Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          xuW5y/ZrzAYQBV3qiiSHx+towpMMPpNooPHDhCPs3EY=
Subject key identifier:   9A:46:E2:B8:F9:A7:D1:AA:38:F1:C4:49:45:D7:D4:F2:BF:F4:B9:7C
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       72B3DD0F6120BB69FD433828B54AF81B24010A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03D6
Signing time:             Fri 24 Apr 2026 03:14:08 +0000
Manifest this update:     Fri 24 Apr 2026 03:09:08 +0000
Manifest next update:     Sat 25 Apr 2026 04:14:08 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: kjq6KJOyr6yOSQMPa3wuBMXPpUxtEicZS7qfKCp0DA4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b3:dd:0f:61:20:bb:69:fd:43:38:28:b5:4a:f8:1b:24:01:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr 24 03:09:08 2026 GMT
            Not After : Apr 25 04:14:08 2026 GMT
        Subject: CN=9A46E2B8F9A7D1AA38F1C44945D7D4F2BFF4B97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:00:de:41:16:10:1b:fa:4c:c3:4a:9d:aa:
                    d5:22:d1:a6:42:b0:4e:2b:50:e3:0f:e6:bc:5a:d1:
                    12:bc:94:ea:a0:a0:b0:d9:b8:08:92:aa:5e:1d:93:
                    5e:ee:94:b8:b2:e9:5b:9b:b8:a0:4c:a9:16:83:37:
                    f9:1a:e1:fa:00:99:55:9b:30:8a:1b:c9:4f:65:8c:
                    9e:74:0c:bc:21:56:09:c4:8c:85:81:be:86:37:ac:
                    22:8d:aa:61:41:d6:2e:fd:47:43:76:9a:23:20:dd:
                    28:90:3f:3c:6e:0e:41:29:aa:5a:84:7e:d1:4a:f5:
                    05:eb:c7:2f:32:45:89:9c:e5:4c:78:c5:ee:41:73:
                    fc:58:43:65:aa:c3:93:f3:be:cf:1c:91:fc:b6:03:
                    2d:18:85:fa:0e:74:e7:01:fe:2c:41:6c:de:af:4a:
                    7a:c9:54:ca:3d:da:ae:0b:73:70:ae:9d:be:0b:87:
                    f9:30:60:7b:95:c8:1d:7b:ff:3e:86:0a:34:cc:20:
                    53:28:e1:4c:a1:dc:7e:1d:1c:3a:72:0f:f8:bb:30:
                    eb:d9:3a:bd:43:17:d0:d3:b4:ea:08:28:9a:9e:2a:
                    53:5a:af:9f:53:24:9e:86:22:57:c6:02:0a:4b:1d:
                    53:fd:54:c8:41:b1:c4:41:86:ea:2e:bd:d0:4b:6e:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:E2:B8:F9:A7:D1:AA:38:F1:C4:49:45:D7:D4:F2:BF:F4:B9:7C
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:32:2e:e6:d0:a0:09:c6:a8:8f:21:19:77:2b:97:df:d1:2f:
         24:e9:89:f4:90:f6:13:c8:ae:d8:01:73:55:2c:1b:ad:02:67:
         42:8f:84:ea:61:de:06:67:ab:9a:82:5e:b5:e9:3b:36:29:ab:
         5c:66:a3:63:83:cc:2c:eb:3e:28:7c:ea:cb:b7:64:f4:a8:12:
         2e:69:30:9e:d4:5c:af:46:c3:78:1f:31:b5:b4:5a:30:56:af:
         c0:c8:20:21:53:bf:fb:ef:fa:1c:34:19:2a:83:e3:b0:42:ca:
         d8:15:62:0d:e7:8b:15:17:a3:1b:b9:70:01:0c:af:28:22:ec:
         8e:f8:f3:d2:13:69:35:6b:3a:ca:66:b7:92:cc:dc:29:6a:41:
         69:22:5f:86:ba:ce:8a:a0:0f:38:df:6d:ba:ff:14:9c:7f:32:
         16:6a:e7:6c:49:56:b1:10:7b:0b:f4:fb:e6:06:92:f6:58:79:
         77:ff:2e:86:23:c6:55:af:c7:39:2b:31:90:58:a2:b4:ec:8f:
         39:3b:e4:93:f4:e6:3e:a6:8c:ad:4d:34:60:c5:43:51:16:bc:
         ae:e1:fa:88:f6:a6:80:66:4e:21:5a:c0:a8:93:68:8f:9d:65:
         45:a2:c4:64:ea:2b:5b:f5:cf:c7:28:28:63:b8:03:f3:72:c1:
         df:37:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 09:05:03 2026 by rpki-client