Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
File:                     4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json)
Hash identifier:          9khuHdPYEqy+xr6GFcNAOJRzaW3QKcjAAVY2v5pubIU=
Subject key identifier:   06:C2:68:20:9A:6D:36:A0:6D:FD:57:01:33:B7:E0:9A:66:4D:06:D9
Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
Certificate issuer:       /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Certificate serial:       297199BA1D36B1ECFCAB32B1B93C210D69BE91AE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
Manifest number:          01CA
Signing time:             Fri 12 Jun 2026 17:14:59 +0000
Manifest this update:     Fri 12 Jun 2026 17:09:59 +0000
Manifest next update:     Sat 13 Jun 2026 19:15:59 +0000
Files and hashes:         1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: UDb2f1Z9V3dlC7CssJtS8RO7DZUq9+toTkaXKW6HcfU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:99:ba:1d:36:b1:ec:fc:ab:32:b1:b9:3c:21:0d:69:be:91:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
        Validity
            Not Before: Jun 12 17:09:59 2026 GMT
            Not After : Jun 13 19:15:59 2026 GMT
        Subject: CN=06C268209A6D36A06DFD570133B7E09A664D06D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:61:36:47:67:76:5c:86:05:45:7d:27:e5:
                    d9:1d:35:a7:1c:c6:75:df:65:d9:1f:a3:ea:68:5c:
                    86:42:28:17:a2:fb:85:b7:69:fd:25:71:e1:66:b3:
                    81:d1:bc:0f:12:08:17:e8:9c:4b:ee:f6:1b:eb:2d:
                    4b:34:0e:4a:4c:59:fe:63:34:9d:fc:51:7f:03:79:
                    9b:1b:a4:51:77:4c:69:89:6f:2f:04:e2:be:3b:bd:
                    2c:f4:e7:c6:23:d3:c6:88:8c:79:7c:75:5f:53:1c:
                    49:1f:74:e8:37:51:8e:f1:26:e6:36:48:7e:3d:21:
                    54:c3:33:4e:e4:2d:c8:01:c7:57:bd:a7:78:45:02:
                    de:ba:2b:d0:99:fc:ac:a3:9b:3a:a2:0e:c1:7d:a0:
                    e2:37:8d:92:61:94:29:e0:63:d0:62:d9:1b:1d:95:
                    b0:95:9a:a1:86:de:c5:b5:3c:a1:fb:1f:e4:eb:3a:
                    da:ad:95:eb:56:37:29:ed:23:f2:9f:3b:51:e3:a8:
                    36:19:52:0b:7e:3d:27:16:ba:41:3d:83:a2:c6:c5:
                    6a:0d:81:69:04:86:75:ad:1b:ae:c1:ad:51:b5:da:
                    c8:40:9b:2f:af:f8:c2:62:ca:d4:e5:96:f2:f6:c6:
                    34:77:1c:e4:5b:b8:a5:88:2b:a7:a9:5a:94:2e:7b:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C2:68:20:9A:6D:36:A0:6D:FD:57:01:33:B7:E0:9A:66:4D:06:D9
            X509v3 Authority Key Identifier:
                keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:71:42:fb:6a:71:53:bb:35:22:8f:d2:97:44:1e:6b:3e:
         9b:6c:34:d2:90:f4:16:bb:b7:77:7f:ab:36:b9:3b:aa:64:5e:
         49:12:eb:7d:77:0f:58:ba:f4:3a:9f:73:52:5f:1c:72:8d:59:
         2c:94:22:7f:c2:38:82:00:10:62:cc:92:c3:2d:9f:66:a3:3e:
         d6:b4:a4:89:fd:c3:eb:0a:35:ca:d3:ef:5d:a3:cf:79:1c:19:
         b9:65:97:f9:a8:0a:a4:7a:c7:0c:c4:2f:7a:aa:cf:29:7a:2b:
         c9:6f:18:1a:bd:92:af:2d:fb:3e:75:80:ec:37:95:d8:c4:09:
         79:95:c7:9d:b0:a4:7c:f6:ae:74:94:15:2b:60:06:76:9d:6d:
         bf:b0:81:0d:dc:ff:5f:5c:cd:1f:b3:73:c0:a5:8f:2a:e3:7e:
         c9:9d:b5:50:01:4f:aa:90:2c:78:e1:b2:27:35:9a:73:cc:ad:
         06:03:30:ef:1c:2e:25:c6:27:bc:1a:91:d9:b3:e0:3c:30:1f:
         f8:40:aa:72:53:49:1d:71:f4:22:bf:8d:6c:7f:58:c1:7b:1a:
         ec:9a:d3:f1:84:c5:4e:54:c8:a0:91:39:ee:e2:22:4d:f5:27:
         4a:70:41:46:e5:23:6e:bf:92:95:f1:92:23:ca:17:91:90:fd:
         ee:86:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:15 2026 by rpki-client