Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          n8N80R+ldHZd5RN1Cdd1IEO0JRQUR8N9toxb4gFV3xA=
Subject key identifier:   A7:99:B9:19:27:AB:20:79:BB:45:C9:A4:EE:70:E8:96:C9:4F:00:FA
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       598EA998076FDE23F066B714C63F282630BA105F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0461
Signing time:             Mon 03 Aug 2026 19:43:42 +0000
Manifest this update:     Mon 03 Aug 2026 19:38:42 +0000
Manifest next update:     Tue 04 Aug 2026 20:13:42 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: GGa/jkI0BZTJWKODEJeiOjcduIKPFSEWfsRlK9pPCy0=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 18:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8e:a9:98:07:6f:de:23:f0:66:b7:14:c6:3f:28:26:30:ba:10:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Aug  3 19:38:42 2026 GMT
            Not After : Aug  4 20:13:42 2026 GMT
        Subject: CN=A799B91927AB2079BB45C9A4EE70E896C94F00FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:ac:62:5f:0c:ff:f2:f2:16:55:f0:27:0b:
                    8d:97:56:8b:94:69:64:64:dc:6c:01:84:3b:4d:48:
                    92:21:7f:44:5d:10:fe:5c:72:7d:f1:ac:fe:9e:33:
                    5f:91:23:cc:17:39:0f:09:99:3c:ee:9b:75:f1:23:
                    8d:ba:5c:00:6d:b7:a2:f4:c2:5a:18:8f:90:32:e6:
                    65:4a:c0:e4:5b:d3:6c:46:52:80:a1:be:50:22:ea:
                    8b:8d:b3:84:87:7a:d7:15:ac:31:f2:7b:f4:4d:d7:
                    f4:5e:ee:57:0d:f6:90:a4:cb:09:f8:c4:98:74:50:
                    99:1a:75:80:4b:67:e9:76:44:eb:f2:35:b6:1d:10:
                    43:60:a8:03:f3:0c:38:83:7f:14:e4:d8:9f:fc:ea:
                    a5:8c:cc:8b:9f:e1:a3:2a:b7:93:85:dd:f9:2d:ae:
                    ab:dd:b0:40:c4:ed:11:2d:91:c7:fd:ab:1d:ed:70:
                    06:4a:83:58:47:47:f0:3e:bd:1b:a1:f2:c7:54:54:
                    2c:aa:5e:78:78:b1:92:46:86:5e:e4:32:f0:36:b5:
                    3a:45:6f:c1:6c:4f:66:fd:cb:4a:03:a8:4a:49:cf:
                    ab:e0:bb:cd:44:56:5c:d5:71:31:a9:7d:52:43:d4:
                    89:32:21:a6:f7:94:45:5b:4f:db:4c:ea:9b:99:95:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:B9:19:27:AB:20:79:BB:45:C9:A4:EE:70:E8:96:C9:4F:00:FA
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:e5:0d:ee:86:cf:2b:f7:f3:28:af:51:bb:ce:26:e5:e2:
         2d:bf:d4:25:89:9e:83:05:98:7f:94:fd:bc:c5:b3:db:02:1a:
         22:df:c5:ed:30:aa:13:f6:90:84:24:9e:b3:b5:07:5c:ea:0b:
         f2:0f:40:f7:54:77:54:04:15:98:33:da:e0:71:3f:97:11:75:
         d4:ad:3d:9e:5f:86:e2:59:9c:6a:8a:88:12:da:89:79:24:d3:
         4a:48:1f:79:61:9f:d4:0d:90:c8:84:a4:83:97:74:4b:32:99:
         94:a1:0c:bf:80:3b:7b:09:fd:0d:85:bb:8b:01:df:1a:cb:b1:
         7e:24:12:53:21:48:68:ac:99:76:57:33:ac:3b:ff:a8:fa:d3:
         9f:b5:23:1b:93:eb:b7:3d:b2:51:9b:f5:7b:90:ad:46:db:8e:
         ea:7a:7f:85:09:29:ab:33:e3:3d:b1:4d:9d:44:51:a0:47:0c:
         e3:09:20:e7:ce:62:38:da:a7:0d:11:c1:b1:cd:da:c4:35:cf:
         6b:d4:b4:b3:86:a4:d0:5b:2c:33:9f:2b:d2:f1:b2:83:4e:00:
         91:b0:a0:87:23:46:ed:12:62:e1:06:2b:33:b8:fa:a9:6e:a1:
         9e:2a:f3:3a:67:53:08:4a:ed:f5:fd:47:b7:0d:2c:0d:a6:14:
         50:72:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 01:50:23 2026 by rpki-client