Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          ArDDh+TdSv5pZGKsIi9b7eWW5pjI5LpNtlvk+39FE0M=
Subject key identifier:   E2:2C:D6:BB:A5:F6:A1:06:A3:18:BB:70:FF:60:0F:18:D4:88:30:E6
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       1E5B79BAA1552D821E9081774B2E16FA6D3C5076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          032F
Signing time:             Tue 07 Apr 2026 10:03:01 +0000
Manifest this update:     Tue 07 Apr 2026 09:58:01 +0000
Manifest next update:     Thu 09 Apr 2026 13:27:01 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: WFKz7sqFN4Z/kTz88LBfyREbgvd7jTWqSkhIwJvhJmw=)
                          2: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 14:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5b:79:ba:a1:55:2d:82:1e:90:81:77:4b:2e:16:fa:6d:3c:50:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Apr  7 09:58:01 2026 GMT
            Not After : Apr  9 13:27:01 2026 GMT
        Subject: CN=E22CD6BBA5F6A106A318BB70FF600F18D48830E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:e3:3a:76:9f:7f:62:90:f6:e0:ac:95:f9:
                    c3:7f:da:f0:80:59:4c:90:01:dc:a3:9e:67:73:bf:
                    59:ba:78:7f:2b:08:24:01:7c:3d:b9:77:c6:a3:5f:
                    01:e0:17:ea:82:33:4d:4c:62:4b:02:d8:8a:77:ce:
                    f7:2d:2c:b2:2e:d1:16:1a:d2:77:22:f4:17:9e:0a:
                    23:99:25:e1:2f:88:ea:31:b3:13:cd:e7:37:d2:85:
                    1f:66:26:07:32:02:3e:a1:ec:67:dc:0b:f6:f8:66:
                    62:19:bc:f6:72:2c:c0:11:b3:5c:cf:44:58:37:46:
                    3b:74:f0:1e:9c:e7:ea:b6:40:b1:90:41:af:29:a7:
                    1c:58:93:5a:46:7a:f7:5c:c5:ba:29:50:7a:5e:c3:
                    25:40:c6:34:d0:d8:bd:5c:6c:60:be:31:fd:a2:2c:
                    b8:0f:ed:07:28:26:a3:25:9d:b0:84:ba:a4:97:7e:
                    85:26:2d:95:99:7a:75:d4:0b:bf:a6:15:6f:7e:7f:
                    0f:0c:b2:05:8d:85:8a:50:c9:b1:80:f1:b9:74:f2:
                    64:64:be:df:fc:0c:05:cc:03:8d:9c:4b:f9:d6:3a:
                    c8:bf:19:39:48:bd:97:4b:65:60:9e:e4:65:9a:24:
                    db:c2:ad:d2:e9:f0:a5:22:e8:ee:e6:8b:a3:24:6d:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2C:D6:BB:A5:F6:A1:06:A3:18:BB:70:FF:60:0F:18:D4:88:30:E6
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:43:3e:cd:9b:d0:8e:78:02:fc:f3:31:0a:9b:ab:56:29:6a:
         74:01:21:e8:1f:58:ff:57:59:bf:f3:88:1b:ce:bb:e0:17:ad:
         7c:de:01:87:7f:7a:1b:76:80:c4:62:32:a6:3b:3b:32:e5:ab:
         21:be:e9:a5:d1:e6:3d:1f:ee:bb:89:85:66:dc:ed:53:ee:3d:
         85:8e:76:dd:0a:d9:95:78:0d:3e:33:09:13:0d:d6:ac:97:dd:
         a4:db:74:8d:fc:08:85:40:e4:92:b8:85:79:95:8a:ea:9e:93:
         23:fe:6f:e1:1f:62:9a:bb:04:84:9b:a4:f3:c5:1c:a7:bf:87:
         d3:aa:4f:c6:f9:51:fd:ef:32:45:e6:57:90:0d:a2:d8:3d:23:
         b8:88:52:79:cb:5f:37:9f:c1:ef:54:c1:a9:cd:17:76:c9:5f:
         62:3a:9f:18:b1:86:a5:8a:f1:a7:1d:19:64:12:19:f0:de:8c:
         12:6e:6c:f5:4c:3e:05:d5:e9:02:c6:5e:0d:92:5d:fe:bd:d7:
         b5:cb:ca:af:93:72:e0:a7:43:53:fb:e2:18:dd:3d:08:6a:45:
         66:68:14:18:95:bc:ab:99:99:77:9a:0b:87:61:ef:97:16:b1:
         87:e8:d7:59:f8:0a:58:a3:a2:71:89:5a:c5:a6:a3:7d:3a:91:
         77:8e:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:50:16 2026 by rpki-client