
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          37uKnH3ERFswZNU8U0z/YPtzhJl2JCcdL/hLleF/ugs=
Subject key identifier:   AB:50:A9:2F:3E:E8:F5:0D:24:BD:C8:5A:87:8E:48:87:36:BF:D0:2D
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       6DC27295C1CCA9385CE31CC822CE074E24BB10E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          02F1
Signing time:             Tue 04 Nov 2025 08:18:29 +0000
Manifest this update:     Tue 04 Nov 2025 08:13:29 +0000
Manifest next update:     Wed 05 Nov 2025 12:15:29 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 8zgxYDupamAzUxqpou9Jtsy5qs4NnhFWc1Rzyp77XjA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c2:72:95:c1:cc:a9:38:5c:e3:1c:c8:22:ce:07:4e:24:bb:10:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov  4 08:13:29 2025 GMT
            Not After : Nov  5 12:15:29 2025 GMT
        Subject: CN=AB50A92F3EE8F50D24BDC85A878E488736BFD02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:e5:11:3c:c0:ad:49:1c:d8:e9:c6:88:8f:
                    ce:e7:89:22:07:0e:cc:d8:17:65:a7:0c:c2:d6:54:
                    a0:b9:ec:6c:43:e2:2e:cb:6c:2f:0d:8f:d5:1a:79:
                    36:b0:29:d9:fd:ed:fe:e2:d1:74:36:63:32:85:45:
                    77:10:af:b3:65:7f:bb:4c:dc:da:dc:6b:fd:ae:93:
                    1d:4c:e7:56:88:7e:0e:24:06:51:97:af:18:0c:63:
                    b8:4b:7f:22:df:f7:00:a0:12:c5:d5:9d:3f:26:65:
                    01:7a:e5:49:5e:8d:2a:47:26:c4:bb:20:b6:aa:88:
                    ce:01:b2:71:52:e3:db:3f:d0:b5:8d:14:53:ae:31:
                    2a:0a:52:64:e0:32:66:cd:aa:76:1d:aa:b9:39:67:
                    1f:63:f5:96:94:92:8b:14:bd:32:9b:e0:06:1e:a5:
                    82:5e:e2:4a:5f:95:3b:2b:b4:5a:90:ab:9d:49:ec:
                    e8:73:a8:99:fe:89:f2:d5:2e:be:0d:a1:81:18:47:
                    76:5f:c7:6f:db:17:23:1e:1a:2e:9a:71:2d:07:0e:
                    9b:e8:c0:f6:d9:df:60:25:76:21:e4:8f:09:64:b2:
                    31:df:f2:5f:53:76:d4:44:70:e4:12:e2:44:e3:70:
                    ae:16:7a:ae:f5:89:78:d2:bf:35:28:11:3e:9c:96:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:50:A9:2F:3E:E8:F5:0D:24:BD:C8:5A:87:8E:48:87:36:BF:D0:2D
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7a:23:41:42:d4:6a:8b:6f:8e:f7:59:43:37:e1:24:31:7d:c8:
         74:83:c9:09:58:e2:25:69:78:7c:f5:2f:1f:94:44:54:1d:7a:
         17:77:5c:85:78:ea:b0:e3:5d:b9:e4:b6:cb:65:98:66:04:07:
         89:67:d7:6c:85:e5:d5:09:ed:5b:0a:56:88:58:18:68:a2:d8:
         e3:1f:a4:e7:60:1d:d1:a1:09:0b:f5:52:88:37:7a:12:d0:42:
         c2:81:2b:27:17:50:ae:b0:d5:16:1e:5e:04:f3:f4:29:99:11:
         3b:cb:be:1f:a3:5e:63:d9:41:7c:39:09:c6:06:11:03:45:7c:
         05:41:61:23:dd:47:0b:13:9b:04:e8:55:14:3c:da:17:da:86:
         ae:da:49:86:0e:08:6a:8f:ea:69:a8:9b:cd:1b:28:98:a7:61:
         eb:ad:9b:a4:a0:08:41:57:9a:fb:17:d7:68:e3:05:08:26:ff:
         e4:3a:60:ff:33:8c:ae:8e:e7:8c:4c:85:b3:1f:e6:02:87:93:
         f8:08:d2:46:1e:be:b8:f5:56:a0:b1:3e:61:71:49:37:08:6b:
         1c:69:6d:59:de:26:4c:aa:7f:99:47:2e:d0:80:7a:4a:12:23:
         3d:f8:59:88:2e:b7:c3:a7:df:fb:09:c0:67:8d:e6:a6:72:5e:
         2f:48:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:50:58 2025 by rpki-client