Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          UH9Ao14div2A6uzfpGrFPTNk+vlyj05eejMYQ6i+K9g=
Subject key identifier:   4E:C1:37:22:61:A5:40:FF:98:B3:27:82:E8:71:15:BE:33:15:B6:A7
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       042DEE324DFD9FC7BEDC0DABE7566CE75542782B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04C0
Signing time:             Mon 12 Oct 2026 13:44:15 +0000
Manifest this update:     Mon 12 Oct 2026 13:39:15 +0000
Manifest next update:     Tue 13 Oct 2026 15:57:15 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: fnpTvV0A6YN9lV68X1ZKEXSOdN55gTEh4b9sKwOtS2o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2d:ee:32:4d:fd:9f:c7:be:dc:0d:ab:e7:56:6c:e7:55:42:78:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 12 13:39:15 2026 GMT
            Not After : Oct 13 15:57:15 2026 GMT
        Subject: CN=4EC1372261A540FF98B32782E87115BE3315B6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:e1:d8:aa:22:8d:e7:5e:1e:e3:48:26:7c:
                    f8:9b:78:87:50:f1:fd:e0:c6:04:ab:b6:a1:d5:6d:
                    d2:67:40:ef:f4:dd:a4:4f:d2:2f:d3:d0:8b:31:2c:
                    ef:1c:96:45:1e:c9:58:7a:7c:6d:76:26:e4:95:6c:
                    f9:59:d5:e6:eb:0e:0f:34:21:3a:62:81:da:f9:59:
                    c6:7e:02:f9:dc:6e:04:bf:df:b8:07:64:09:77:23:
                    a1:bd:07:0e:b0:83:18:9f:9e:d4:7b:63:b2:1f:6b:
                    ae:49:7b:4e:b3:f6:e9:70:27:36:f5:b1:ec:1f:37:
                    b2:e3:91:75:24:0f:b0:25:fe:a6:36:9a:fd:ab:e3:
                    dd:79:9f:ce:80:9d:8e:ff:06:f7:2d:65:96:82:29:
                    5b:dd:c3:a4:d5:79:06:b9:85:a1:8e:e9:4e:35:7e:
                    90:01:e3:55:e9:e3:fd:a6:a3:fe:70:8b:ad:39:b5:
                    34:72:a3:db:85:a6:3e:2f:45:5d:86:84:f2:09:c0:
                    82:9b:db:3e:f3:1e:1b:d4:21:8d:37:52:09:03:63:
                    50:c6:49:b5:23:96:6f:ed:f8:54:99:12:0f:69:b1:
                    4b:58:29:ca:b1:28:b0:05:a6:25:6a:ae:11:a9:3c:
                    f5:1d:2d:01:36:b9:a0:40:7f:03:96:1e:ca:b1:d0:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:37:22:61:A5:40:FF:98:B3:27:82:E8:71:15:BE:33:15:B6:A7
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:75:19:d5:f3:5a:2f:13:a1:bb:f6:a2:4e:ee:24:c2:15:fd:
         93:90:12:fc:ba:71:37:d1:10:17:c1:62:be:0f:a2:0e:68:26:
         ef:86:1d:1b:03:f9:1c:55:6a:82:82:b4:98:aa:55:51:ad:82:
         2a:6a:91:cc:9d:62:57:3d:37:c4:5e:db:05:f5:b5:85:83:02:
         6b:11:ac:e8:f5:ea:c5:a7:c0:08:63:02:ee:f2:d1:5c:84:39:
         98:99:10:cb:f9:34:46:91:80:b5:25:54:78:fe:9d:74:9d:54:
         c7:51:e4:2c:52:cb:9f:3d:ad:d5:2f:88:32:7b:11:46:4e:e9:
         b3:42:23:44:7f:8a:e1:92:c6:15:84:5c:87:ce:db:ca:c9:fc:
         3f:bb:2e:78:2b:de:b9:39:41:07:16:eb:81:aa:e0:9d:75:24:
         4f:6a:3e:6f:70:8f:02:38:e8:c5:ff:75:69:98:ed:17:6e:49:
         e2:dd:1c:52:13:71:71:32:f0:42:13:83:1e:05:69:d5:1a:b3:
         57:db:5d:fc:ce:8b:5f:37:28:df:c4:cb:5e:da:7d:ea:a9:91:
         a6:34:2b:88:58:c5:e8:03:59:e7:62:95:db:db:20:d1:4b:fb:
         43:d8:4e:40:6a:7c:88:88:7d:f7:46:93:7a:d7:a4:5e:51:54:
         0e:b9:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:16:14 2026 by rpki-client