
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:bb:96:37:e9:5b:13:c8:6c:79:db:69:90:ac:6a:43:27:
         55:e5:77:3c:27:d8:cc:ce:4a:33:0b:ee:73:48:a5:27:b4:2e:
         f5:5e:54:9c:98:99:aa:95:eb:ce:89:5b:70:47:08:32:27:9d:
         d5:f5:42:e4:30:11:d4:4c:97:20:3b:4a:94:43:d2:5d:ce:af:
         fa:af:82:89:d8:05:06:d4:f8:e1:e1:8b:66:fe:4e:87:e4:ca:
         56:fa:09:e8:13:97:7b:93:f6:77:f4:b1:e5:b4:2c:a8:22:90:
         6f:be:2f:a4:b7:8d:55:2b:ab:af:1f:ef:a4:fb:2e:c8:ac:62:
         00:d2:64:f6:88:45:72:8c:39:91:9f:65:1a:c0:12:3e:dc:82:
         b4:d1:02:a4:f5:22:97:93:41:d2:34:64:6d:13:10:33:61:91:
         0b:b3:af:12:49:8b:f8:f4:02:bb:a6:ab:3d:6b:fe:b5:6a:2c:
         11:a4:7d:86:02:33:d4:f2:d0:10:09:fd:e9:ba:4f:9c:21:f3:
         40:6e:bf:9a:34:5d:12:66:d4:d1:3c:49:1a:b3:fc:45:00:dc:
         75:8c:84:51:52:0f:83:39:62:52:38:e3:b6:65:50:ae:b6:07:
         c5:7d:22:8f:d6:97:b3:5a:9d:1f:b2:cb:11:fa:10:8c:f8:84:
         e9:7d:d3:03
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbDNsxcFGhBwSr3Kb1yls4TR0cJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA4MTgxMDA4NTJaFw0yNjA4MTkxMjU4NTJaMDMxMTAvBgNV
BAMTKDc1NzcwODVDQTkwNzVERDg4RENFOTc2Q0Y1Q0Q4RUMwN0U3MjRCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEKbQ3p9qheqPinmtMvaJ/KXZ
Z/sfH5t6QAO2BWHFGZ3syY9ZrTjdNjsbfdpthbe+RwRsqIIt8/CMP9+AbEHYGRc1
3D1GYeCsEQQR3fPWf9s+4cAobdQWeDR5DBosNWVzYBp26FUSHpqr3T/gTjYNJWW6
NHAcX8RF3sQ6N3jKR2HP2qcz6Mu9SAJ0rzDiTBHlTlHuiCeqx6D2E11fA9CO5Xdp
PaMU+qf83NDb+zDaGjlkdUN2JKxiVF+A5C+U2vZLmmJwLqUdORWJOSv/pI/Lgx7J
YajDjhuMaEkCdAYvVJu501gnNrpdsYx8OxgVKR56Y9dD09fbrxAcKbo/w20LAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdXcIXKkHXdiNzpds9c2OwH5yS4QwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP67ljfpWxPIbHnbaZCs
akMnVeV3PCfYzM5KMwvuc0ilJ7Qu9V5UnJiZqpXrzolbcEcIMied1fVC5DAR1EyX
IDtKlEPSXc6v+q+CidgFBtT44eGLZv5Oh+TKVvoJ6BOXe5P2d/Sx5bQsqCKQb74v
pLeNVSurrx/vpPsuyKxiANJk9ohFcow5kZ9lGsASPtyCtNECpPUil5NB0jRkbRMQ
M2GRC7OvEkmL+PQCu6arPWv+tWosEaR9hgIz1PLQEAn96bpPnCHzQG6/mjRdEmbU
0TxJGrP8RQDcdYyEUVIPgzliUjjjtmVQrrYHxX0ij9aXs1qdH7LLEfoQjPiE6X3T
Aw==
-----END CERTIFICATE-----
Generated at Tue Aug 18 18:28:53 2026 by rpki-client