Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          Nfj1puavOqhXfUk2w3a60GnHZrOTs2J9f4t0lelGSig=
Subject key identifier:   4E:19:2D:E2:CA:88:4A:DC:F9:62:57:CF:B6:13:2D:92:B1:D7:F7:01
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       51A8B2B236169CA3A5887337E677E6B3C321FAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04E7
Signing time:             Mon 09 Nov 2026 01:58:23 +0000
Manifest this update:     Mon 09 Nov 2026 01:53:23 +0000
Manifest next update:     Tue 10 Nov 2026 05:00:23 +0000
Files and hashes:         1: AS216107.asa (hash: G3HC27NuKem7ftHKQMHdWTgdJjlwOzOkBaiDyTq26cc=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 27bzKCAOxbAmGiwrG9ms/GYoXYVzqcYCg+A5YhoDfzA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a8:b2:b2:36:16:9c:a3:a5:88:73:37:e6:77:e6:b3:c3:21:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  9 01:53:23 2026 GMT
            Not After : Nov 10 05:00:23 2026 GMT
        Subject: CN=4E192DE2CA884ADCF96257CFB6132D92B1D7F701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:d3:b0:ce:c7:72:6f:08:6a:67:4b:4e:2d:
                    92:fa:7a:df:aa:8c:46:f1:3f:dd:f7:33:9d:39:0d:
                    9c:26:8d:09:f7:ff:db:26:3b:78:9b:e2:c4:06:df:
                    1e:36:13:40:28:0b:d1:4e:e8:29:ed:7f:63:db:08:
                    d2:52:57:77:f2:97:0d:35:eb:02:ac:b0:65:04:e2:
                    be:b2:c3:39:29:0e:0e:63:38:c1:32:d6:ae:3c:70:
                    12:ae:54:a6:48:79:57:71:83:bf:f4:7d:87:84:7e:
                    e4:c6:cd:c5:8f:ad:00:fc:6f:f2:40:ed:0d:9c:64:
                    77:39:07:d1:99:f2:7e:a4:5a:73:52:c1:6d:00:9f:
                    ea:29:5e:c7:9f:25:06:db:be:ac:31:3d:c0:42:2a:
                    16:6f:9b:fe:57:f3:fc:5e:4a:b3:88:2c:67:12:57:
                    2f:60:1c:70:82:18:7b:49:18:fd:57:9a:36:ed:5c:
                    18:de:8a:a6:6d:73:c1:dc:64:69:56:b8:54:ee:33:
                    b8:cb:b8:83:8e:e1:e9:6a:7d:82:66:f6:41:b7:da:
                    0c:a1:2e:f4:fb:be:27:c3:1f:7b:5c:7e:35:ce:41:
                    3f:03:75:57:ca:82:69:cc:b8:1b:ed:52:b1:fa:9d:
                    b8:17:83:f4:f0:4a:9c:99:48:e8:c8:0c:67:4d:b1:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:19:2D:E2:CA:88:4A:DC:F9:62:57:CF:B6:13:2D:92:B1:D7:F7:01
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:5a:c9:da:cf:51:91:1c:01:d7:3a:78:f4:71:a6:70:a4:
         a8:b5:90:e1:c4:61:68:7b:96:71:37:7d:56:06:c7:9c:80:bd:
         92:f4:12:09:99:af:76:4a:97:b9:98:0e:e2:a5:f3:25:b3:85:
         42:be:e9:6e:2e:99:df:0c:9d:72:8c:71:2e:2f:42:81:51:e2:
         a4:4e:f6:fb:b6:84:58:3f:a9:0b:3b:49:0f:7d:c2:d1:f0:95:
         ee:56:5a:87:e1:96:f4:59:ed:7a:e4:cc:78:9b:0b:6a:2f:70:
         74:1c:10:cf:21:d1:39:aa:bb:43:84:6d:dd:64:da:5a:db:42:
         5f:20:3e:53:1f:3b:91:86:52:8f:44:4d:25:b6:9b:44:fd:34:
         e2:6f:b2:1b:ec:d8:06:97:db:62:12:9f:20:00:73:d3:f2:66:
         4b:28:c4:45:9b:8c:26:e8:23:8e:a0:27:2b:62:42:fa:a9:3a:
         d8:92:bb:76:ad:8c:85:19:f3:62:f2:53:f8:34:79:8c:37:d8:
         3f:71:9b:cb:f6:52:05:ce:82:5e:01:33:71:65:38:03:ae:f1:
         95:63:a2:a4:63:4f:6b:e6:f5:65:a7:4b:28:6b:bb:d4:e1:5f:
         d4:39:fc:bb:d4:3f:fe:63:b1:ab:fa:ce:d6:89:e8:02:4c:d5:
         62:77:73:53
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUaiysjYWnKOliHM35nfms8Mh+tQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjExMDkwMTUzMjNaFw0yNjExMTAwNTAwMjNaMDMxMTAvBgNV
BAMTKDRFMTkyREUyQ0E4ODRBRENGOTYyNTdDRkI2MTMyRDkyQjFEN0Y3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr59OwzsdybwhqZ0tOLZL6et+q
jEbxP933M505DZwmjQn3/9smO3ib4sQG3x42E0AoC9FO6Cntf2PbCNJSV3fylw01
6wKssGUE4r6ywzkpDg5jOMEy1q48cBKuVKZIeVdxg7/0fYeEfuTGzcWPrQD8b/JA
7Q2cZHc5B9GZ8n6kWnNSwW0An+opXsefJQbbvqwxPcBCKhZvm/5X8/xeSrOILGcS
Vy9gHHCCGHtJGP1XmjbtXBjeiqZtc8HcZGlWuFTuM7jLuIOO4elqfYJm9kG32gyh
LvT7vifDH3tcfjXOQT8DdVfKgmnMuBvtUrH6nbgXg/TwSpyZSOjIDGdNsWnLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUThkt4sqIStz5YlfPthMtkrHX9wEwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW1aydrPUZEcAdc6ePRx
pnCkqLWQ4cRhaHuWcTd9VgbHnIC9kvQSCZmvdkqXuZgO4qXzJbOFQr7pbi6Z3wyd
coxxLi9CgVHipE72+7aEWD+pCztJD33C0fCV7lZah+GW9FnteuTMeJsLai9wdBwQ
zyHROaq7Q4Rt3WTaWttCXyA+Ux87kYZSj0RNJbabRP004m+yG+zYBpfbYhKfIABz
0/JmSyjERZuMJugjjqAnK2JC+qk62JK7dq2MhRnzYvJT+DR5jDfYP3Gby/ZSBc6C
XgEzcWU4A67xlWOipGNPa+b1ZadLKGu71OFf1Dn8u9Q//mOxq/rO1onoAkzVYndz
Uw==
-----END CERTIFICATE-----
Generated at Mon Nov 9 22:53:36 2026 by rpki-client