Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          y2xNdNfU6UtiSV3YGNTPuFXq32/6WY2TWTrVKSXfaws=
Subject key identifier:   90:23:F1:16:D1:14:36:2C:CF:44:DE:A8:87:30:BE:54:9C:2C:74:C2
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       36978668D3B958D1D458602CDD7EE5B283E3924D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          048C
Signing time:             Thu 08 Oct 2026 16:12:11 +0000
Manifest this update:     Thu 08 Oct 2026 16:07:11 +0000
Manifest next update:     Sat 10 Oct 2026 19:25:11 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: eYDYa7dpyhTXQWEA4mHjQBdzRYUeO/cnh1nCHRgZI3w=)
                          2: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:97:86:68:d3:b9:58:d1:d4:58:60:2c:dd:7e:e5:b2:83:e3:92:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Oct  8 16:07:11 2026 GMT
            Not After : Oct 10 19:25:11 2026 GMT
        Subject: CN=9023F116D114362CCF44DEA88730BE549C2C74C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:27:d7:85:42:e8:66:ec:53:38:a3:18:75:
                    79:f4:be:77:e7:bf:a8:79:c9:fc:20:23:38:be:53:
                    93:4d:d5:da:7d:e9:99:98:cd:66:f7:bc:5c:2c:c4:
                    59:d3:28:8c:a1:90:61:55:71:69:0d:62:5b:77:ac:
                    6d:ef:95:c9:47:c9:3f:e6:31:c2:d7:0a:ca:12:dc:
                    d4:34:44:c1:80:c4:06:a4:49:2f:97:6c:22:ca:2b:
                    74:90:21:f2:bb:b2:4d:9a:f7:1c:3d:31:02:0e:75:
                    47:a1:a9:09:9d:5f:b1:a5:95:a4:00:b2:b1:82:b5:
                    c0:90:3b:f7:ec:14:91:d8:50:b9:35:e0:80:49:b0:
                    34:11:d5:a5:15:d7:95:10:2c:90:bb:4a:5b:28:d5:
                    6d:8b:90:bd:73:8e:9d:02:dc:d3:63:fb:24:e5:cb:
                    8a:e5:8b:02:90:5c:29:2d:f0:18:63:7e:da:8a:0e:
                    40:84:56:62:be:ab:f0:25:c5:61:07:ac:af:9a:b2:
                    c2:4d:51:de:b9:32:9e:83:59:42:11:59:c1:21:a8:
                    71:fd:d7:1b:22:59:c9:87:ba:09:01:5a:3d:3a:a9:
                    31:c1:4e:24:cc:17:d4:8c:98:f4:ee:b4:08:c5:e2:
                    40:e4:ca:af:b4:49:47:af:2d:d8:3d:fb:97:08:cf:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:F1:16:D1:14:36:2C:CF:44:DE:A8:87:30:BE:54:9C:2C:74:C2
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:8a:71:8a:78:aa:43:7b:1b:80:f5:bc:e2:9b:91:89:bc:
         76:94:6b:cd:84:f2:05:ed:8e:09:86:9a:2c:7f:a1:25:6c:fa:
         b1:eb:8c:ea:33:9a:3b:c9:56:b5:29:23:62:e5:07:ff:5c:e4:
         f6:7e:25:fd:80:18:12:36:b3:64:d4:24:e3:66:fe:b4:cf:99:
         79:fb:45:f7:2e:07:95:80:7a:de:fc:c3:80:c2:7d:ed:72:01:
         d4:b8:d9:13:09:8e:22:e8:5e:cf:a2:fe:79:24:ee:3e:18:30:
         75:cb:8d:61:98:a4:04:59:f9:1c:87:2f:ba:66:07:89:81:11:
         d5:4f:94:57:4c:36:60:86:5c:a0:4e:8b:ea:a7:2e:8e:a5:c2:
         00:a5:fb:8d:51:a9:a4:29:b4:ca:aa:a2:36:bd:2e:b6:9c:b3:
         d4:d8:b4:92:7f:8e:a9:b0:6d:c0:cc:73:92:d5:1c:11:f9:eb:
         41:35:b3:a0:3c:2c:37:f2:c3:3f:4f:9b:19:53:e6:d4:56:fe:
         bb:74:c7:8a:26:3c:5e:b1:35:4f:a1:06:5e:4c:1e:3c:36:12:
         0c:bd:b1:f9:76:76:ea:08:41:aa:46:75:b3:02:5d:21:4a:54:
         7f:62:38:87:7c:78:df:05:02:b0:54:ad:8f:a6:4b:75:5b:50:
         10:7e:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:00:47 2026 by rpki-client