Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          9AiGExBW5l7qtF+o8ijShihAqohpmhmGQwBh0eFZD2Y=
Subject key identifier:   8B:2C:19:F6:C8:F5:A8:D0:F4:10:37:DF:26:2F:31:BA:EA:5C:80:4F
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       25D8B1313E9F738F3124E05D4F682696C0792D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03BD
Signing time:             Sun 05 Apr 2026 19:54:06 +0000
Manifest this update:     Sun 05 Apr 2026 19:49:06 +0000
Manifest next update:     Mon 06 Apr 2026 20:12:06 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: vBlH5uNvnrSAEjSYhrdaZ7zxEDRJ41vp1dxFcZE4PfY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Apr 2026 20:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d8:b1:31:3e:9f:73:8f:31:24:e0:5d:4f:68:26:96:c0:79:2d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr  5 19:49:06 2026 GMT
            Not After : Apr  6 20:12:06 2026 GMT
        Subject: CN=8B2C19F6C8F5A8D0F41037DF262F31BAEA5C804F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:78:67:57:89:b6:2a:d6:aa:dd:fb:54:c6:
                    66:e8:a9:66:2a:10:4c:30:ac:db:cd:41:47:16:35:
                    4d:9b:e2:c9:a2:20:84:58:f9:f9:16:e1:2b:bb:f8:
                    55:36:d6:89:05:a3:a5:63:27:0f:25:45:19:bc:b6:
                    73:43:3b:df:e9:9a:3e:3f:05:4d:c1:52:e8:c9:65:
                    23:b5:16:5e:60:6c:80:b2:8c:6f:5c:b8:e9:ad:cf:
                    9d:99:ae:1d:f4:76:97:7f:5f:b8:5a:e1:22:98:ed:
                    1a:d4:fa:99:0f:fb:af:1a:f9:7b:4c:88:bc:de:c6:
                    17:d2:33:52:81:ae:a0:67:56:f5:a1:59:4a:5e:88:
                    23:65:bd:50:4f:67:28:74:1a:2b:f5:2a:99:40:d9:
                    74:17:5d:bd:aa:5e:42:b4:d7:2c:35:d6:93:af:fa:
                    b4:e3:fc:1b:1d:c5:3d:26:39:fd:90:4c:17:bb:37:
                    6a:11:68:5f:d3:8d:0b:8e:01:c1:77:b5:73:f3:06:
                    ee:de:ab:48:64:31:a2:12:89:ae:5d:21:0d:c7:4b:
                    82:03:88:e3:a0:a4:50:2a:4a:ef:9c:dc:2e:cb:3a:
                    5d:b2:70:46:9f:67:eb:53:1e:46:57:c0:89:b3:88:
                    c5:52:40:c5:a1:67:8d:07:7f:27:c7:6a:c2:56:87:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2C:19:F6:C8:F5:A8:D0:F4:10:37:DF:26:2F:31:BA:EA:5C:80:4F
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:26:e5:e5:0f:99:38:bc:d2:26:32:82:1a:f9:5f:ae:50:
         5e:f5:30:9c:39:1f:fe:6c:3a:6b:af:1b:30:25:48:a8:f7:ab:
         37:b2:c4:c2:7c:72:5f:31:55:85:7b:c3:b8:d3:e4:94:41:66:
         88:a2:d8:40:21:4e:f9:c2:86:45:9f:31:8c:5f:0a:49:08:1d:
         1d:4c:05:95:4a:4d:a6:27:53:5a:a5:20:f2:d6:9e:9d:67:99:
         35:7d:86:0a:ee:33:42:13:5e:d2:c3:ff:31:1e:bc:70:22:d7:
         79:39:72:fa:b0:c7:ba:4d:87:ee:1c:2b:5a:90:1f:b6:74:ac:
         68:87:34:09:01:45:69:5c:94:67:d6:68:f2:fa:8f:6e:82:fe:
         c8:97:36:78:34:ee:56:2b:7f:0f:a2:b8:b2:31:0b:4f:51:bc:
         7b:91:44:eb:24:76:33:76:9b:db:55:b3:f2:a1:7d:ca:6d:c6:
         99:d3:35:ba:22:6b:22:d8:f5:10:79:87:9b:ae:aa:0f:b2:a2:
         26:e1:6c:cc:03:92:04:c1:09:f1:8f:f0:8c:7b:df:f5:2a:6e:
         f0:de:aa:1c:d5:c5:f6:73:33:4d:44:20:38:6c:07:69:2d:50:
         88:e6:38:9f:26:cd:66:9a:bc:57:53:03:55:77:2e:c1:20:2c:
         05:f6:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 04:57:40 2026 by rpki-client