Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          yLauFZ7yBs3iqUUKVI1UJ4qlXLLqpyC0MYZrvVL/bcI=
Subject key identifier:   6C:E3:1F:30:2A:7F:DF:1C:5A:00:6A:E5:54:37:23:55:74:7C:5F:7F
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       67AEDB9AB4BCBE43CD54FD730139BD177A2CEA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0254
Signing time:             Sun 13 Jul 2025 18:40:02 +0000
Manifest this update:     Sun 13 Jul 2025 18:35:02 +0000
Manifest next update:     Mon 14 Jul 2025 19:00:02 +0000
Files and hashes:         1: AS216107.asa (hash: cPuop4pbwWrqg2KspcT+JrKPt7Dz8kv0Dj2WzIb29Zo=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 70JtskrT8lTo8h/OyAggZPsUcxtxD0lpyBGAxxeWMyQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Jul 2025 17:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ae:db:9a:b4:bc:be:43:cd:54:fd:73:01:39:bd:17:7a:2c:ea:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jul 13 18:35:02 2025 GMT
            Not After : Jul 14 19:00:02 2025 GMT
        Subject: CN=6CE31F302A7FDF1C5A006AE554372355747C5F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:a2:d8:45:da:00:87:c0:d1:b7:db:49:2d:
                    83:42:3d:d7:a9:60:ee:2c:29:a1:40:59:7a:8e:fb:
                    a8:fa:68:58:e9:3c:de:b6:b7:84:9b:c3:6a:5e:fc:
                    aa:88:95:35:c9:3e:a7:74:19:23:cd:7e:b2:12:4d:
                    61:60:6d:dd:2c:b2:92:1e:b3:12:5f:07:b1:4b:8c:
                    61:2c:a0:a6:cd:43:70:6d:7b:22:0b:42:09:e9:b2:
                    07:b5:56:e6:09:c6:71:ba:31:ff:4d:c6:d7:3e:19:
                    3a:0d:c0:b6:42:66:e5:ad:74:60:39:df:f5:d2:91:
                    25:06:e9:ca:b4:9d:55:58:94:e1:53:c2:2c:4a:30:
                    33:56:74:95:af:49:45:b1:d5:89:aa:cb:39:6b:24:
                    dc:1b:09:49:1b:49:ca:d2:15:7c:df:f1:7b:05:71:
                    01:10:bf:27:eb:ea:75:b7:fe:e7:14:fa:e6:de:40:
                    c0:b1:3c:0d:07:1b:93:36:23:09:a7:ee:a7:67:05:
                    8f:32:51:a8:70:cd:69:15:a9:6c:2c:63:20:03:c0:
                    9d:a3:e9:28:6a:71:91:8c:0b:b4:68:64:7b:f6:35:
                    82:56:1a:d9:73:cd:37:09:e8:a1:f4:b0:37:c9:98:
                    2d:d1:d7:65:58:95:d2:ca:05:28:23:28:30:2d:b2:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:1F:30:2A:7F:DF:1C:5A:00:6A:E5:54:37:23:55:74:7C:5F:7F
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9e:ea:4c:a1:36:cc:99:f0:cc:b3:d0:a5:be:1c:98:2f:15:
         c7:4b:ac:0e:3c:9c:dc:7d:7c:1b:0f:e1:e3:e6:0a:d1:05:7c:
         a9:98:5c:2a:01:02:f0:77:81:9e:14:c3:7f:d8:9f:f8:58:53:
         e4:12:bc:2f:8a:01:fd:70:a4:0b:54:66:ef:33:49:c5:52:a6:
         e8:95:c0:84:d6:97:2b:14:18:a7:be:eb:52:10:3f:3e:4e:42:
         8b:8a:98:e5:3c:d4:51:a3:f9:24:10:21:e5:d6:c8:c9:64:d3:
         07:b6:97:c7:c6:d9:04:70:af:a8:34:b7:2b:01:86:5b:3d:31:
         83:1a:0f:fc:9b:d0:12:b2:f0:a9:69:88:e2:d1:59:a5:46:a2:
         3d:91:b6:ba:bc:e8:28:ea:f5:cd:a8:7b:20:19:c6:76:a8:d7:
         5d:32:bd:b2:14:79:d2:83:bd:8a:d1:8a:9a:db:92:88:bb:41:
         5b:d6:06:ae:9c:ca:ad:78:88:70:7b:b7:93:bb:08:a9:a1:c7:
         2e:31:0e:7b:ca:db:97:6a:f0:ad:7a:f3:7d:70:ee:13:b0:cc:
         8f:20:cc:e3:75:7a:d4:21:5b:f4:25:3b:0c:ed:37:01:ce:e5:
         70:ce:64:47:93:58:de:59:1f:65:ab:d8:73:bf:8b:62:22:ab:
         c7:8b:b7:a5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZ67bmrS8vkPNVP1zATm9F3os6ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNTA3MTMxODM1MDJaFw0yNTA3MTQxOTAwMDJaMDMxMTAvBgNV
BAMTKDZDRTMxRjMwMkE3RkRGMUM1QTAwNkFFNTU0MzcyMzU1NzQ3QzVGN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZ6LYRdoAh8DRt9tJLYNCPdep
YO4sKaFAWXqO+6j6aFjpPN62t4Sbw2pe/KqIlTXJPqd0GSPNfrISTWFgbd0sspIe
sxJfB7FLjGEsoKbNQ3BteyILQgnpsge1VuYJxnG6Mf9Nxtc+GToNwLZCZuWtdGA5
3/XSkSUG6cq0nVVYlOFTwixKMDNWdJWvSUWx1YmqyzlrJNwbCUkbScrSFXzf8XsF
cQEQvyfr6nW3/ucU+ubeQMCxPA0HG5M2Iwmn7qdnBY8yUahwzWkVqWwsYyADwJ2j
6ShqcZGMC7RoZHv2NYJWGtlzzTcJ6KH0sDfJmC3R12VYldLKBSgjKDAtsl1TAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUbOMfMCp/3xxaAGrlVDcjVXR8X38wHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq57qTKE2zJnwzLPQpb4c
mC8Vx0usDjyc3H18Gw/h4+YK0QV8qZhcKgEC8HeBnhTDf9if+FhT5BK8L4oB/XCk
C1Rm7zNJxVKm6JXAhNaXKxQYp77rUhA/Pk5Ci4qY5TzUUaP5JBAh5dbIyWTTB7aX
x8bZBHCvqDS3KwGGWz0xgxoP/JvQErLwqWmI4tFZpUaiPZG2urzoKOr1zah7IBnG
dqjXXTK9shR50oO9itGKmtuSiLtBW9YGrpzKrXiIcHu3k7sIqaHHLjEOe8rbl2rw
rXrzfXDuE7DMjyDM43V61CFb9CU7DO03Ac7lcM5kR5NY3lkfZavYc7+LYiKrx4u3
pQ==
-----END CERTIFICATE-----
Generated at Sun Jul 13 21:12:05 2025 by rpki-client