Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          kX3tgscGIQL8KkqFqNQW4QJ1Sb+IgH0b/Hg4KM0O3Ic=
Subject key identifier:   E0:88:C4:E9:59:CD:0F:72:80:F8:E5:AA:D6:C8:86:36:09:CA:45:BA
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       159B7512626BA958DBD32AE030D5D669FC55AC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0249
Signing time:             Sat 05 Jul 2025 15:14:57 +0000
Manifest this update:     Sat 05 Jul 2025 15:09:57 +0000
Manifest next update:     Sun 06 Jul 2025 15:32:57 +0000
Files and hashes:         1: AS216107.asa (hash: cPuop4pbwWrqg2KspcT+JrKPt7Dz8kv0Dj2WzIb29Zo=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: yNqDwDYHhXXcKZOwmqxYn3TZsxLCUET/mU889w7jgFM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9b:75:12:62:6b:a9:58:db:d3:2a:e0:30:d5:d6:69:fc:55:ac:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jul  5 15:09:57 2025 GMT
            Not After : Jul  6 15:32:57 2025 GMT
        Subject: CN=E088C4E959CD0F7280F8E5AAD6C8863609CA45BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:a0:79:d6:31:3c:c8:12:88:23:79:a6:35:
                    7e:f5:a0:48:ec:b7:45:f0:00:7d:c6:fe:af:63:cc:
                    84:93:90:d3:b2:cb:98:67:bd:82:fe:d5:ba:37:fc:
                    74:89:a0:2c:27:f8:ae:06:22:55:87:fb:3f:6e:d6:
                    74:8c:45:85:7f:c7:26:6b:ba:81:8b:a1:6a:42:e3:
                    8e:d9:7b:30:23:eb:1e:fa:ea:dc:cc:f8:39:d7:01:
                    25:b7:07:dc:3f:a0:1f:73:f2:59:6b:73:9f:ed:b3:
                    91:fe:25:7b:00:51:24:bd:32:3a:00:bc:26:c7:71:
                    45:da:6b:1b:ab:f7:40:9e:97:da:f2:30:30:2f:cb:
                    3c:de:23:b6:f8:3e:06:cd:9a:df:81:19:5a:6a:03:
                    25:5d:69:cb:7c:50:fd:29:71:aa:8d:86:f3:f8:fe:
                    78:27:a2:a7:99:ad:03:7e:fb:b9:f9:cf:fc:30:73:
                    6d:2f:17:09:e1:d8:de:30:86:eb:4b:13:e6:ff:5a:
                    32:ce:1e:30:ab:15:7f:4e:10:da:7a:8d:18:48:b2:
                    bc:da:33:b2:a1:c2:15:73:91:18:01:19:84:ee:14:
                    d3:39:d5:15:b0:eb:d5:7e:57:0d:cb:17:6a:58:d6:
                    8f:8d:f4:bd:80:60:9a:4e:91:12:f5:b4:00:8b:b1:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:88:C4:E9:59:CD:0F:72:80:F8:E5:AA:D6:C8:86:36:09:CA:45:BA
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:04:16:68:97:be:21:e0:03:42:67:32:07:d5:88:87:fe:f1:
         e6:5d:5b:61:d8:c3:68:8b:1e:9f:69:f6:fc:07:f0:5a:c0:d4:
         c9:87:a8:a3:54:da:9c:b1:7d:68:7a:2c:49:75:be:3d:51:ff:
         c8:ca:69:72:80:5e:be:0c:bf:6a:a6:89:eb:47:44:24:7a:d6:
         a1:cf:65:81:2d:22:5c:18:fc:2c:80:ee:41:41:b0:cc:f3:77:
         49:a2:04:c5:c2:ed:c7:2f:04:bb:08:2c:fc:35:08:12:63:30:
         08:9e:dd:52:d9:b7:7d:46:15:1d:ad:d3:b3:24:3a:c9:f6:f2:
         3a:53:23:25:6b:38:f5:86:af:ab:0c:7f:c3:52:c4:05:7e:35:
         4e:83:64:3c:0b:19:b0:f9:b3:3d:f6:b9:16:84:cb:65:b9:ec:
         ef:3b:d6:88:d7:c7:d6:70:1c:15:e1:db:0e:6a:6f:7b:9b:32:
         33:b6:ca:75:50:33:f7:f4:f5:82:30:59:c5:00:f8:b3:18:f5:
         98:f8:09:d6:f8:38:cf:40:c8:a6:3d:84:20:90:cf:3d:77:fe:
         41:04:7e:24:66:dd:1f:62:f6:7d:78:01:b0:f7:e7:39:0d:e5:
         6e:65:e6:1f:a6:da:4e:56:b2:44:ca:0c:96:f6:70:02:93:54:
         72:67:ce:cc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFZt1EmJrqVjb0yrgMNXWafxVrEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNTA3MDUxNTA5NTdaFw0yNTA3MDYxNTMyNTdaMDMxMTAvBgNV
BAMTKEUwODhDNEU5NTlDRDBGNzI4MEY4RTVBQUQ2Qzg4NjM2MDlDQTQ1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSYqB51jE8yBKII3mmNX71oEjs
t0XwAH3G/q9jzISTkNOyy5hnvYL+1bo3/HSJoCwn+K4GIlWH+z9u1nSMRYV/xyZr
uoGLoWpC447ZezAj6x766tzM+DnXASW3B9w/oB9z8llrc5/ts5H+JXsAUSS9MjoA
vCbHcUXaaxur90Cel9ryMDAvyzzeI7b4PgbNmt+BGVpqAyVdact8UP0pcaqNhvP4
/ngnoqeZrQN++7n5z/wwc20vFwnh2N4whutLE+b/WjLOHjCrFX9OENp6jRhIsrza
M7KhwhVzkRgBGYTuFNM51RWw69V+Vw3LF2pY1o+N9L2AYJpOkRL1tACLsbYVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4IjE6VnND3KA+OWq1siGNgnKRbowHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwQWaJe+IeADQmcyB9WI
h/7x5l1bYdjDaIsen2n2/AfwWsDUyYeoo1TanLF9aHosSXW+PVH/yMppcoBevgy/
aqaJ60dEJHrWoc9lgS0iXBj8LIDuQUGwzPN3SaIExcLtxy8Euwgs/DUIEmMwCJ7d
Utm3fUYVHa3TsyQ6yfbyOlMjJWs49Yavqwx/w1LEBX41ToNkPAsZsPmzPfa5FoTL
Zbns7zvWiNfH1nAcFeHbDmpve5syM7bKdVAz9/T1gjBZxQD4sxj1mPgJ1vg4z0DI
pj2EIJDPPXf+QQR+JGbdH2L2fXgBsPfnOQ3lbmXmH6baTlayRMoMlvZwApNUcmfO
zA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 17:34:58 2025 by rpki-client