Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          /FQpag/LZFFT0jvIksjGN7jSWYYeeZBT037RnFIeEPA=
Subject key identifier:   EC:9F:86:E4:62:28:F2:BD:85:3B:A6:C0:4A:3A:5A:CC:50:A4:AC:47
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1BB5BDB72449EE64D5E5A87B93BBEA8395E19A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04A6
Signing time:             Wed 23 Sep 2026 10:54:09 +0000
Manifest this update:     Wed 23 Sep 2026 10:49:09 +0000
Manifest next update:     Thu 24 Sep 2026 12:51:09 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: /jXP9/F6Y1AsCeQ97nfjD32NNpMtwEc6gDVhHVNZ3IY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b5:bd:b7:24:49:ee:64:d5:e5:a8:7b:93:bb:ea:83:95:e1:9a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep 23 10:49:09 2026 GMT
            Not After : Sep 24 12:51:09 2026 GMT
        Subject: CN=EC9F86E46228F2BD853BA6C04A3A5ACC50A4AC47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:57:ba:ce:de:f9:1b:ff:7b:3e:fe:5e:a0:
                    d6:1d:fb:0b:b8:72:0c:29:44:a2:ed:d3:c5:4b:ae:
                    ca:8d:b6:f6:08:b7:4b:9a:34:62:67:22:18:62:c0:
                    44:8c:3b:8a:01:c9:06:fc:a7:b0:c4:f5:35:ab:7e:
                    fc:4a:79:90:d7:a0:b6:2e:a4:f6:f5:86:3b:e4:c5:
                    14:50:9f:60:39:b4:65:c2:33:ac:7e:14:57:bd:0a:
                    eb:5a:73:c2:0c:cb:28:83:6f:44:88:78:bb:d9:19:
                    40:ea:54:f6:e5:32:b1:77:d5:5e:bf:e6:24:2c:97:
                    c8:0f:0b:f5:1b:d6:68:a0:f6:90:17:84:28:e0:a2:
                    4c:91:1c:de:bd:87:8d:a2:b3:c9:6e:48:17:73:37:
                    99:b2:cf:e4:3c:ea:ed:2f:fd:2d:cb:47:bb:e8:f4:
                    6c:ac:cb:00:ee:49:cf:1b:e2:6e:5a:af:e0:cf:a4:
                    a1:1a:48:ee:5e:99:7d:b4:53:f6:52:1b:cf:74:3f:
                    d1:0d:20:a5:14:e4:34:0d:97:dc:d7:5e:8c:a5:81:
                    60:ee:cb:ce:4b:5b:06:ef:ef:ba:95:e7:5a:52:99:
                    32:18:5e:b8:21:de:28:71:75:9f:aa:e1:05:2f:86:
                    e2:98:25:e2:49:15:95:a8:a2:da:e0:3b:6a:73:84:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:86:E4:62:28:F2:BD:85:3B:A6:C0:4A:3A:5A:CC:50:A4:AC:47
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:4d:c6:8d:c8:6a:0e:a7:1e:a2:9b:b7:a5:ed:b3:50:bc:
         91:01:80:f3:2c:70:82:14:26:5d:ff:d8:4b:35:68:46:08:73:
         c2:11:3e:17:2b:dd:a8:5e:f1:43:14:8f:be:e6:72:03:0e:c8:
         72:30:36:52:90:8f:cd:85:37:2d:da:00:d4:3c:2e:36:39:7e:
         19:59:f8:69:ed:89:7f:17:2e:41:98:03:54:c0:6f:a8:b5:e2:
         00:6e:6c:0e:da:fa:7b:ff:df:e1:e2:58:4f:3c:36:46:6b:03:
         5b:27:71:af:aa:23:fd:cd:ae:a7:a6:d4:48:e2:21:24:77:ea:
         6b:34:b9:28:50:a7:9e:e5:cf:d0:61:77:05:b7:f7:cc:89:95:
         c1:f8:ee:10:50:1c:f9:10:96:1a:11:98:ef:00:b4:bc:69:b9:
         4b:4e:37:1c:5e:27:16:e4:f9:f4:d5:6f:38:a8:f3:7b:59:ca:
         1f:ad:56:a3:16:9b:57:01:f4:e0:fa:7e:e2:9c:12:34:af:01:
         16:bc:18:96:30:64:3a:20:c3:08:24:43:21:df:e5:06:42:c9:
         2f:94:32:54:c2:3d:4d:ff:37:6e:37:1f:c1:71:29:cc:a8:c0:
         a6:46:9e:6c:d3:41:bf:55:74:4e:d2:6b:de:ff:4e:bd:fc:8a:
         27:01:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:50:31 2026 by rpki-client