Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          YmOthFwAs5mrZSxDTZkeIzEF7/Zj0rnyxD6MetCU5xU=
Subject key identifier:   30:34:3C:BE:64:72:8C:C0:FA:42:25:3A:EA:83:8B:EE:2A:ED:93:22
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       6493A247F3E38D47010C28349BE1D4C980B08880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          04D3
Signing time:             Mon 26 Oct 2026 23:58:16 +0000
Manifest this update:     Mon 26 Oct 2026 23:53:16 +0000
Manifest next update:     Wed 28 Oct 2026 01:17:16 +0000
Files and hashes:         1: AS216107.asa (hash: AiZTYmQWY2UEoMILfY9aIIO2rGVt/jGlRh+NxasFmNI=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: j5s8HDhRL6rOgKvhr3u7yX/yW9MEdYLPpu8fMTYlfq4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:93:a2:47:f3:e3:8d:47:01:0c:28:34:9b:e1:d4:c9:80:b0:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Oct 26 23:53:16 2026 GMT
            Not After : Oct 28 01:17:16 2026 GMT
        Subject: CN=30343CBE64728CC0FA42253AEA838BEE2AED9322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:da:09:44:22:a2:a2:3a:ca:2f:6d:d1:aa:
                    1b:d4:b9:3e:c4:b6:db:57:1c:17:47:c1:a1:22:4f:
                    87:ce:87:03:cd:f0:13:2e:64:09:f8:b7:5a:97:03:
                    a1:6d:b1:b2:b7:21:cd:2a:32:73:13:70:ec:a4:93:
                    c3:b9:07:52:82:46:7b:e0:09:7c:88:02:9a:15:08:
                    ff:38:0c:a2:9a:ae:0d:ad:72:9a:5b:9d:22:98:4d:
                    0a:c2:0f:e4:6c:0e:7e:6e:85:24:7a:23:2d:e1:f8:
                    e0:a4:25:16:98:53:95:ec:12:0f:f4:6c:ae:a6:72:
                    39:ea:50:46:fc:a2:f5:98:27:f7:8f:42:42:9c:a4:
                    e1:df:6b:b3:4d:48:e5:d7:e7:72:1b:ce:99:cb:30:
                    38:41:a6:27:99:f5:23:a8:09:86:ca:32:5f:2d:ea:
                    20:7a:d2:6b:21:78:a7:d5:5b:37:22:3f:6e:12:f9:
                    98:dd:3c:ef:0a:ca:e4:31:63:8f:6d:ec:23:ef:d9:
                    73:55:a8:24:56:b0:24:d2:85:69:3a:96:51:0e:ba:
                    8e:4e:d4:53:d7:aa:c6:71:0d:0b:78:e1:aa:a6:77:
                    dd:c1:84:98:c7:f4:fb:04:c4:a3:a0:8c:4d:d0:c0:
                    f5:4d:ec:e3:91:f4:ad:69:7c:91:98:be:dd:50:6b:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:3C:BE:64:72:8C:C0:FA:42:25:3A:EA:83:8B:EE:2A:ED:93:22
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:cb:4e:38:1e:96:a0:37:e8:7c:dc:3e:e2:ee:95:3f:45:
         d7:a1:02:9b:04:3a:d8:6e:03:f6:89:0c:da:f8:f8:b8:b7:bd:
         f3:40:31:dd:ec:05:7e:24:ff:68:af:8b:5e:a8:af:0d:47:21:
         10:0e:11:13:94:0a:8b:67:86:63:02:43:d3:ae:a1:43:89:cc:
         70:f7:ae:d8:61:0a:a9:db:42:5a:08:67:25:1f:4d:59:e2:30:
         90:93:84:a0:83:de:b8:73:8e:6d:9f:1c:1e:b3:cd:be:84:73:
         d7:36:4c:d9:fa:e9:b1:6f:5f:2a:36:ee:5e:df:2f:14:21:85:
         3c:89:40:fc:08:7b:8c:41:ba:61:ec:e1:aa:cc:39:17:7e:06:
         35:7e:92:25:81:9f:be:66:11:60:58:0e:7a:1f:79:7e:98:54:
         5b:f3:f0:6d:5d:f7:d3:b4:97:35:12:7e:9d:da:76:5f:94:49:
         05:75:54:ae:ab:db:ce:46:23:e0:47:7e:59:fd:6d:35:40:5d:
         73:6c:ed:b1:48:69:f3:af:6c:8e:9a:30:a9:f7:18:b7:1e:43:
         27:2d:3b:83:0a:d3:f6:fa:58:b6:e2:92:e9:a4:28:60:6f:97:
         1c:3c:d7:dc:c8:1e:fb:15:14:c5:06:42:be:b6:e9:35:aa:28:
         62:58:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:57 2026 by rpki-client