Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Sw6cYeuHgXzc8mgONNjXAzZqQiPd4NwV3KHHbws35ts=
Subject key identifier:   4D:DD:69:3A:F7:33:0B:6E:EC:B7:95:F8:5C:A6:4C:2F:4F:80:3A:3F
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       16B905D45F4A64FBF795722735879C0DEA215D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03B9
Signing time:             Thu 02 Apr 2026 21:04:06 +0000
Manifest this update:     Thu 02 Apr 2026 20:59:06 +0000
Manifest next update:     Fri 03 Apr 2026 23:37:06 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: k5jkGJgnbxTJ5H/bcKNhHflgF71N6sa3XNpTqK+jHq0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 Apr 2026 23:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:05:d4:5f:4a:64:fb:f7:95:72:27:35:87:9c:0d:ea:21:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr  2 20:59:06 2026 GMT
            Not After : Apr  3 23:37:06 2026 GMT
        Subject: CN=4DDD693AF7330B6EECB795F85CA64C2F4F803A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:6d:dc:f3:96:b7:db:73:69:1d:68:50:bb:
                    a6:89:dc:26:14:ac:e9:e2:97:2c:f7:7b:09:57:b1:
                    17:1b:4d:ee:88:db:f8:9c:aa:c3:04:ed:f8:d8:68:
                    db:a8:99:a8:0e:2f:46:67:da:7e:b8:be:79:9e:0e:
                    2d:f3:b1:ef:1f:5b:0c:62:17:67:bc:2c:4d:37:09:
                    88:86:a9:75:06:42:a6:48:11:1c:f0:10:22:b5:1e:
                    f2:4c:e6:42:cf:8a:d9:f9:05:34:3c:dd:b8:a3:24:
                    17:df:03:cf:38:04:58:1f:98:42:66:ac:6f:9b:bf:
                    d9:2e:b8:74:8d:4b:4e:df:d7:a6:e1:89:0c:78:76:
                    78:a3:6e:ce:b4:9d:d7:ad:41:2c:77:17:6b:85:ed:
                    21:65:42:99:93:17:1e:51:b0:f4:04:8a:cc:a5:68:
                    86:62:a7:3d:69:42:0a:7d:98:35:2d:86:28:a9:6b:
                    e1:cb:f4:40:77:87:9e:75:a4:70:96:35:9d:ad:98:
                    aa:1d:fd:bb:01:ef:b0:fe:09:81:b2:b9:39:67:76:
                    e7:5b:d5:9e:b8:9c:7c:cb:22:f4:28:e4:46:a2:81:
                    06:b2:0b:c4:57:38:ae:01:70:5a:95:03:78:d7:d0:
                    4c:64:31:85:c5:3c:c8:6f:cb:85:aa:4b:04:76:af:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DD:69:3A:F7:33:0B:6E:EC:B7:95:F8:5C:A6:4C:2F:4F:80:3A:3F
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:20:91:52:37:8a:9a:2e:dc:1e:9d:ff:67:8f:5b:59:23:cf:
         13:cc:8a:c2:26:54:28:68:6a:d0:34:d2:73:cc:5d:01:4e:ef:
         3b:bc:31:71:d3:50:e4:e7:e2:b7:6a:b2:e0:08:8a:12:49:cc:
         86:13:69:93:e7:d0:ae:29:dc:01:c5:e7:b8:bd:d2:18:08:c4:
         e9:ad:b7:ac:a4:7c:c4:a7:38:70:dd:84:9f:ad:7c:95:f5:e2:
         5b:68:ec:a2:6c:aa:b4:35:a0:4f:02:af:45:5d:b0:cb:07:70:
         da:e1:3d:58:6a:31:43:b4:d7:9f:7c:bf:ce:75:10:c8:95:ae:
         f0:43:6a:dd:63:c3:b1:66:9a:38:5b:b1:80:5f:c7:e3:9e:e9:
         41:92:d1:b8:8d:d4:e3:fe:09:45:11:74:52:10:77:0c:7b:b5:
         2a:a0:ce:f8:9d:8a:3d:cf:d1:a2:f8:5a:7a:1f:f9:fc:40:fb:
         41:8e:a9:44:d4:f7:49:f6:59:d1:f4:14:6f:f3:3f:8b:55:98:
         32:5e:c5:06:10:6c:03:e1:77:01:e6:e1:39:39:24:fb:b5:be:
         38:94:4b:86:82:c0:1b:29:11:7c:f9:ef:4d:dd:bb:cc:38:ba:
         7a:33:35:48:d4:af:91:af:0d:01:31:34:86:1b:3d:d7:fb:b5:
         57:bc:d4:ed
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFrkF1F9KZPv3lXInNYecDeohXVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA0MDIyMDU5MDZaFw0yNjA0MDMyMzM3MDZaMDMxMTAvBgNV
BAMTKDREREQ2OTNBRjczMzBCNkVFQ0I3OTVGODVDQTY0QzJGNEY4MDNBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtW3c85a323NpHWhQu6aJ3CYU
rOnilyz3ewlXsRcbTe6I2/icqsME7fjYaNuomagOL0Zn2n64vnmeDi3zse8fWwxi
F2e8LE03CYiGqXUGQqZIERzwECK1HvJM5kLPitn5BTQ83bijJBffA884BFgfmEJm
rG+bv9kuuHSNS07f16bhiQx4dnijbs60ndetQSx3F2uF7SFlQpmTFx5RsPQEisyl
aIZipz1pQgp9mDUthiipa+HL9EB3h551pHCWNZ2tmKod/bsB77D+CYGyuTlndudb
1Z64nHzLIvQo5EaigQayC8RXOK4BcFqVA3jX0ExkMYXFPMhvy4WqSwR2r/GVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTd1pOvczC27st5X4XKZML0+AOj8wHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASCRUjeKmi7cHp3/Z49b
WSPPE8yKwiZUKGhq0DTSc8xdAU7vO7wxcdNQ5Ofit2qy4AiKEknMhhNpk+fQrinc
AcXnuL3SGAjE6a23rKR8xKc4cN2En618lfXiW2jsomyqtDWgTwKvRV2wywdw2uE9
WGoxQ7TXn3y/znUQyJWu8ENq3WPDsWaaOFuxgF/H457pQZLRuI3U4/4JRRF0UhB3
DHu1KqDO+J2KPc/Rovhaeh/5/ED7QY6pRNT3SfZZ0fQUb/M/i1WYMl7FBhBsA+F3
AebhOTkk+7W+OJRLhoLAGykRfPnvTd27zDi6ejM1SNSvka8NATE0hhs91/u1V7zU
7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 3 04:02:54 2026 by rpki-client