Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Vax1svzrKHrowBVU8G3ZwLRReOzUbjcxsnpNyBOy1uc=
Subject key identifier:   75:C7:1E:6B:EC:29:DB:FC:A8:9A:49:78:60:2D:EF:EB:C5:24:3A:CA
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       7F36372B44CBC99BF80AB0EFEBD4C7A97653B9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04A4
Signing time:             Mon 21 Sep 2026 22:49:07 +0000
Manifest this update:     Mon 21 Sep 2026 22:44:07 +0000
Manifest next update:     Wed 23 Sep 2026 02:33:07 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 5EEK26tXpNTo+fxOAJlei/yyDzxwA82k8Dlif1JVNYQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:37:2b:44:cb:c9:9b:f8:0a:b0:ef:eb:d4:c7:a9:76:53:b9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 21 22:44:07 2026 GMT
            Not After : Sep 23 02:33:07 2026 GMT
        Subject: CN=75C71E6BEC29DBFCA89A4978602DEFEBC5243ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:6a:73:29:26:35:d3:0c:49:ae:00:69:1a:
                    4c:cb:bf:3b:0b:aa:b6:18:01:04:f5:16:b5:6b:46:
                    6a:3c:33:66:3c:03:53:2d:9c:b7:f6:23:6c:ef:e4:
                    2e:e4:c6:f4:46:b8:d9:04:c3:28:52:24:70:51:8f:
                    09:6f:4b:05:3f:6c:85:96:9b:c7:b1:4b:a2:0c:c5:
                    49:f7:21:42:6b:95:1f:51:00:75:05:52:e6:46:46:
                    96:e4:0a:23:e8:c7:3b:d8:0f:b4:f4:84:7d:ea:fd:
                    1a:47:79:25:c1:3c:32:eb:12:aa:ad:86:04:fa:25:
                    3d:e4:5d:0a:ef:0a:ac:72:12:03:75:8f:b8:ca:2f:
                    33:ab:69:64:03:43:42:25:36:9d:be:0a:d4:d5:54:
                    76:07:76:59:30:37:85:8a:c4:dd:2a:9b:63:eb:e7:
                    a4:83:78:24:68:82:c4:22:df:1a:37:c6:e1:55:81:
                    14:57:d2:a8:1c:dc:3e:33:95:b0:d0:7b:68:8e:fb:
                    90:31:49:a5:f8:53:8e:92:10:cf:17:9f:7b:66:cc:
                    7a:f8:8f:a8:16:36:04:a1:a3:9d:45:e1:09:24:e7:
                    40:dd:28:31:97:49:85:61:ca:50:86:47:c5:4c:bf:
                    de:e1:5a:da:22:86:00:9d:86:19:b8:a2:89:6c:1e:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C7:1E:6B:EC:29:DB:FC:A8:9A:49:78:60:2D:EF:EB:C5:24:3A:CA
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:8d:26:86:d9:e6:e3:8e:a4:36:68:da:b7:c0:f6:28:ed:
         0c:4c:70:5e:cd:4f:2d:e7:8c:a9:96:35:6b:78:04:b6:01:ca:
         f4:69:ff:30:4e:0f:71:2e:a2:ed:20:5d:1f:32:b9:70:fd:15:
         9b:5b:21:e7:d8:42:b3:43:10:f4:af:c4:a7:a1:15:a4:a9:47:
         0d:4d:d8:02:06:63:76:e1:7a:ee:3b:ca:e3:d5:35:1d:b5:27:
         4b:d9:f5:bb:b1:b0:49:c2:9c:94:42:e4:76:a0:93:96:5b:a2:
         dd:31:c9:78:48:b6:65:0b:a5:9b:9c:47:08:87:cd:54:d4:5b:
         a5:1a:78:13:29:f7:93:3c:6b:c7:23:ab:97:c5:93:ce:ae:d5:
         a2:b9:ff:2b:de:33:c2:41:9d:a7:3a:9c:26:2f:7a:55:d5:41:
         95:36:38:a2:36:fc:8b:b1:c4:fa:cc:58:f6:c7:6c:6f:1c:c0:
         31:91:30:f2:e4:43:4d:e2:31:29:bd:59:e3:1e:e6:d3:f0:82:
         84:d8:33:5f:4b:a2:ae:4f:28:1e:81:00:b2:35:b9:14:e3:99:
         75:3c:c7:e3:e8:31:ee:17:4b:43:aa:ca:67:86:19:53:7f:38:
         06:77:3c:89:26:4e:dc:9b:f4:de:6c:43:8e:4b:e0:0f:36:1a:
         12:34:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:06 2026 by rpki-client