Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          7wSVEnhScrZ06PvphkGtOR0QmUBLLLRu6x7nJqNSmbc=
Subject key identifier:   10:72:0E:54:3A:7E:F0:E3:53:59:A4:53:A1:EC:9C:FB:30:16:5D:5E
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4B2686A64E75D8A00D8836A753099D665D1D0390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04E8
Signing time:             Mon 09 Nov 2026 21:03:23 +0000
Manifest this update:     Mon 09 Nov 2026 20:58:23 +0000
Manifest next update:     Tue 10 Nov 2026 21:45:23 +0000
Files and hashes:         1: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: JP7gPim57oRRgd04cGfRg2VRWeY8KLjaLbr9gSTrAqY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 21:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:26:86:a6:4e:75:d8:a0:0d:88:36:a7:53:09:9d:66:5d:1d:03:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  9 20:58:23 2026 GMT
            Not After : Nov 10 21:45:23 2026 GMT
        Subject: CN=10720E543A7EF0E35359A453A1EC9CFB30165D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:85:d6:04:71:61:f7:ee:80:62:a4:c1:cd:
                    21:91:87:c3:55:92:c8:05:06:bc:ab:45:28:95:ba:
                    ea:2a:2e:a9:1d:c5:92:c5:79:4d:01:fb:de:45:a1:
                    af:d3:fd:33:79:bc:6d:b3:26:6e:02:45:60:b8:17:
                    b4:4c:9c:45:14:f4:28:59:1d:f5:4a:c5:34:a9:4a:
                    b1:0f:a2:1c:f2:93:cc:61:d1:23:e9:5c:f2:39:a1:
                    28:a5:f5:93:c9:49:fc:d5:fa:cc:fe:4a:0e:ff:73:
                    1a:cd:9b:f3:91:b3:93:82:ca:f0:1e:a0:5e:da:7e:
                    0c:03:40:b8:04:8f:ce:3a:29:fc:0d:f3:dc:95:a5:
                    8c:bd:4a:a0:2d:9c:e0:ed:cc:7f:f3:8e:f3:88:88:
                    b6:67:d7:25:3c:7d:29:ae:4d:50:b5:c2:d8:b3:06:
                    70:0f:4c:15:51:c9:6c:fe:0e:99:72:d0:57:00:78:
                    ee:f5:97:4a:8a:a2:13:7f:fc:b3:c3:c3:ee:9f:8b:
                    b9:f8:9d:bd:bd:74:49:52:6f:b4:63:9a:34:96:7c:
                    5f:4f:3c:cc:46:9e:f6:c3:43:46:ea:fa:c0:e2:73:
                    0c:05:27:2d:0b:b9:79:8e:25:37:8e:cb:94:7f:35:
                    a2:b7:2e:fc:38:84:ca:88:37:7a:7d:b6:1f:22:c4:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:72:0E:54:3A:7E:F0:E3:53:59:A4:53:A1:EC:9C:FB:30:16:5D:5E
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:89:68:e1:d6:94:2f:9f:9a:e4:df:57:80:86:ff:b7:0e:
         3d:57:0d:4f:30:aa:5b:96:27:b2:3f:73:60:d0:8d:02:b1:dc:
         36:6f:ec:b7:c9:a4:2d:9c:62:64:a4:96:36:9e:4e:9c:ea:db:
         9f:6b:ab:79:8b:9b:1e:78:bb:ec:9f:0f:a6:79:3d:ef:4a:af:
         87:4f:12:21:40:71:90:43:cd:bc:56:ef:b7:ea:bb:2c:0f:42:
         b1:01:96:b9:ee:c0:32:2f:2f:bb:d7:8f:77:db:1a:f1:39:41:
         63:c9:98:0a:44:a2:18:f8:ba:75:c6:94:83:70:a6:92:a6:12:
         55:e5:81:bf:0c:7d:ba:16:4d:e9:16:2b:c3:f0:b9:2d:a7:01:
         d0:a9:14:9a:48:90:60:04:24:9f:5f:9e:90:66:d1:e5:76:d9:
         0a:2c:47:ce:11:7a:98:02:cf:af:b3:22:7c:c8:d9:07:7f:d6:
         e7:c8:ce:47:f0:38:4c:b2:c3:a9:94:12:01:8d:54:f9:2f:b1:
         fa:4a:06:9b:a1:99:55:03:c1:c5:9a:08:d1:ee:09:72:95:e7:
         37:d1:2d:0d:6c:07:3f:10:22:34:ae:20:15:8d:15:6f:69:30:
         46:e3:e2:bd:3a:27:6c:6b:ba:c9:46:1c:8d:2f:80:d8:e9:86:
         2e:9b:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:09:56 2026 by rpki-client