Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          JRI5lVomg8snK34H8uYCr1hEu8wwH5UwnKfFcRRrlC4=
Subject key identifier:   13:B6:9B:C2:A3:07:A3:9D:DB:0E:2F:58:90:25:BB:DF:26:75:F8:B8
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       48B678B142433D14B6EB32746EEC10940F729B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0480
Signing time:             Wed 26 Aug 2026 19:59:00 +0000
Manifest this update:     Wed 26 Aug 2026 19:54:00 +0000
Manifest next update:     Thu 27 Aug 2026 20:29:00 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: zZpA+Ga3g3yfpaabD5DpiFFf/CfNPcMmwMdxzmgm1Y4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b6:78:b1:42:43:3d:14:b6:eb:32:74:6e:ec:10:94:0f:72:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Aug 26 19:54:00 2026 GMT
            Not After : Aug 27 20:29:00 2026 GMT
        Subject: CN=13B69BC2A307A39DDB0E2F589025BBDF2675F8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:31:9b:b8:09:b9:56:04:67:70:3d:63:d2:
                    de:17:f8:72:db:68:fd:02:8d:54:08:d2:ae:7a:c3:
                    63:7f:8a:11:78:5d:78:c7:9a:07:55:04:3a:34:29:
                    05:33:c6:c5:b5:cd:d3:3a:f1:b9:07:c7:70:86:fc:
                    6a:85:ac:51:f6:d8:ad:db:c4:1e:32:2c:79:7c:66:
                    11:ea:7a:c1:ca:7b:f0:48:1d:54:7a:4b:47:bd:10:
                    ff:b3:69:00:5d:26:99:b8:78:d5:a4:ba:83:0c:0e:
                    b7:06:6e:e2:dd:52:fb:ab:e5:c8:02:7f:3b:57:03:
                    22:05:20:0d:da:a3:77:f9:a7:93:1c:20:13:ec:ec:
                    2e:9f:72:83:9d:76:33:54:5f:ab:1b:5e:44:4a:fc:
                    48:34:c8:e2:f3:06:6e:99:1f:8e:d0:34:fe:45:c7:
                    06:3b:95:c1:5f:74:e2:d4:f2:37:38:bf:79:ad:7f:
                    1e:8d:1f:f3:2a:90:59:25:f0:7c:5b:66:04:86:63:
                    09:4a:0c:8b:de:d8:66:4d:19:ee:eb:0c:2d:0e:03:
                    2c:c7:fc:9c:9f:0a:e7:e4:a3:96:f7:b8:20:7c:37:
                    9c:5d:3e:8d:23:24:f8:d9:d3:7b:35:a0:d7:61:e3:
                    b5:e8:c4:6c:8d:6b:33:ff:a2:b3:52:d6:d9:3c:d4:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:9B:C2:A3:07:A3:9D:DB:0E:2F:58:90:25:BB:DF:26:75:F8:B8
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:ba:4e:65:75:ac:1d:5e:4c:a0:02:3a:7e:4b:2a:a1:8b:
         ea:be:46:79:b4:bf:0d:f2:33:9d:54:bb:dd:03:ae:54:60:9f:
         3c:bc:fe:71:57:35:42:4e:2b:70:d4:f5:83:c7:c7:ef:a4:ce:
         d8:7f:7c:4d:36:a9:e3:85:d7:4b:bf:79:ab:d7:fd:fa:46:0d:
         9c:d4:29:ce:a4:6f:d3:6c:71:08:ba:56:3c:1d:97:8c:a7:af:
         b6:8f:d9:4e:b3:a2:c5:47:4d:c4:e9:6e:52:72:2d:84:cc:92:
         42:07:28:55:56:b4:b9:61:d7:a8:83:0d:23:e2:41:8b:6f:9e:
         be:2f:a5:0e:66:c7:f2:c0:52:0f:20:40:d0:8e:6c:b7:8d:3c:
         01:47:57:57:cf:44:40:4a:60:af:3a:ad:a4:41:a7:5c:cc:fb:
         68:c6:d3:a4:0f:03:02:d9:3b:cd:73:b1:93:ef:eb:5e:29:f5:
         0d:75:76:55:19:00:bf:7a:f2:ca:6d:b2:28:eb:89:08:8d:d6:
         0c:ee:b9:e3:24:fd:20:84:9a:36:94:00:99:01:b2:02:18:8d:
         fd:99:96:56:db:f2:e4:d6:9b:f6:27:dc:c0:a8:2b:b3:f4:24:
         85:08:46:d4:87:fb:16:8a:e1:6d:9b:89:20:f0:91:c9:3a:e4:
         c9:4b:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:06:19 2026 by rpki-client