Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          a0HtNsdiH5bQL/K+VqO4uOm6swM6aDhSdeC/rp37r6E=
Subject key identifier:   AB:32:56:06:B1:2B:5E:8A:BC:0A:A6:01:7E:76:36:95:0F:58:22:D7
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       593E98736B0C645E6C9498831C3BF81FE092555A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04AD
Signing time:             Mon 28 Sep 2026 17:39:10 +0000
Manifest this update:     Mon 28 Sep 2026 17:34:10 +0000
Manifest next update:     Tue 29 Sep 2026 17:40:10 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: edOc4jtiHvOhiHjWWBHNrbeOffYTQD44+WBrJSqWat4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3e:98:73:6b:0c:64:5e:6c:94:98:83:1c:3b:f8:1f:e0:92:55:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 28 17:34:10 2026 GMT
            Not After : Sep 29 17:40:10 2026 GMT
        Subject: CN=AB325606B12B5E8ABC0AA6017E7636950F5822D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:8f:9e:08:20:8f:b2:10:b9:1c:3f:67:75:
                    60:b2:13:3c:1d:ac:6e:fa:da:ed:a6:4f:f8:92:8f:
                    2c:c6:11:95:2b:e3:9d:65:4a:00:f0:e5:67:16:5a:
                    de:4d:ca:24:51:d0:fb:e5:8f:34:17:a0:eb:12:47:
                    55:ab:fb:c9:ff:44:77:d0:20:59:77:80:6c:7b:af:
                    c3:b5:2e:72:ca:7e:fb:1a:84:f4:56:ee:fe:1f:ad:
                    f5:c8:14:6b:45:ae:21:10:97:11:4d:74:0c:3c:ea:
                    1e:7f:17:2d:26:02:58:09:37:e1:85:a3:aa:b2:4a:
                    dc:f0:fe:1e:3e:ca:07:1d:a5:bc:da:90:a8:4b:dc:
                    83:85:ec:19:d2:55:66:49:74:04:78:42:02:e2:90:
                    3d:45:8b:82:d5:98:6c:3b:6b:ca:4a:72:bd:32:80:
                    d9:ea:d8:95:15:fa:ea:2e:eb:1c:93:10:e9:1f:9c:
                    7a:2f:09:87:f9:85:f9:9c:d6:43:5b:7f:0b:9d:9e:
                    00:dc:e4:a7:d3:b6:98:f5:be:21:e5:f9:b2:87:d7:
                    bf:f7:1a:ae:f2:db:7b:61:bb:7f:97:19:e7:2c:54:
                    d8:d6:8f:f8:c0:d8:94:7a:2c:d6:03:79:fd:bc:14:
                    3e:84:0b:e4:09:f1:a3:06:1d:68:6f:fa:fb:00:1f:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:56:06:B1:2B:5E:8A:BC:0A:A6:01:7E:76:36:95:0F:58:22:D7
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:75:b8:b7:a7:cb:54:10:9e:2e:54:4d:d9:93:cc:89:03:
         f9:f8:4d:81:63:7b:15:cf:4c:3b:c0:1c:56:d1:e9:d7:a6:67:
         32:a5:ce:58:48:9e:4f:87:fc:81:0a:6d:06:95:bd:a5:87:87:
         22:ea:85:58:b4:c3:7c:9d:c6:3c:17:87:04:47:b3:ff:a9:7b:
         f5:99:b3:ca:73:7f:49:79:ee:35:ea:c4:a8:2b:fa:7d:8b:8f:
         8c:0a:67:4c:c1:79:cc:d1:ee:6a:7f:40:c5:e6:bd:30:07:c9:
         7d:0f:69:c5:f1:0f:bd:f6:ec:05:23:3e:96:0e:57:29:05:36:
         b4:70:91:4d:2a:77:ae:a5:78:48:e0:5c:d7:35:7e:68:ae:9e:
         ea:e7:82:02:3d:7c:90:63:1b:b2:a5:65:ee:f9:22:d4:c5:0c:
         bc:59:f1:00:a7:4f:83:c2:05:36:3f:01:d3:f8:eb:c6:eb:5e:
         72:14:a3:2e:f6:90:79:eb:72:4e:77:5b:91:49:84:04:0b:76:
         bb:9c:97:6f:09:b6:d5:7b:70:8f:18:6c:a6:62:62:96:e3:1d:
         b1:d7:53:61:53:78:05:d4:83:ee:1b:b0:b5:97:93:05:23:44:
         98:64:78:9a:cd:84:59:0b:4e:36:ad:40:d3:53:e3:55:0f:49:
         a6:88:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:24:02 2026 by rpki-client