Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          j8CEIxMi3nWFn5yTar+b9A1AjR8limEUStC+Ix/QjVI=
Subject key identifier:   50:E1:D1:79:51:9D:E5:64:99:3F:8A:BD:6E:15:C0:25:23:EC:34:E1
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       75476E0FCCF328D8ADC12875B551263E8D5DC480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04DB
Signing time:             Sat 31 Oct 2026 01:13:17 +0000
Manifest this update:     Sat 31 Oct 2026 01:08:17 +0000
Manifest next update:     Sun 01 Nov 2026 04:41:17 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 6P+JK9NItkpiTaorUD5ah8OuOPSEZSDeTF++lsU59zo=)
                          2: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 04:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:47:6e:0f:cc:f3:28:d8:ad:c1:28:75:b5:51:26:3e:8d:5d:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 31 01:08:17 2026 GMT
            Not After : Nov  1 04:41:17 2026 GMT
        Subject: CN=50E1D179519DE564993F8ABD6E15C02523EC34E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:63:18:db:e0:db:80:60:e5:a6:77:c2:3a:
                    a1:d6:c3:d6:7b:41:c9:c5:f9:b9:ec:03:03:2b:05:
                    59:82:16:7c:2f:61:33:5e:8e:65:a8:62:31:d3:c5:
                    d3:9f:8b:06:5a:ee:26:8c:c9:cf:ee:52:df:8b:77:
                    91:6c:9f:27:ba:fb:4b:2b:6c:d3:11:34:c9:fa:34:
                    83:e1:85:72:8c:e7:10:1e:19:23:78:b8:4e:e2:df:
                    50:d2:38:2d:6a:21:ef:6b:1e:8f:f5:56:73:73:ba:
                    11:be:af:97:3d:8c:76:f8:5a:3b:b0:17:d2:09:24:
                    8c:2c:e5:50:7b:fb:21:48:99:55:bb:ef:c0:9a:77:
                    68:bf:09:26:8c:79:d1:08:22:97:d4:f0:26:dd:7d:
                    b3:35:6f:11:c5:72:e6:de:87:b7:18:1b:d1:c1:6f:
                    dd:1f:f7:90:fc:4e:01:4f:0e:5c:9c:f0:bd:85:d8:
                    02:0e:b1:14:8d:2b:66:47:ae:f7:e4:f7:bc:f5:b2:
                    fc:ae:73:19:ed:67:4c:28:8d:58:23:ea:2b:55:67:
                    95:10:c5:c7:d7:61:61:8e:56:5c:42:7d:ad:2a:c6:
                    bd:4c:4d:9a:4d:fb:15:90:f0:bc:0f:3c:bc:b9:b5:
                    22:0e:c4:fc:93:78:aa:3d:dc:5d:8a:1e:1d:32:da:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:D1:79:51:9D:E5:64:99:3F:8A:BD:6E:15:C0:25:23:EC:34:E1
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:27:2d:20:d1:f6:5a:ac:68:7d:99:8f:b0:b2:80:1a:15:
         0e:d6:ef:be:8f:a5:ce:af:ff:e6:cd:35:53:df:c5:50:0c:39:
         ff:de:26:51:7d:64:8a:5a:e0:17:3a:22:e6:4c:50:5b:4c:c9:
         d0:19:04:11:09:49:59:62:b3:2b:15:5f:6b:94:3b:9a:81:c3:
         ba:e3:bc:c2:23:5a:71:6b:13:25:7c:b4:6a:d8:f7:bb:76:62:
         99:6e:78:7e:fb:c0:ab:76:46:24:52:da:2e:3d:ae:1d:0e:ee:
         a2:0f:91:99:9f:39:81:f9:a0:f0:a2:80:97:21:05:b0:53:f0:
         43:54:90:0a:50:60:37:17:a2:7d:80:83:5b:c4:5d:06:88:58:
         e9:9f:ee:18:4f:ed:fc:a6:f9:9f:b2:f2:a0:45:8a:9c:d3:e7:
         68:13:08:29:c2:d5:36:b4:00:27:79:b7:ef:3b:96:16:c2:81:
         50:22:5c:3a:30:02:f4:a9:4d:14:59:b0:a9:ed:c5:30:13:d6:
         3a:a0:fe:d5:ef:9b:47:82:ca:95:96:73:3d:e7:02:de:07:88:
         33:79:83:b2:2e:25:96:36:4a:a3:d5:fa:ce:b3:b1:d7:6f:38:
         d1:03:56:34:6c:32:17:8b:8d:cb:b1:e6:d3:7e:a5:f4:d7:8b:
         ee:3f:69:2e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUdUduD8zzKNitwSh1tVEmPo1dxIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjEwMzEwMTA4MTdaFw0yNjExMDEwNDQxMTdaMDMxMTAvBgNV
BAMTKDUwRTFEMTc5NTE5REU1NjQ5OTNGOEFCRDZFMTVDMDI1MjNFQzM0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkWMY2+DbgGDlpnfCOqHWw9Z7
QcnF+bnsAwMrBVmCFnwvYTNejmWoYjHTxdOfiwZa7iaMyc/uUt+Ld5Fsnye6+0sr
bNMRNMn6NIPhhXKM5xAeGSN4uE7i31DSOC1qIe9rHo/1VnNzuhG+r5c9jHb4Wjuw
F9IJJIws5VB7+yFImVW778Cad2i/CSaMedEIIpfU8CbdfbM1bxHFcubeh7cYG9HB
b90f95D8TgFPDlyc8L2F2AIOsRSNK2ZHrvfk97z1svyucxntZ0wojVgj6itVZ5UQ
xcfXYWGOVlxCfa0qxr1MTZpN+xWQ8LwPPLy5tSIOxPyTeKo93F2KHh0y2lpjAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUOHReVGd5WSZP4q9bhXAJSPsNOEwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeonLSDR9lqsaH2Zj7Cy
gBoVDtbvvo+lzq//5s01U9/FUAw5/94mUX1kilrgFzoi5kxQW0zJ0BkEEQlJWWKz
KxVfa5Q7moHDuuO8wiNacWsTJXy0atj3u3ZimW54fvvAq3ZGJFLaLj2uHQ7uog+R
mZ85gfmg8KKAlyEFsFPwQ1SQClBgNxeifYCDW8RdBohY6Z/uGE/t/Kb5n7LyoEWK
nNPnaBMIKcLVNrQAJ3m37zuWFsKBUCJcOjAC9KlNFFmwqe3FMBPWOqD+1e+bR4LK
lZZzPecC3geIM3mDsi4lljZKo9X6zrOx12840QNWNGwyF4uNy7Hm036l9NeL7j9p
Lg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 20:02:26 2026 by rpki-client