Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          3ZzErci9WQww/JVPzJZxCQHMQAPyRVtU8+sHhDyffX8=
Subject key identifier:   0E:DF:B7:5E:62:87:19:2B:08:4D:BF:55:ED:FA:F1:C4:34:28:41:66
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4F740A77792F0C5F261191DB40BDE57FD5CFA6AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0489
Signing time:             Wed 02 Sep 2026 15:14:00 +0000
Manifest this update:     Wed 02 Sep 2026 15:09:00 +0000
Manifest next update:     Thu 03 Sep 2026 15:32:00 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: V2Xla/u6LG8XyT3EvV00gtQlcYCzC+hD418aZ5Eo+rU=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 14:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:74:0a:77:79:2f:0c:5f:26:11:91:db:40:bd:e5:7f:d5:cf:a6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Sep  2 15:09:00 2026 GMT
            Not After : Sep  3 15:32:00 2026 GMT
        Subject: CN=0EDFB75E6287192B084DBF55EDFAF1C434284166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:9a:1c:e6:5f:d8:65:5c:e1:5d:72:cc:1e:
                    6c:b2:05:6d:e7:e9:19:bf:31:29:61:53:6d:30:4c:
                    36:e1:d7:8e:d6:76:5e:25:16:5f:fd:89:3c:ec:4b:
                    93:cb:1e:b2:a3:94:94:ae:3d:4d:37:4e:57:5c:4c:
                    94:96:58:b6:df:43:5f:86:4b:43:e9:28:e6:1d:3d:
                    75:35:01:82:02:63:fa:01:3c:df:37:5f:4a:cb:2f:
                    b8:f8:93:cf:b8:9e:f7:53:98:f4:5c:02:f4:98:f2:
                    ea:b0:2c:5a:67:8f:be:36:47:af:33:6e:33:c9:68:
                    1e:84:48:1e:1f:bd:63:c6:2c:d1:c1:a4:e4:a7:c4:
                    ef:75:45:ba:89:3d:43:dd:75:78:bc:68:31:a5:f5:
                    75:2e:03:4f:f7:76:cf:fb:d3:6a:c4:47:79:2b:f8:
                    7f:8b:21:2c:ec:44:61:62:34:ce:22:6b:19:c7:34:
                    db:c6:92:5c:77:53:89:97:17:07:a3:f8:dc:97:0e:
                    be:97:00:26:8a:48:18:9d:f9:ac:d5:bb:56:f5:80:
                    d2:be:b0:90:b8:5e:85:6a:d6:d8:11:2b:b7:75:33:
                    92:0e:14:92:75:1f:21:c6:89:ac:e1:97:b0:06:93:
                    83:7d:96:13:a1:2f:05:eb:16:3a:22:e9:68:46:2c:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DF:B7:5E:62:87:19:2B:08:4D:BF:55:ED:FA:F1:C4:34:28:41:66
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:30:f4:66:e7:2f:5e:11:85:1b:e8:35:1c:8f:52:6f:5a:a3:
         86:03:7b:2c:87:a1:64:91:b8:fc:87:f8:be:79:44:79:7e:77:
         8a:a3:6b:dd:f5:a4:b4:ec:fa:d6:3b:9f:ed:51:5a:09:88:f1:
         2f:cd:e0:22:0b:4a:f3:bb:45:35:81:85:40:86:ef:64:1f:72:
         29:6a:d1:e6:2c:d6:7f:74:80:a9:28:9b:cc:0b:35:6c:01:56:
         b3:c0:7a:a6:9e:32:4e:95:80:17:d6:fc:76:05:1b:bb:8c:73:
         27:38:46:79:f6:80:b8:9c:cd:83:ff:30:75:4a:45:aa:da:db:
         ff:46:79:e0:e5:ff:a1:ab:77:47:bc:6a:83:d6:6b:84:9b:3e:
         b2:17:e4:c7:5f:a5:b6:a1:81:a8:4b:b7:89:0b:0e:cd:5b:c1:
         35:01:94:6c:eb:6c:dd:e3:97:86:32:fc:cd:30:51:2b:7a:d8:
         fa:8f:7a:3f:1d:39:72:27:97:f6:ba:e3:3e:9b:19:33:f1:29:
         df:b2:15:02:ba:24:19:65:85:a3:ef:ec:09:cd:de:ef:39:e8:
         ed:4b:9f:32:88:d6:33:06:87:87:1a:aa:77:fd:80:63:9e:ec:
         b3:a5:5b:9b:33:e5:5b:16:d7:d8:fe:61:37:0e:5a:e0:a1:58:
         05:5d:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 19:00:25 2026 by rpki-client