Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Sbv/gRluK57+Y5cVZyQQsrz/unjzpf7LjKK5XcbhhfI=
Subject key identifier:   8D:8C:4F:81:17:FD:97:38:F1:72:84:D8:2B:18:65:BF:3D:5E:7B:F0
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       2B1306E4783180CC262E04AA0BB62E47AA7F1850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          042C
Signing time:             Wed 24 Jun 2026 08:22:59 +0000
Manifest this update:     Wed 24 Jun 2026 08:17:59 +0000
Manifest next update:     Thu 25 Jun 2026 10:04:59 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: a2bnAG7FhN5pkcFHF1j2XKrjgu6nvjyk0OqcyDgSLPY=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:13:06:e4:78:31:80:cc:26:2e:04:aa:0b:b6:2e:47:aa:7f:18:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun 24 08:17:59 2026 GMT
            Not After : Jun 25 10:04:59 2026 GMT
        Subject: CN=8D8C4F8117FD9738F17284D82B1865BF3D5E7BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:6f:8e:40:8c:34:d3:53:b1:c6:da:76:be:
                    9e:ac:98:aa:9f:76:35:fd:cf:9c:68:af:84:f6:4f:
                    7f:89:5e:42:a0:97:03:0b:c3:fa:a5:09:1d:21:6a:
                    a9:16:98:bf:f0:55:6f:4d:fb:d4:97:04:5d:46:ad:
                    33:47:8d:30:1e:e4:08:65:57:68:41:30:43:1f:d6:
                    4d:f8:ce:ca:e2:ac:7d:00:d1:bf:75:54:30:a4:21:
                    59:82:02:bc:6e:aa:f2:1f:4b:8a:a7:58:7a:94:83:
                    7e:b5:88:d8:55:f4:9c:d0:75:d7:83:20:aa:a0:93:
                    80:d4:b1:39:1d:c9:a3:36:20:10:8c:9c:19:13:5c:
                    a0:5e:3e:2b:a9:7a:7b:82:b5:9f:96:b0:24:3c:23:
                    06:d6:85:68:d1:1f:7f:09:7a:94:aa:37:18:a6:94:
                    f6:68:da:12:ea:02:2e:ca:fd:6b:45:0a:18:ea:bc:
                    b3:c4:54:d6:53:db:89:5c:fd:f4:3a:d7:c9:0e:57:
                    69:cf:b5:f0:4e:a1:f8:8f:48:6d:28:78:08:e0:af:
                    ec:a8:20:f0:c7:07:07:16:21:cf:99:55:61:38:56:
                    6b:52:4f:8f:1d:49:e3:4e:9d:ba:7f:c1:4c:44:87:
                    a9:8b:da:32:fe:66:51:75:99:d6:a5:8d:b3:53:db:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:4F:81:17:FD:97:38:F1:72:84:D8:2B:18:65:BF:3D:5E:7B:F0
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3e:97:e2:ae:30:aa:e2:08:78:af:a6:15:b7:2f:01:90:e5:
         57:8a:9c:bb:4a:6a:ed:44:d0:e8:0c:92:9d:58:12:c9:c4:93:
         15:c2:b7:eb:5e:fe:1a:e7:9c:c7:ff:94:93:2c:7d:28:ac:fd:
         89:08:40:30:9d:4a:6d:e2:27:ef:32:bc:77:21:31:97:5c:9c:
         8b:77:f2:e9:10:84:14:16:05:9e:e5:2b:4e:c6:d8:66:4f:4d:
         c7:0f:ea:26:4e:e7:54:86:58:f8:81:b9:6d:50:a3:7a:ca:30:
         7f:19:2c:12:67:da:4f:f2:b1:b8:af:09:04:da:19:cb:1c:cc:
         4c:83:71:08:c7:5e:4d:5b:50:07:23:28:b1:4c:cb:9e:6a:29:
         35:72:56:2f:f6:e1:df:fc:ff:ca:3f:bb:84:5f:22:4e:3b:92:
         cb:ca:93:b3:bf:ea:ee:a4:a6:31:47:a5:41:8f:7d:14:86:e7:
         7d:f5:b1:2f:49:b0:dc:b7:a4:5a:cc:a8:47:9e:23:a1:2f:a2:
         e7:1e:51:4d:e1:38:49:b3:8f:27:47:22:63:5e:c2:53:1f:10:
         15:ce:6c:67:01:50:57:ac:0a:79:28:96:8b:ea:37:32:73:27:
         09:b0:cd:b5:e2:75:7b:78:72:10:2d:1d:61:36:8b:9e:a8:e1:
         ee:22:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:17 2026 by rpki-client