Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          sRFUqvfR7BkORFBmDE9MPwGg0pLDkGKkV4vcMigxniI=
Subject key identifier:   78:90:DC:A1:92:95:71:C8:67:69:E5:DE:C1:AF:71:8F:45:6C:C1:7A
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       23C905A4F07CE1C4F46C4A0620BAF0961B2A1FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04E1
Signing time:             Wed 04 Nov 2026 12:08:23 +0000
Manifest this update:     Wed 04 Nov 2026 12:03:23 +0000
Manifest next update:     Thu 05 Nov 2026 15:16:23 +0000
Files and hashes:         1: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: Tur/Lkfai/+L0xs2Lp3kE5jOOfwrD58P32Ic+VCkpKc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:05:a4:f0:7c:e1:c4:f4:6c:4a:06:20:ba:f0:96:1b:2a:1f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  4 12:03:23 2026 GMT
            Not After : Nov  5 15:16:23 2026 GMT
        Subject: CN=7890DCA1929571C86769E5DEC1AF718F456CC17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:26:3f:e4:ad:00:59:7d:21:72:a7:b4:41:
                    ae:63:08:07:1f:52:9b:3c:09:84:a8:e8:b9:a4:9d:
                    f8:11:cd:31:d5:51:e6:87:b3:ee:00:96:cf:56:9b:
                    56:03:a8:da:11:28:a2:9f:5d:67:31:2a:c2:e9:b9:
                    96:dc:51:d9:38:bf:77:d5:e5:6c:bb:a9:5d:2f:21:
                    82:9b:57:84:ee:2f:23:a0:4e:fc:f2:fc:3c:a2:18:
                    11:a2:0f:95:98:c9:9b:10:19:0a:2c:e7:b1:0a:67:
                    88:a8:94:9c:a8:e4:a2:c9:e8:d9:9c:99:e1:6f:ac:
                    a1:cd:e0:2f:b2:0e:85:d4:11:db:48:bd:12:96:8c:
                    19:eb:91:66:09:d2:42:07:b7:c4:9e:88:9b:7b:58:
                    c6:b7:88:07:7d:33:24:7f:ad:4a:ee:a5:eb:c6:d6:
                    2b:19:e0:ba:f0:5d:79:39:ce:76:25:55:eb:6e:9f:
                    17:0c:d1:9f:7c:78:21:1e:cf:82:a4:bc:0e:98:19:
                    eb:a4:ce:d0:6c:c7:ca:4e:b2:50:21:dd:04:a5:54:
                    e0:42:8c:51:86:2f:01:1a:ef:0e:82:34:41:c9:8e:
                    7b:81:5a:cb:76:cb:d5:4d:40:ab:5d:3f:67:cc:34:
                    62:c7:10:6f:ac:0f:1a:be:62:f3:28:e1:59:22:cf:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:90:DC:A1:92:95:71:C8:67:69:E5:DE:C1:AF:71:8F:45:6C:C1:7A
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:fd:e4:5d:e0:6c:c8:64:ff:8a:29:2a:36:3e:7e:b3:36:
         20:1c:ae:2d:33:7d:7b:81:48:d8:6f:27:c3:d3:d1:67:8b:91:
         8a:aa:e2:84:2a:a0:1f:79:cf:40:04:ed:c9:36:0a:10:64:ec:
         d6:d9:15:31:dd:11:15:55:1e:2b:44:01:04:94:46:da:3d:df:
         8f:30:ab:5e:6e:82:48:aa:26:94:67:3d:f7:e1:09:c2:91:dc:
         8c:10:e5:bb:f1:95:a3:f5:c9:ba:f4:3e:0e:52:95:a7:f4:60:
         42:06:7b:5a:49:d0:d5:01:ec:d1:e3:d7:55:7d:da:db:89:e8:
         57:37:9d:12:e5:b5:1a:99:8e:19:2f:96:e4:67:a3:6e:20:3a:
         9b:49:1f:c3:5b:e9:48:b4:6d:e8:e1:c2:48:2e:27:3a:88:8b:
         6b:cc:73:bf:e5:e9:f5:ea:a0:2b:39:bc:ed:87:b4:7d:d1:24:
         aa:b4:80:51:9e:b9:29:36:b2:01:82:40:55:a6:bb:af:4e:46:
         bb:fb:aa:40:ac:16:cf:13:7d:f7:cd:88:93:d9:b8:40:9a:d9:
         e7:76:f7:a7:b0:ae:c8:70:ee:f2:db:a0:1f:b9:43:78:7a:a3:
         05:9b:33:34:42:57:0d:ca:b0:dd:ed:6a:f0:c2:78:8d:20:ea:
         7d:37:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:36 2026 by rpki-client