Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          MqUJeMt/mQGT31r1kbmeTIV19Wik2asxz8782z/8tCs=
Subject key identifier:   B0:F2:09:51:49:CA:15:7F:3F:9B:1B:0E:22:37:9E:F9:37:BF:5C:21
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       14E8ABE7A23B2F07D89E5CBB02BCD0E2A2563C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0428
Signing time:             Sun 21 Jun 2026 07:57:57 +0000
Manifest this update:     Sun 21 Jun 2026 07:52:57 +0000
Manifest next update:     Mon 22 Jun 2026 08:50:57 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: /d2ONnM4b6RG26ijExYOs/1QzGN65tbQd54pSQmZS38=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 08:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e8:ab:e7:a2:3b:2f:07:d8:9e:5c:bb:02:bc:d0:e2:a2:56:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun 21 07:52:57 2026 GMT
            Not After : Jun 22 08:50:57 2026 GMT
        Subject: CN=B0F2095149CA157F3F9B1B0E22379EF937BF5C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:6e:38:ea:42:09:88:83:04:6e:a8:d8:92:
                    41:9d:5b:40:e1:97:15:9d:72:e3:db:28:28:ad:b1:
                    ef:27:4d:29:cd:a3:5d:42:20:6a:2d:b8:4c:c5:fa:
                    0c:ba:ac:6c:3e:80:ea:c9:ed:24:b2:4b:f5:7c:4c:
                    42:fb:b2:33:90:a4:5e:ca:05:51:57:9a:23:e8:34:
                    81:8d:e0:b7:b5:54:30:0a:93:38:b1:9f:53:93:2a:
                    2a:ac:3a:7b:23:6a:a5:e3:14:6a:9c:8d:93:f4:fa:
                    50:cd:5e:f8:00:ce:16:5a:7f:9c:33:1a:20:0c:90:
                    86:1e:9b:41:2b:ea:8e:ce:87:82:29:cc:24:a4:e6:
                    65:ff:5b:3b:da:5a:c7:61:23:e9:e5:69:77:ce:b6:
                    75:fb:32:ce:42:b7:43:f0:52:4e:8e:c0:6e:2a:80:
                    c2:da:ee:6b:f5:0b:62:dd:22:2d:c3:f2:f4:9d:4e:
                    46:e2:da:c3:cd:0a:47:34:5d:30:77:bf:17:28:eb:
                    6a:e8:8c:47:08:43:32:6d:bc:5d:95:d7:fb:16:8e:
                    fc:e6:ed:4f:81:04:fb:be:c4:e8:62:2d:55:8c:49:
                    42:02:66:25:e3:4b:1b:b1:c9:9c:0d:2f:c6:a0:d5:
                    6a:ff:25:a9:e4:a6:14:49:fc:98:ed:39:b4:64:e0:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:09:51:49:CA:15:7F:3F:9B:1B:0E:22:37:9E:F9:37:BF:5C:21
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:ec:d5:7a:aa:1a:f1:74:19:8d:77:0a:4f:e1:1e:68:66:
         94:29:af:de:4b:54:8e:20:e4:98:67:a0:21:41:79:15:bc:5d:
         9d:e0:88:ab:0e:91:56:46:3b:f0:58:ad:b2:48:f4:84:6d:14:
         32:b9:89:44:db:16:55:f5:a6:b7:ac:65:50:22:1d:45:8f:39:
         0f:58:8b:e1:a6:db:26:4a:dc:52:7d:9b:e1:f3:32:07:41:23:
         99:e4:c3:cc:f5:f3:55:9b:37:51:6a:72:d7:41:15:d1:f3:2e:
         8c:d2:0c:cb:18:e0:c9:48:be:4d:f5:49:b0:dc:5a:3e:ad:b7:
         9f:00:ee:39:0d:b7:47:8a:4c:e4:75:03:63:fe:21:1e:0d:f0:
         21:b0:c8:5c:26:99:a0:fc:96:61:34:a4:69:2f:5c:3d:79:b3:
         90:5b:b3:1d:39:3f:9a:26:fe:98:a0:80:a8:bf:d2:be:fe:c4:
         cd:ae:2a:64:36:d1:a4:f5:01:00:d4:3e:71:74:c0:a7:30:e7:
         a8:29:b3:3c:99:ab:d9:bf:11:35:3b:1b:fb:ba:8e:07:4d:d2:
         27:63:e0:86:7e:b3:b5:8f:a4:0f:04:c6:47:9b:56:68:ca:08:
         f3:1e:28:2e:b2:b3:f0:cc:35:37:72:f2:af:b1:45:3e:50:75:
         13:7b:5e:12
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFOir56I7LwfYnly7ArzQ4qJWPF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA2MjEwNzUyNTdaFw0yNjA2MjIwODUwNTdaMDMxMTAvBgNV
BAMTKEIwRjIwOTUxNDlDQTE1N0YzRjlCMUIwRTIyMzc5RUY5MzdCRjVDMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimm446kIJiIMEbqjYkkGdW0Dh
lxWdcuPbKCitse8nTSnNo11CIGotuEzF+gy6rGw+gOrJ7SSyS/V8TEL7sjOQpF7K
BVFXmiPoNIGN4Le1VDAKkzixn1OTKiqsOnsjaqXjFGqcjZP0+lDNXvgAzhZaf5wz
GiAMkIYem0Er6o7Oh4IpzCSk5mX/WzvaWsdhI+nlaXfOtnX7Ms5Ct0PwUk6OwG4q
gMLa7mv1C2LdIi3D8vSdTkbi2sPNCkc0XTB3vxco62rojEcIQzJtvF2V1/sWjvzm
7U+BBPu+xOhiLVWMSUICZiXjSxuxyZwNL8ag1Wr/JankphRJ/JjtObRk4IOTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsPIJUUnKFX8/mxsOIjee+Te/XCEwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI3s1XqqGvF0GY13Ck/h
HmhmlCmv3ktUjiDkmGegIUF5FbxdneCIqw6RVkY78Fitskj0hG0UMrmJRNsWVfWm
t6xlUCIdRY85D1iL4abbJkrcUn2b4fMyB0EjmeTDzPXzVZs3UWpy10EV0fMujNIM
yxjgyUi+TfVJsNxaPq23nwDuOQ23R4pM5HUDY/4hHg3wIbDIXCaZoPyWYTSkaS9c
PXmzkFuzHTk/mib+mKCAqL/Svv7Eza4qZDbRpPUBANQ+cXTApzDnqCmzPJmr2b8R
NTsb+7qOB03SJ2Pghn6ztY+kDwTGR5tWaMoI8x4oLrKz8Mw1N3Lyr7FFPlB1E3te
Eg==
-----END CERTIFICATE-----
Generated at Sun Jun 21 17:14:45 2026 by rpki-client