Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          bwMfl9HTHS+tQ2rWVHuYzcUDCh44s3DU33To3yLo1as=
Subject key identifier:   08:BE:75:A7:DD:7B:35:18:39:0F:D3:ED:AD:67:01:86:66:9A:91:E5
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       042A33C07B2948EDC46064BE59B6282E5077D3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          03EE
Signing time:             Thu 23 Jul 2026 10:35:47 +0000
Manifest this update:     Thu 23 Jul 2026 10:30:47 +0000
Manifest next update:     Sat 25 Jul 2026 11:05:47 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: RCBqvsKAPHifSeKm/mjKB8Iah1DlHGKkMuHY9d71rnc=)
                          2: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2a:33:c0:7b:29:48:ed:c4:60:64:be:59:b6:28:2e:50:77:d3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Jul 23 10:30:47 2026 GMT
            Not After : Jul 25 11:05:47 2026 GMT
        Subject: CN=08BE75A7DD7B3518390FD3EDAD670186669A91E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:db:09:df:2a:d7:4b:fd:6b:4e:c0:8e:54:
                    60:42:55:7e:b5:8a:1b:fe:7c:cb:fd:61:a9:a0:6c:
                    c1:03:1d:8c:de:06:d4:ec:68:a2:ba:d7:a6:d5:a6:
                    f2:27:7c:d9:ca:17:15:36:05:7b:9e:e0:cf:50:da:
                    0b:6f:14:77:7f:70:af:67:6e:60:c4:06:65:ea:ba:
                    a9:19:ac:fc:86:92:5a:fc:21:0d:20:c9:ef:fd:5c:
                    fc:50:18:cd:1a:4b:d0:24:73:a4:2b:f0:2d:44:9d:
                    bf:98:6e:73:28:2d:87:21:e3:25:72:7a:84:fa:57:
                    9b:8f:49:e1:f4:0a:33:0e:17:72:f8:e7:51:cc:ab:
                    7c:52:2e:ef:b2:e1:83:0e:25:0d:da:1e:bc:70:99:
                    5f:37:28:38:f3:2c:9f:b5:69:23:d3:27:57:a2:74:
                    06:b4:b9:ed:d3:24:a4:b2:a2:5d:9d:22:7d:98:d7:
                    31:f8:e3:3e:ec:54:38:53:f1:62:98:6a:ef:dc:6a:
                    5d:0b:01:df:62:25:b1:2c:39:ea:30:1b:bf:28:e6:
                    2a:04:60:1f:f5:27:ce:26:6d:a0:b3:4d:6d:84:36:
                    1e:4d:b8:05:bc:11:b5:71:ad:93:06:8d:87:90:b7:
                    3d:ee:e2:c0:00:e7:49:fb:a8:42:63:6c:12:01:74:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BE:75:A7:DD:7B:35:18:39:0F:D3:ED:AD:67:01:86:66:9A:91:E5
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:23:64:f2:5e:5f:5c:ba:af:36:59:d1:35:ec:53:da:5b:0c:
         6b:c0:4f:7e:d7:31:76:fb:14:a8:38:60:e4:d5:51:43:8a:cd:
         26:e3:3c:d9:63:56:21:f2:7b:ed:fe:33:e3:b5:95:e9:f2:e9:
         8e:e5:e1:13:ab:d5:ba:8c:5c:38:87:2c:1a:df:9c:4d:80:d9:
         28:f1:b8:81:68:44:57:dc:7a:71:66:52:ed:95:3e:6f:16:03:
         5c:47:b6:1e:8e:0d:9d:30:2b:bd:80:b3:26:12:6d:b8:29:21:
         fe:1b:92:a9:60:12:35:09:11:89:e0:28:c8:ea:44:85:b5:f6:
         fc:fd:2c:03:bf:6c:22:ec:e1:6a:25:38:12:52:2a:95:19:cd:
         ca:55:c3:49:ae:08:d2:32:98:2c:6c:27:35:7f:94:63:71:d0:
         77:f5:50:84:35:24:51:79:27:17:dd:c0:29:a3:ba:6a:ce:7b:
         e3:fc:97:ab:ac:1f:b2:ca:67:21:23:4b:5e:82:1c:fb:9a:a2:
         50:11:b0:16:03:8e:b9:20:d5:38:8a:bf:f3:f1:44:9f:8b:82:
         31:13:2b:73:b6:ff:48:8e:47:02:94:d1:46:c7:58:c6:8f:74:
         49:ca:a1:ed:5d:00:96:28:d9:90:6d:41:cc:6d:6e:29:68:fd:
         ab:d7:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:46 2026 by rpki-client