Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          aJfdHrllS0+jx26IHLeWmmMPyVlAmxoY1gkJMaMtt0A=
Subject key identifier:   D9:76:E0:6B:43:9C:A4:EF:43:BE:12:7F:38:8A:2D:AD:3E:37:B4:64
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       3A5B4A8E8743FDA5E017B3B96A119FFAD97264F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0430
Signing time:             Sat 27 Jun 2026 08:53:00 +0000
Manifest this update:     Sat 27 Jun 2026 08:48:00 +0000
Manifest next update:     Sun 28 Jun 2026 10:05:00 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: FLItwFX531qNZWoZjl+nmy/Q9qRpjQMJwWRw/q3kc3g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5b:4a:8e:87:43:fd:a5:e0:17:b3:b9:6a:11:9f:fa:d9:72:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jun 27 08:48:00 2026 GMT
            Not After : Jun 28 10:05:00 2026 GMT
        Subject: CN=D976E06B439CA4EF43BE127F388A2DAD3E37B464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:6d:09:08:8e:30:fa:b8:f8:3f:7c:e4:cd:
                    54:31:43:23:2e:24:67:75:e6:26:f3:7b:89:dc:18:
                    2e:11:e2:d2:bd:5a:48:53:2d:25:51:28:2e:72:00:
                    0f:a4:78:9a:8f:b1:99:e3:ea:d2:a7:fb:02:1a:d9:
                    c6:99:f7:51:96:d5:7a:95:7e:00:2e:ca:76:e9:59:
                    b0:1e:c4:76:b7:6b:0f:c3:80:c4:d5:70:97:31:4b:
                    5b:b1:c0:b1:57:fb:1c:ea:02:6b:5c:c6:bd:97:24:
                    65:c3:52:75:97:04:78:a3:d1:d9:7a:93:18:40:d4:
                    4e:c4:4a:28:4c:93:b3:6d:0a:f2:73:2d:48:d8:22:
                    69:ab:f5:1c:54:3e:af:af:6f:77:d6:bb:54:5c:19:
                    fd:ac:e5:fa:2c:52:44:77:2f:9f:ef:70:b9:32:d2:
                    09:62:28:64:70:92:83:9b:60:e0:3f:19:bd:4b:98:
                    ae:6e:d0:9a:2f:ff:5b:9c:99:2a:71:24:e8:a5:c6:
                    7c:9c:bc:26:76:02:92:04:42:88:91:78:71:1a:a3:
                    a4:45:9f:f6:26:26:49:40:1d:9e:1e:f6:cf:c3:b9:
                    9f:85:d1:8d:05:75:ce:fb:fa:5b:e0:16:b1:2e:05:
                    29:b3:01:98:3f:f8:4a:e2:88:85:47:34:0f:b6:1b:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:76:E0:6B:43:9C:A4:EF:43:BE:12:7F:38:8A:2D:AD:3E:37:B4:64
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:9d:3a:d8:c4:b3:f0:04:7c:0b:7a:5f:73:9d:4b:f5:b6:
         d0:02:b7:ad:78:45:14:d5:2f:0b:ed:30:a2:ac:da:19:65:90:
         a9:8d:bc:63:7a:45:98:4e:eb:20:9b:77:d3:cd:29:d0:62:15:
         87:d5:62:82:7b:47:f2:69:aa:47:c8:8b:4b:3a:73:aa:b5:dc:
         85:6f:64:cd:a8:79:a7:f5:db:53:eb:9b:ba:21:e0:2a:13:15:
         d9:34:13:44:8d:2a:50:9e:af:3f:6d:ad:e4:7e:89:d2:c9:5c:
         1e:d3:ff:42:ab:84:11:e2:67:1b:db:fa:5e:68:a0:44:44:07:
         fc:7b:ba:8c:53:a4:c4:d3:ee:09:9b:b1:50:ac:43:76:fd:b0:
         29:aa:df:5a:61:52:16:6e:7a:d8:74:47:8b:4d:07:52:1a:cc:
         21:40:84:a8:ef:03:7a:be:85:09:77:82:dd:60:85:94:85:38:
         17:04:7f:12:5f:6d:9a:a9:68:f4:ef:65:ee:06:5f:a7:29:bb:
         de:96:d5:59:c6:7a:59:2d:0a:3f:6c:7e:17:89:2e:78:a3:1f:
         46:63:78:d8:a0:c7:a9:50:8f:fe:03:9d:a3:18:1b:bf:f3:c5:
         01:21:c0:79:47:d9:39:76:cb:7f:9a:87:68:b2:d3:33:68:b0:
         28:8e:aa:ec
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOltKjodD/aXgF7O5ahGf+tlyZPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjA2MjcwODQ4MDBaFw0yNjA2MjgxMDA1MDBaMDMxMTAvBgNV
BAMTKEQ5NzZFMDZCNDM5Q0E0RUY0M0JFMTI3RjM4OEEyREFEM0UzN0I0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqG0JCI4w+rj4P3zkzVQxQyMu
JGd15ibze4ncGC4R4tK9WkhTLSVRKC5yAA+keJqPsZnj6tKn+wIa2caZ91GW1XqV
fgAuynbpWbAexHa3aw/DgMTVcJcxS1uxwLFX+xzqAmtcxr2XJGXDUnWXBHij0dl6
kxhA1E7ESihMk7NtCvJzLUjYImmr9RxUPq+vb3fWu1RcGf2s5fosUkR3L5/vcLky
0gliKGRwkoObYOA/Gb1LmK5u0Jov/1ucmSpxJOilxnycvCZ2ApIEQoiReHEao6RF
n/YmJklAHZ4e9s/DuZ+F0Y0Fdc77+lvgFrEuBSmzAZg/+EriiIVHNA+2G4e/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2Xbga0OcpO9DvhJ/OIotrT43tGQwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpydOtjEs/AEfAt6X3Od
S/W20AK3rXhFFNUvC+0woqzaGWWQqY28Y3pFmE7rIJt3080p0GIVh9VigntH8mmq
R8iLSzpzqrXchW9kzah5p/XbU+ubuiHgKhMV2TQTRI0qUJ6vP22t5H6J0slcHtP/
QquEEeJnG9v6XmigREQH/Hu6jFOkxNPuCZuxUKxDdv2wKarfWmFSFm562HRHi00H
UhrMIUCEqO8Der6FCXeC3WCFlIU4FwR/El9tmqlo9O9l7gZfpym73pbVWcZ6WS0K
P2x+F4kueKMfRmN42KDHqVCP/gOdoxgbv/PFASHAeUfZOXbLf5qHaLLTM2iwKI6q
7A==
-----END CERTIFICATE-----
Generated at Sat Jun 27 15:18:29 2026 by rpki-client