Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          EaIUI/s4SPaFvsKVIj+hWgMoiqo6MnmI+lXiGadpyO8=
Subject key identifier:   49:29:08:1D:2D:64:9E:A3:0D:10:23:B6:DC:06:C9:E4:B5:66:DF:00
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       036EBFE0FB3C7D3F513FB62B3577797117BBF021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          048C
Signing time:             Fri 04 Sep 2026 17:39:00 +0000
Manifest this update:     Fri 04 Sep 2026 17:34:00 +0000
Manifest next update:     Sat 05 Sep 2026 18:21:00 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 3WjfIA4B2ZLR7NOlAagrYu0sfN9gno3LLwN11XOtGa4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6e:bf:e0:fb:3c:7d:3f:51:3f:b6:2b:35:77:79:71:17:bb:f0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep  4 17:34:00 2026 GMT
            Not After : Sep  5 18:21:00 2026 GMT
        Subject: CN=4929081D2D649EA30D1023B6DC06C9E4B566DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:d2:bb:07:e0:24:7c:1a:2b:c4:a7:9d:75:
                    8f:9c:ab:97:da:fe:d8:d9:8c:7f:ea:af:61:f8:74:
                    13:ab:19:97:0e:5b:06:08:b3:b6:ba:ae:67:22:cd:
                    bc:7d:2c:2d:e2:f6:8a:34:7b:d0:05:d8:86:cf:c2:
                    28:78:d6:ba:bb:bd:d3:f3:5a:17:a0:a7:03:a1:cd:
                    d8:e5:f0:70:b5:0c:1a:81:1d:36:d6:60:fc:ac:bd:
                    76:d8:58:07:3f:29:0c:19:11:46:72:34:c8:c8:f7:
                    9f:d6:47:38:6e:52:24:2d:7e:ca:d0:ce:ea:c1:7f:
                    0b:b5:47:12:a5:11:84:f1:9c:2e:db:82:8b:45:b1:
                    ac:da:46:72:05:76:f4:85:1a:71:4e:8c:3d:66:66:
                    cd:5c:16:bd:42:19:20:9d:ff:64:2f:a8:d9:1f:35:
                    61:7f:ac:a7:27:e2:96:f4:f0:89:fb:c5:20:99:b0:
                    0f:00:a5:3c:b4:b5:8b:fc:a1:24:61:f8:20:c7:51:
                    0a:e6:ce:a0:5f:31:c5:86:dc:c7:1a:49:6b:53:30:
                    48:26:f7:ea:97:c0:a1:bd:0f:05:45:93:ba:30:76:
                    11:71:ad:26:ec:a5:a9:60:38:62:50:5b:53:fb:6d:
                    39:13:56:ed:33:20:f0:3c:ae:78:ba:9a:88:4b:bd:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:08:1D:2D:64:9E:A3:0D:10:23:B6:DC:06:C9:E4:B5:66:DF:00
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:3d:fc:26:9f:c2:8b:36:fd:76:d1:ee:96:1d:e4:47:af:
         b7:c7:8b:f9:c3:7b:98:3f:47:55:5f:c1:25:25:89:54:48:8e:
         f2:b9:cd:eb:43:c0:7f:d8:2b:4e:2f:c2:f6:dc:67:36:50:50:
         6b:99:4a:3d:63:d7:2f:68:bc:75:dc:1d:2d:55:62:99:1a:6f:
         e6:3c:24:49:ae:cb:78:04:ce:90:ef:a5:f6:f3:44:dd:67:6f:
         58:10:29:b5:8c:5f:78:50:05:40:45:e6:d6:30:2c:ea:12:e9:
         2b:98:59:ae:e6:c5:3c:32:2e:76:80:64:62:c1:19:c3:e6:2b:
         45:b6:85:c5:4a:f5:54:db:3c:c7:55:f0:64:d0:cf:d1:f1:35:
         f4:ad:d4:dc:62:de:9b:7b:4c:b9:a3:75:c8:83:bf:9a:67:12:
         93:0d:87:26:97:a1:7f:03:52:62:91:6e:8d:57:db:e9:09:be:
         02:7b:af:be:ef:ec:73:b7:50:68:fe:67:e0:f5:3c:a6:0a:4b:
         df:0b:80:2e:37:dd:10:32:bc:80:b3:de:b7:09:27:e5:3f:2d:
         a0:fe:ec:f6:37:b8:28:f0:6d:ef:fe:9e:67:9a:5f:5b:3c:fc:
         f8:20:60:d4:33:9e:9c:10:d8:2d:3d:7e:df:81:be:ed:fa:69:
         d5:63:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:31:40 2026 by rpki-client