Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Cdj7HujPJyJyaXNkHylqdebLHZGLDa0/n6bNcFmjbOM=
Subject key identifier:   74:6D:B5:18:EB:3B:80:C5:26:0A:D2:A7:EB:32:13:7D:E1:04:F1:BD
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       0CF513F3FD7B6727455498B7AFCFE178B8E793EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04CF
Signing time:             Fri 23 Oct 2026 23:28:16 +0000
Manifest this update:     Fri 23 Oct 2026 23:23:16 +0000
Manifest next update:     Sun 25 Oct 2026 03:14:16 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: XvUqQdyNwJhu2xvadihlMkyS4q0SkcWDKX/+qmbyeXE=)
                          2: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:13:f3:fd:7b:67:27:45:54:98:b7:af:cf:e1:78:b8:e7:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 23 23:23:16 2026 GMT
            Not After : Oct 25 03:14:16 2026 GMT
        Subject: CN=746DB518EB3B80C5260AD2A7EB32137DE104F1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:cf:c5:69:9c:48:6c:d3:63:36:80:f7:eb:
                    ef:f5:65:cc:30:20:d8:c1:1a:05:2c:f8:94:b6:d9:
                    65:de:91:ad:87:55:5d:b2:29:47:04:05:55:c0:27:
                    f3:c0:69:77:dc:23:79:f1:5f:cd:a6:50:71:5f:2f:
                    a8:72:f1:b1:2d:83:00:11:ae:0b:31:5a:e0:f1:1c:
                    e5:e3:d7:b6:86:9e:3a:2f:ed:0d:17:42:b9:0f:44:
                    3a:62:98:8d:5d:bc:0e:83:c8:2e:38:11:cf:1a:80:
                    80:2c:d8:9a:8e:39:ef:19:57:67:81:6a:7a:3d:b2:
                    8f:bb:28:5b:73:5b:f6:98:48:06:9a:96:5c:f2:a6:
                    da:e4:b3:1f:ee:83:77:86:23:c3:a5:de:24:e2:11:
                    1f:16:0f:0b:c6:78:b9:58:36:10:cf:cc:b1:6d:2f:
                    15:38:ee:03:b6:9c:4d:f7:97:f5:1b:ae:8f:a8:e7:
                    d2:15:2a:58:c5:49:a5:ca:6c:8e:27:4c:85:e9:b6:
                    a1:29:39:6e:72:50:6e:a8:03:b9:27:bb:a5:84:11:
                    e9:71:12:c1:c7:2f:cc:19:0f:d7:b3:a2:43:8e:0f:
                    47:8f:d5:b9:5e:3f:31:fa:f4:b7:32:38:ea:8c:52:
                    f0:ab:03:b1:97:bd:17:21:fd:62:fb:f8:c9:88:0c:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6D:B5:18:EB:3B:80:C5:26:0A:D2:A7:EB:32:13:7D:E1:04:F1:BD
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7e:bb:f8:4d:7d:60:85:cc:3c:3d:a2:30:ee:a4:db:d3:8e:
         62:05:27:e2:5d:15:02:4c:16:01:68:c0:86:16:52:b0:8e:c4:
         25:13:49:cb:ae:0a:de:0d:8b:8e:fc:b3:0e:d5:72:6d:27:e6:
         9f:d9:7f:88:0a:c7:e8:15:7f:ba:28:06:9c:99:ca:4f:18:f7:
         89:60:0f:0f:1d:5e:19:c2:8c:d2:5b:7d:6b:f8:0e:75:58:a9:
         f6:c4:14:8d:3e:a3:8d:ef:1a:7f:50:d4:a2:34:c2:a2:ed:95:
         28:68:5c:bd:20:53:52:2e:3d:06:83:b4:68:44:0c:79:2a:57:
         ea:9c:6f:6e:61:b6:de:5f:27:04:3e:92:3c:e9:ed:84:dd:e9:
         79:b6:d3:56:b5:c9:69:d3:5e:42:64:e4:95:79:a5:17:c9:e4:
         69:e9:3e:cd:94:94:c3:95:0a:d1:0e:07:99:ba:cf:50:dd:f7:
         a8:8d:5f:e4:15:28:a6:a6:9d:ab:de:b4:e0:aa:a3:77:78:4f:
         72:11:90:17:09:95:73:e6:d2:7c:54:c3:f2:87:34:0a:e5:04:
         7e:5a:c1:64:ab:a4:e8:c0:8b:74:34:de:c3:77:5f:a9:2e:0a:
         6b:15:52:05:b0:a1:32:0b:37:e7:18:3b:19:65:3d:ed:cd:1e:
         49:ba:e1:11
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDPUT8/17ZydFVJi3r8/heLjnk+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjEwMjMyMzIzMTZaFw0yNjEwMjUwMzE0MTZaMDMxMTAvBgNV
BAMTKDc0NkRCNTE4RUIzQjgwQzUyNjBBRDJBN0VCMzIxMzdERTEwNEYxQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWM/FaZxIbNNjNoD36+/1Zcww
INjBGgUs+JS22WXeka2HVV2yKUcEBVXAJ/PAaXfcI3nxX82mUHFfL6hy8bEtgwAR
rgsxWuDxHOXj17aGnjov7Q0XQrkPRDpimI1dvA6DyC44Ec8agIAs2JqOOe8ZV2eB
ano9so+7KFtzW/aYSAaallzyptrksx/ug3eGI8Ol3iTiER8WDwvGeLlYNhDPzLFt
LxU47gO2nE33l/Ubro+o59IVKljFSaXKbI4nTIXptqEpOW5yUG6oA7knu6WEEelx
EsHHL8wZD9ezokOOD0eP1blePzH69LcyOOqMUvCrA7GXvRch/WL7+MmIDPszAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdG21GOs7gMUmCtKn6zITfeEE8b0wHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH67+E19YIXMPD2iMO6k
29OOYgUn4l0VAkwWAWjAhhZSsI7EJRNJy64K3g2LjvyzDtVybSfmn9l/iArH6BV/
uigGnJnKTxj3iWAPDx1eGcKM0lt9a/gOdVip9sQUjT6jje8af1DUojTCou2VKGhc
vSBTUi49BoO0aEQMeSpX6pxvbmG23l8nBD6SPOnthN3pebbTVrXJadNeQmTklXml
F8nkaek+zZSUw5UK0Q4HmbrPUN33qI1f5BUopqadq9604Kqjd3hPchGQFwmVc+bS
fFTD8oc0CuUEflrBZKuk6MCLdDTew3dfqS4KaxVSBbChMgs35xg7GWU97c0eSbrh
EQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:46:11 2026 by rpki-client