Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Gfmj9sD4NF5++Taw16uOH/fKHHvkj+qf+sh1gUTch+w=
Subject key identifier:   BB:2A:97:BB:FD:D4:5D:54:5D:09:FA:2D:D2:3A:9E:56:8D:C1:0A:26
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       539114E98AC62EEF6D165FE5861CED653A9820C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03D7
Signing time:             Fri 24 Apr 2026 20:19:08 +0000
Manifest this update:     Fri 24 Apr 2026 20:14:08 +0000
Manifest next update:     Sat 25 Apr 2026 22:20:08 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: +s2w+p9Z48x+sCoRxuffJ32K41Tvpnf7LY89MYwReWA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 22:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:91:14:e9:8a:c6:2e:ef:6d:16:5f:e5:86:1c:ed:65:3a:98:20:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr 24 20:14:08 2026 GMT
            Not After : Apr 25 22:20:08 2026 GMT
        Subject: CN=BB2A97BBFDD45D545D09FA2DD23A9E568DC10A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:2f:84:d6:a2:77:52:ad:7d:2d:a6:34:e1:
                    9e:45:dd:67:26:63:b8:b4:90:08:fc:42:80:85:77:
                    df:a0:ec:10:56:89:98:e3:e7:21:ca:d9:4d:ad:93:
                    67:88:9b:34:fa:28:3c:4b:d6:fa:57:1f:cb:c6:85:
                    9d:c4:f3:60:b6:7a:f9:ff:b9:c7:a7:45:7b:75:24:
                    dc:a3:1c:a6:bc:30:b2:e7:6c:98:a7:58:50:65:d8:
                    1c:0f:ec:5c:ba:b5:df:0f:f5:e5:45:d6:5e:ff:82:
                    b4:5c:39:34:9c:6b:03:fd:3e:fb:ef:61:e6:78:45:
                    d6:d7:0c:d2:0f:be:d8:a2:b6:df:e7:be:d8:c8:32:
                    d1:e3:e5:36:cf:1e:77:c2:63:af:be:23:85:d1:4a:
                    0f:d2:35:07:8f:63:30:2c:ba:40:35:50:d7:31:7d:
                    72:32:f0:50:3d:bf:88:92:18:4b:15:d4:37:5b:e9:
                    88:e3:f2:bd:03:17:b1:57:82:7e:1f:fe:1c:e7:59:
                    86:19:1d:ef:ce:ef:ca:11:70:62:3a:5f:eb:fe:08:
                    af:d3:e2:20:a5:ed:72:18:4f:bc:1e:cf:3d:6e:54:
                    14:42:62:35:06:06:74:54:c4:49:21:3e:bf:7c:11:
                    fb:34:51:39:2c:f8:c8:e1:7a:58:57:95:b4:05:33:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2A:97:BB:FD:D4:5D:54:5D:09:FA:2D:D2:3A:9E:56:8D:C1:0A:26
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:ec:92:9f:0c:93:05:be:63:20:3d:92:c1:8c:2f:5b:1a:
         cd:e6:5f:f0:ca:16:64:83:cb:42:a8:83:32:58:04:a6:36:59:
         14:4e:33:0b:26:88:a5:5b:11:61:e9:0a:79:99:13:e7:00:0c:
         f2:40:17:80:96:12:68:ff:fa:1b:86:eb:26:6e:ed:02:c0:53:
         69:95:85:36:16:d5:74:96:bc:61:7a:91:e8:65:0e:7a:ca:dd:
         c1:40:7a:29:44:60:d0:85:84:ec:14:4a:c0:33:0a:8b:1f:41:
         22:db:a9:95:39:34:1d:8b:7f:29:5c:89:4a:d3:7f:4e:ad:b1:
         a9:3f:67:20:21:f6:ac:bb:13:39:68:42:0c:dd:4a:85:c0:a2:
         9b:f4:51:62:00:af:6a:e3:05:4f:bc:03:29:92:3c:9b:4c:64:
         da:fc:49:96:77:1c:69:ee:e3:7a:8e:69:5d:41:11:9c:ff:50:
         72:00:97:29:a1:f5:b6:bb:3e:3e:5f:db:e9:9e:c8:b8:03:0d:
         3a:37:ee:43:5e:d5:a0:aa:4a:86:46:a8:e1:c4:56:40:67:7c:
         0c:88:60:d9:e2:1f:4e:e2:a8:92:77:4d:43:ee:38:82:85:c5:
         20:c6:de:36:9d:d5:54:ee:72:a8:d1:6b:e6:d5:d6:b8:1e:84:
         73:7c:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 09:37:02 2026 by rpki-client