Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          oEeCQTow6Z0fNEowQrD4IPM4S8pKsjdo0rfufBYv2kE=
Subject key identifier:   50:1D:5D:88:0E:C1:49:B6:72:17:64:F8:91:02:69:FC:72:F5:00:C4
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       2860ED0CE928D69D5CA3A44368CD9AC317D142EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04D6
Signing time:             Thu 29 Oct 2026 02:43:16 +0000
Manifest this update:     Thu 29 Oct 2026 02:38:16 +0000
Manifest next update:     Fri 30 Oct 2026 03:41:16 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 8mpZiCp/1ePTx66YhJ9BuEeUZZHi2OqrgBsoF9zx8NE=)
                          2: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:60:ed:0c:e9:28:d6:9d:5c:a3:a4:43:68:cd:9a:c3:17:d1:42:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 29 02:38:16 2026 GMT
            Not After : Oct 30 03:41:16 2026 GMT
        Subject: CN=501D5D880EC149B6721764F8910269FC72F500C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:48:b7:60:fd:fb:31:6f:cb:db:f9:87:49:
                    b6:ed:76:4f:5f:fc:4d:ec:4f:47:bb:6d:dd:6e:ef:
                    9f:ff:2e:31:4b:a3:6e:15:24:4c:6f:36:1c:c3:95:
                    3b:d1:ef:bb:d5:54:10:f3:06:f3:ee:6b:0d:3d:ca:
                    0f:cf:54:76:7d:66:63:8a:c4:75:90:96:e0:0c:02:
                    af:de:31:ce:c5:7f:fa:17:01:45:e0:4c:3e:f6:fa:
                    4c:0b:21:37:d3:e2:99:2a:59:1d:92:49:e2:36:71:
                    66:ed:1a:8b:7a:34:a9:29:b2:1c:72:24:37:54:9f:
                    7c:67:32:25:06:1f:00:6c:75:15:77:d2:d5:12:71:
                    2a:e9:d4:87:a3:79:b6:bf:67:96:02:75:17:96:f9:
                    3f:ff:9e:0d:82:a6:59:c6:45:59:46:ed:ad:31:31:
                    fe:88:e5:d3:81:45:de:42:45:f3:e1:f2:1f:04:a1:
                    af:5e:73:41:f4:da:a2:ca:52:41:6f:47:ab:c1:e2:
                    64:44:89:5d:0c:23:03:68:11:f6:41:73:9a:38:1c:
                    2a:b3:6c:83:8d:8a:cc:91:67:9b:69:b7:4a:41:76:
                    df:97:62:d3:97:c6:97:1b:55:79:79:29:21:5c:68:
                    e8:81:91:8a:89:2e:60:7b:72:d6:87:83:be:a1:a6:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1D:5D:88:0E:C1:49:B6:72:17:64:F8:91:02:69:FC:72:F5:00:C4
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:66:c5:78:e8:0c:bd:df:61:48:de:66:0f:0f:f5:42:b2:af:
         40:dc:ac:82:b9:aa:b5:0b:ef:ea:4c:d1:f9:ad:a7:2d:88:10:
         14:92:15:a7:4e:15:f7:3d:fd:f4:59:39:7b:75:e2:4a:1e:1e:
         3a:c2:27:35:21:30:bd:87:39:6f:b8:d6:40:b9:bf:20:d0:13:
         ad:f1:e3:ac:27:70:15:1f:dd:63:6b:cf:b6:d4:c8:9b:8c:39:
         9a:01:75:32:52:bb:bb:f9:11:b1:ad:f5:e5:0c:4f:fb:2a:e7:
         cd:cb:08:af:2b:b6:5d:e5:b4:d7:59:84:7d:fb:54:fa:23:de:
         ef:c8:b9:56:d7:59:2f:8e:f7:5f:8d:25:e6:a2:26:aa:99:31:
         db:6e:e3:34:e9:2c:44:0e:02:63:c8:c8:1c:b2:6d:e4:fe:0c:
         53:a3:ec:82:c3:15:bd:76:70:05:3f:58:d0:51:ec:a0:81:e8:
         58:cf:d8:8c:af:7e:7c:ff:0d:eb:bf:b5:f5:73:fc:22:2e:16:
         ca:bb:f4:23:23:d5:d9:18:a6:be:77:05:65:65:1a:d3:ca:cb:
         1e:9f:2e:06:4c:e8:2a:f2:8f:f0:54:63:4f:3d:11:97:73:1b:
         d1:4e:34:24:c9:61:43:99:ef:de:e6:54:af:43:b9:43:24:56:
         7c:e2:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:41:52 2026 by rpki-client