Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          1z9iQLKfwvRnydnjv/0np7lnAILIzrsGFfBC1gTnQ3o=
Subject key identifier:   4E:56:A9:E6:71:48:EB:8D:F3:67:14:0E:4B:74:63:09:1D:58:F8:3B
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1B21F9DDDBE95EEECE6EA9A12971A6B2910B7B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          03B6
Signing time:             Tue 31 Mar 2026 12:59:05 +0000
Manifest this update:     Tue 31 Mar 2026 12:54:05 +0000
Manifest next update:     Wed 01 Apr 2026 15:45:05 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: rf3z/hPzbWGmWDDyXiOPD9A5WKWwV8kCi2ZM/6+f8lo=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Apr 2026 14:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:21:f9:dd:db:e9:5e:ee:ce:6e:a9:a1:29:71:a6:b2:91:0b:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Mar 31 12:54:05 2026 GMT
            Not After : Apr  1 15:45:05 2026 GMT
        Subject: CN=4E56A9E67148EB8DF367140E4B7463091D58F83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:b0:33:3e:60:54:fe:69:e1:37:8c:a0:9e:
                    65:ea:de:5e:46:8c:0f:13:70:ef:03:f0:88:5a:4d:
                    ac:f2:8b:eb:83:c4:11:bf:d0:0d:7b:eb:43:98:11:
                    8a:08:57:30:2b:63:dd:43:9c:60:0e:f3:6b:70:ce:
                    61:df:60:f6:35:f6:7d:f2:d0:8a:a8:82:16:d9:91:
                    1b:7a:76:86:47:26:da:d5:1a:c4:92:65:c7:88:ef:
                    ac:ce:24:a8:fa:e5:a7:50:fd:e7:31:d6:36:c2:bb:
                    92:9d:5a:fa:a9:ed:2e:5f:8b:d6:6b:28:09:35:0d:
                    a6:f6:d7:1c:9f:9e:f6:d8:d8:80:ee:62:b9:ad:de:
                    33:ac:97:e0:fe:b6:6e:a7:f6:c0:25:6f:bd:e5:d2:
                    b5:54:f2:a0:b2:f9:69:b5:e7:86:82:11:6a:1b:ca:
                    17:d0:07:bc:da:d4:11:67:96:6c:58:6b:33:bc:09:
                    d9:12:4b:ed:af:bd:da:60:9d:9a:b5:5b:de:14:4f:
                    41:3a:99:02:16:68:cb:4b:3e:02:83:7d:a7:b0:9c:
                    31:66:52:f5:77:6b:9a:f2:cd:a7:b9:81:1b:19:d6:
                    b6:e6:a9:8a:ad:a9:9a:3f:c9:dd:4b:69:b5:6f:52:
                    e5:41:5a:f4:a5:58:2a:4d:eb:cd:d0:12:fd:8a:93:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:A9:E6:71:48:EB:8D:F3:67:14:0E:4B:74:63:09:1D:58:F8:3B
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:fc:3d:78:a0:e8:99:5e:1b:3b:95:a2:f0:d0:96:90:ae:
         77:8b:b4:ad:63:92:29:c0:e7:ca:56:8e:36:d2:59:ad:cc:31:
         5b:50:e4:25:10:3c:63:f6:ef:c0:21:0f:37:67:5e:72:16:61:
         18:f2:6f:00:d3:52:f3:ca:ed:1e:2b:68:2f:ee:19:17:5a:e3:
         e2:ce:7d:e9:91:02:e2:15:5d:46:4a:18:59:1c:15:d2:0b:10:
         29:b3:e9:d8:8c:5c:fd:a0:6c:c7:9c:fe:09:3e:d9:fd:c5:57:
         3b:3c:9b:5d:e2:42:3a:8e:cc:23:84:7f:2d:32:94:4f:ec:7e:
         91:01:ac:38:df:83:29:a3:3d:80:58:06:5a:42:32:57:a6:6b:
         9f:e0:ae:c5:45:58:76:e8:aa:44:c3:e2:24:86:26:b8:df:57:
         18:80:29:63:fd:44:7b:2e:56:37:52:e7:b0:ed:47:d8:d2:b9:
         06:33:9e:df:5f:09:ef:58:d6:af:af:ed:c3:4d:c8:3b:9e:55:
         db:b3:d3:e6:9c:99:09:0c:cb:c1:33:be:7a:dd:87:2b:44:80:
         bd:39:c8:f3:f2:11:b6:16:e3:1e:dc:5c:ce:f8:6f:45:3d:91:
         d2:b6:d0:b0:c8:01:5b:b0:fb:72:38:bc:10:59:83:a1:c1:af:
         ff:df:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 22:34:09 2026 by rpki-client