Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          cL6Wdcs3r7rVeJjbnPC7g2Gfaantmqtb/VxwjsLuhpc=
Subject key identifier:   32:77:4D:32:7B:27:80:7E:BF:B7:7A:4A:DC:FD:80:4A:0A:6E:8A:95
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       42D05EF3D49187A674D7666AA5AEE669744C17E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          E3
Signing time:             Mon 21 Apr 2025 16:41:34 +0000
Manifest this update:     Mon 21 Apr 2025 16:36:34 +0000
Manifest next update:     Wed 23 Apr 2025 20:40:34 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: NKl8zHqDCJxlLyXnT/oJJufvM6/Si4fjuTR9Wc+S9ZU=)
                          2: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d0:5e:f3:d4:91:87:a6:74:d7:66:6a:a5:ae:e6:69:74:4c:17:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Apr 21 16:36:34 2025 GMT
            Not After : Apr 23 20:40:34 2025 GMT
        Subject: CN=32774D327B27807EBFB77A4ADCFD804A0A6E8A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:ca:6e:04:e4:81:5b:d6:a0:8a:15:82:83:
                    88:61:ab:30:4d:c6:5d:3a:72:ee:35:49:79:4d:7b:
                    ab:4c:4b:bc:89:a0:f0:39:3a:12:bd:8a:97:71:c7:
                    b7:55:ec:3e:e2:b5:fe:a6:dd:fb:03:8f:10:8d:43:
                    25:36:64:71:58:95:f0:9a:cf:ec:e6:bf:9c:9d:0d:
                    de:01:92:24:ae:50:ac:30:4e:5b:20:7a:f8:8d:91:
                    bf:47:af:57:a9:91:84:2c:a3:70:21:af:91:59:bc:
                    98:ee:30:f2:8b:57:1c:3e:f7:2f:ee:bd:74:f7:88:
                    cf:56:8c:03:ab:9a:fb:7b:01:39:de:1d:8c:0e:2b:
                    2c:cc:2b:a1:9b:d1:b1:b2:26:4a:05:b3:08:69:26:
                    67:5b:e8:c6:a7:1e:e5:ee:af:88:7f:7c:aa:12:33:
                    42:c3:f8:ba:8c:c3:ea:44:ef:31:b9:7e:49:3b:7e:
                    f6:56:12:a2:9d:13:0d:0e:e7:4d:3c:a9:53:f0:7d:
                    00:1f:b3:97:6c:e8:ce:5c:72:fc:70:85:f1:c5:75:
                    b4:f1:d9:8d:a9:50:2b:60:cb:2a:22:42:21:78:a8:
                    f1:79:f8:4a:c0:45:1e:09:c3:c5:47:9b:22:4e:3d:
                    bc:0c:4f:0f:d5:51:72:50:d2:f6:be:29:a7:ef:52:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:77:4D:32:7B:27:80:7E:BF:B7:7A:4A:DC:FD:80:4A:0A:6E:8A:95
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:27:ce:9d:43:a1:99:b7:bc:cc:ae:64:b7:c5:44:49:60:88:
         a2:32:59:46:8a:6a:a7:65:69:d2:71:53:31:cf:4a:d4:27:08:
         c8:96:3b:46:5d:aa:2b:ac:ab:81:07:a5:86:e8:97:e2:df:74:
         43:27:46:d9:71:23:94:33:47:ed:2f:74:9a:97:08:89:e9:93:
         48:41:cd:ac:1d:6a:fa:7b:17:ca:1c:81:96:82:9a:3c:2d:fb:
         75:22:4d:26:93:0f:87:15:38:8e:32:07:5d:37:a2:77:29:44:
         ac:1c:75:60:4b:e0:25:89:66:a6:44:d1:a8:57:0f:4e:7a:d5:
         8a:cb:e8:b0:20:7d:94:7d:9b:6a:15:c0:1d:d9:7c:0e:a9:72:
         af:a5:ed:aa:0e:d6:2a:82:6a:fd:44:c7:e6:d8:8a:0b:e1:5a:
         c0:f5:83:9b:ed:68:d1:25:4a:ae:df:38:d3:7d:30:01:f6:67:
         e8:c3:71:3e:43:d4:8d:b8:66:b2:23:b4:01:aa:25:86:ce:93:
         48:fc:e0:cf:ab:27:e3:1b:cd:5f:ff:f0:4f:8c:5d:6a:76:52:
         b5:63:ba:71:9e:a5:68:fa:5a:97:79:7c:17:9a:c3:50:d7:1e:
         d8:b2:cf:e4:3b:20:54:09:e1:d1:76:ed:91:64:96:2b:6f:cd:
         c9:cc:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:35:15 2025 by rpki-client