Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Mpfjn9ffmMLHl6vMfgXdrr94Aqa+5uOJUdwVkStiKGU=
Subject key identifier:   AB:16:38:0E:EB:35:E7:7A:9B:22:31:B8:2F:9F:CD:C1:F4:4C:04:13
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       6FEDD7E40F5878284CD2E4D5C859851E8ED25F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04C5
Signing time:             Fri 16 Oct 2026 10:14:17 +0000
Manifest this update:     Fri 16 Oct 2026 10:09:17 +0000
Manifest next update:     Sat 17 Oct 2026 11:47:17 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: PBp0GrXFL7d/c6gaEW901LRcKiqxn66wRn4AWjHF6aI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ed:d7:e4:0f:58:78:28:4c:d2:e4:d5:c8:59:85:1e:8e:d2:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 16 10:09:17 2026 GMT
            Not After : Oct 17 11:47:17 2026 GMT
        Subject: CN=AB16380EEB35E77A9B2231B82F9FCDC1F44C0413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:af:d1:c5:13:3f:2c:79:e8:d6:8f:30:f1:
                    f8:42:e0:ed:d6:02:2c:20:c0:b9:ca:93:44:3b:99:
                    7e:3d:fd:f7:e4:80:15:37:72:28:02:61:6e:2d:bc:
                    67:90:d3:d3:a3:6b:57:44:33:3c:86:5d:1c:7a:19:
                    e2:15:7b:3f:51:2f:43:57:03:1d:ad:e2:98:68:d5:
                    db:e6:4f:64:b0:e7:80:9d:7f:b5:c5:94:2a:ca:e3:
                    98:3f:45:b3:5d:d8:52:d4:5e:b0:44:7f:5f:40:17:
                    25:ce:40:ae:83:88:10:1a:87:34:87:05:bd:69:fd:
                    c9:66:3d:30:96:68:dc:83:5c:86:43:4f:e7:58:71:
                    d4:ec:bd:89:df:d3:10:ff:ea:94:cb:1e:f8:8a:f4:
                    0b:17:0a:81:3f:f9:d4:41:75:4c:e0:05:0a:b4:9d:
                    99:c2:e9:ac:ce:73:7d:25:a6:3f:78:a2:25:a9:85:
                    25:91:7c:6f:de:a8:82:ef:48:9b:68:a8:60:e0:2a:
                    68:6e:c6:20:bc:40:7d:40:3a:8a:6e:29:70:66:ce:
                    b1:94:d7:e6:db:71:f9:c4:db:08:c3:7f:36:4b:fc:
                    4f:34:d1:6c:cc:3d:00:1c:77:36:09:55:c8:f7:aa:
                    b0:5e:55:10:a9:f1:5b:4a:10:5a:26:86:fb:ea:ac:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:16:38:0E:EB:35:E7:7A:9B:22:31:B8:2F:9F:CD:C1:F4:4C:04:13
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0c:33:4c:d2:37:78:1b:78:ff:ff:89:4b:20:62:d4:c2:1f:
         ab:77:97:5a:ac:93:95:01:79:d5:2b:51:05:90:ce:48:d6:ec:
         eb:d8:10:3a:2e:13:4d:79:6b:d8:62:13:0a:34:5c:88:2a:ae:
         ba:61:a0:fe:65:3d:57:18:a9:3c:bf:1b:64:b9:d8:99:83:97:
         66:df:ba:b4:ae:32:f7:12:d1:3c:ca:28:ae:23:19:fe:41:e5:
         6c:b2:12:79:75:27:e4:1f:1b:f7:12:db:99:ed:85:c3:91:52:
         f1:51:ff:e6:fc:06:d4:71:c1:13:1e:b2:b4:e7:1f:60:9d:b2:
         99:7c:19:ff:4a:6f:d1:9c:2f:55:89:f3:16:40:43:3d:67:d9:
         f8:82:b8:9f:50:93:30:cf:5f:fe:ce:58:f0:53:c9:ba:e1:0c:
         54:b8:36:e1:92:c6:22:1b:e0:83:a2:9c:ad:83:e7:cc:1c:40:
         c3:3a:20:bd:40:6b:e4:04:6b:7e:a2:54:b7:b0:97:2f:25:44:
         35:b9:05:0a:9a:85:8c:58:5b:e3:24:c0:21:52:ef:30:ed:28:
         8c:13:c0:23:e6:8a:40:33:1f:af:da:6e:cc:b2:f0:e6:48:ca:
         6f:ee:42:16:bb:8b:fe:76:86:75:f2:c2:c7:15:1b:dd:b9:fa:
         21:5d:05:27
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUb+3X5A9YeChM0uTVyFmFHo7SXykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjEwMTYxMDA5MTdaFw0yNjEwMTcxMTQ3MTdaMDMxMTAvBgNV
BAMTKEFCMTYzODBFRUIzNUU3N0E5QjIyMzFCODJGOUZDREMxRjQ0QzA0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpq/RxRM/LHno1o8w8fhC4O3W
AiwgwLnKk0Q7mX49/ffkgBU3cigCYW4tvGeQ09Oja1dEMzyGXRx6GeIVez9RL0NX
Ax2t4pho1dvmT2Sw54Cdf7XFlCrK45g/RbNd2FLUXrBEf19AFyXOQK6DiBAahzSH
Bb1p/clmPTCWaNyDXIZDT+dYcdTsvYnf0xD/6pTLHviK9AsXCoE/+dRBdUzgBQq0
nZnC6azOc30lpj94oiWphSWRfG/eqILvSJtoqGDgKmhuxiC8QH1AOopuKXBmzrGU
1+bbcfnE2wjDfzZL/E800WzMPQAcdzYJVcj3qrBeVRCp8VtKEFomhvvqrPajAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqxY4Dus153qbIjG4L5/NwfRMBBMwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngwzTNI3eBt4//+JSyBi
1MIfq3eXWqyTlQF51StRBZDOSNbs69gQOi4TTXlr2GITCjRciCquumGg/mU9Vxip
PL8bZLnYmYOXZt+6tK4y9xLRPMooriMZ/kHlbLISeXUn5B8b9xLbme2Fw5FS8VH/
5vwG1HHBEx6ytOcfYJ2ymXwZ/0pv0ZwvVYnzFkBDPWfZ+IK4n1CTMM9f/s5Y8FPJ
uuEMVLg24ZLGIhvgg6KcrYPnzBxAwzogvUBr5ARrfqJUt7CXLyVENbkFCpqFjFhb
4yTAIVLvMO0ojBPAI+aKQDMfr9puzLLw5kjKb+5CFruL/naGdfLCxxUb3bn6IV0F
Jw==
-----END CERTIFICATE-----
Generated at Fri Oct 16 18:15:52 2026 by rpki-client