Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          xnB7EDGUKqrMGTs0KaHDQneUvz18ppqg9Lham9sLL2g=
Subject key identifier:   9F:4C:CB:4B:0E:A9:60:A2:23:F4:1C:2B:99:71:6A:3A:FB:92:2E:86
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       6A09E3BF6C9B2C2326BEE317EB7C9770134E71E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          0104
Signing time:             Sun 11 May 2025 02:26:39 +0000
Manifest this update:     Sun 11 May 2025 02:21:39 +0000
Manifest next update:     Tue 13 May 2025 05:56:39 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: RPuJ5GoouIJvsF3hEpUtSTLvrsMqffxFcAT+926CZZM=)
                          2: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:09:e3:bf:6c:9b:2c:23:26:be:e3:17:eb:7c:97:70:13:4e:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: May 11 02:21:39 2025 GMT
            Not After : May 13 05:56:39 2025 GMT
        Subject: CN=9F4CCB4B0EA960A223F41C2B99716A3AFB922E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:96:08:f7:8f:62:ee:a4:97:6e:4a:82:ad:
                    a5:3c:1a:40:6a:fe:fd:24:29:b2:76:29:8f:5f:c9:
                    7c:16:57:1a:79:38:71:21:2d:f0:23:cf:9c:cf:50:
                    0b:37:66:96:bf:65:54:c4:84:a0:e0:4f:26:ef:70:
                    eb:32:ca:08:eb:ba:25:12:d5:1e:35:0f:6f:d7:d8:
                    59:fa:32:f4:31:d8:2f:dd:00:f8:4d:6f:ed:47:e4:
                    a7:4f:48:08:a1:d5:26:a7:52:5c:90:3d:e4:3e:96:
                    6d:12:11:9a:62:8d:cc:fd:4a:32:a4:00:65:7e:6d:
                    24:7f:78:63:65:4c:89:ea:3e:0f:eb:fe:57:97:dc:
                    ba:c5:6b:ac:cb:7b:2d:b7:a2:8a:3d:e0:55:d8:fd:
                    f1:1b:96:f2:48:03:a7:3f:11:16:2b:a0:05:97:8d:
                    78:13:b0:c0:fa:40:fe:96:a9:bd:c4:60:91:1f:c9:
                    64:ad:3f:c7:9d:e7:2c:9e:e9:d4:8c:23:ee:7e:c5:
                    f1:04:60:5c:db:76:59:42:2a:8d:d8:c4:d8:90:0e:
                    48:64:7d:63:43:f3:c7:e9:c8:40:95:0b:f4:ed:68:
                    25:9f:f0:37:b4:5c:f8:1f:cd:c6:08:b5:d4:75:8d:
                    5e:cf:bc:45:0c:c2:17:1b:08:19:93:ea:e5:9f:bd:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4C:CB:4B:0E:A9:60:A2:23:F4:1C:2B:99:71:6A:3A:FB:92:2E:86
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:09:dc:e5:f5:b9:d1:08:9e:ff:05:9e:00:48:95:07:ed:60:
         5d:b1:17:d4:dc:e9:75:64:cd:0b:d4:73:6f:70:18:4f:c4:90:
         32:fb:ee:d9:a3:88:43:63:77:d7:cc:4e:76:a7:2c:87:bc:67:
         17:1d:f5:e4:25:fa:45:2c:7a:66:dd:7f:be:fb:6a:09:20:c9:
         7e:5a:26:43:d4:c5:6c:4e:7d:cd:19:be:f8:7e:d3:4b:32:65:
         a9:8a:53:0e:58:bc:3c:2d:47:80:16:58:c1:98:30:51:2b:24:
         77:00:82:43:5b:d2:5c:eb:63:b3:0e:7e:69:52:a2:c5:a6:29:
         2f:ac:db:9b:cb:65:49:85:2f:0a:31:86:c5:af:3c:1f:24:41:
         00:c1:a5:c8:ed:78:a3:e8:32:e4:56:bf:9b:61:65:e5:30:68:
         1b:10:b9:12:d0:33:9a:0c:14:46:26:ce:7f:74:df:a6:4d:eb:
         69:f0:dc:6f:d0:be:34:21:14:a5:4f:64:69:94:4d:d9:03:55:
         16:5e:d2:13:ad:c9:b3:83:6c:f7:86:bf:10:c5:20:21:46:34:
         d7:ed:16:1a:69:28:7f:f7:93:9d:bc:41:71:4a:42:6c:26:1a:
         71:0e:06:ba:69:d9:d2:22:6e:f7:c7:73:24:33:b8:d4:a1:af:
         06:1a:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:15 2025 by rpki-client