
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json)
Hash identifier: V/A9A+kjoDFfckT6AARdda+4zJwA1qkhKOEJdwFICh4=
Subject key identifier: 11:16:49:52:C5:6C:A4:E2:57:56:7D:FF:49:E5:A5:7C:58:3B:58:EE
Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Certificate serial: 2AAA34AF48266B0199E964A2A6908D9370D89402
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
Manifest number: B1
Signing time: Fri 12 Jun 2026 19:18:37 +0000
Manifest this update: Fri 12 Jun 2026 19:13:37 +0000
Manifest next update: Sat 13 Jun 2026 23:12:37 +0000
Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: VP68Gug0YCd6JTTsemz75phykOhEvNgKkykjud3yiXg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:aa:34:af:48:26:6b:01:99:e9:64:a2:a6:90:8d:93:70:d8:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Validity
Not Before: Jun 12 19:13:37 2026 GMT
Not After : Jun 13 23:12:37 2026 GMT
Subject: CN=11164952C56CA4E257567DFF49E5A57C583B58EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:3d:da:55:14:01:ea:c9:98:e2:79:10:23:
e2:f2:ab:15:68:2e:2c:06:c2:4c:8d:fa:3f:3b:f8:
a7:69:0b:9d:73:54:de:46:4c:aa:fd:d1:56:7b:6a:
0f:22:91:f7:3b:36:7e:61:df:81:2a:09:64:52:c8:
f4:6d:13:89:07:54:8d:55:7f:93:14:df:01:7c:01:
4f:2b:4d:c1:86:0b:9d:06:69:71:35:f4:82:79:e9:
80:10:5a:fb:6e:46:f7:76:52:b9:c7:27:24:65:e6:
44:2d:8a:03:22:68:2d:eb:68:3f:62:26:af:ad:74:
10:c6:91:34:76:bd:f6:ac:a7:72:ad:00:ef:ae:ab:
90:bb:06:59:c7:2c:7d:62:0b:f7:30:7d:eb:ad:86:
14:ca:16:bc:1a:9a:02:4f:1d:8b:0a:2b:28:c7:7b:
2d:24:51:12:0d:09:d1:11:a1:d2:00:a3:40:79:6d:
27:4b:7f:f9:84:a3:23:d2:aa:73:98:27:46:41:7b:
d0:fd:59:56:9f:56:0f:aa:f5:d5:06:5b:41:6f:a5:
70:82:7e:60:df:30:58:ba:f6:f6:69:02:46:d8:2c:
dd:17:3d:dc:73:20:b5:89:4f:e4:61:f2:63:25:0e:
fc:86:84:30:ab:6e:17:21:ca:43:5f:1a:98:20:d2:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:49:52:C5:6C:A4:E2:57:56:7D:FF:49:E5:A5:7C:58:3B:58:EE
X509v3 Authority Key Identifier:
keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:99:f0:d8:e9:0a:07:50:de:ff:aa:80:f0:18:7b:c0:ae:17:
fd:6d:a8:d1:3e:2c:a0:c0:85:0b:2e:e5:69:54:a2:60:da:68:
51:0f:1e:63:9a:79:e9:b0:25:a5:a9:fc:cb:1e:44:5f:64:0f:
74:df:18:c3:42:b4:3c:89:10:36:5e:ba:53:ac:d3:2d:8b:12:
8f:a8:a6:4f:d5:72:d2:df:ca:44:9a:e5:5c:54:20:92:ac:dc:
f6:ca:4f:7d:50:9c:1f:1b:09:89:63:bf:96:f8:c5:01:6a:98:
77:b3:33:73:4b:4d:54:af:34:3e:17:21:98:ec:86:98:22:ca:
09:cc:a7:bb:bb:87:4d:f5:00:9c:a1:1a:1f:da:92:92:ef:5d:
e2:64:69:21:d9:85:2c:96:25:18:f9:5e:61:b6:8c:b6:dc:39:
c3:5c:ff:fb:95:18:e1:79:20:34:aa:65:f1:74:c1:63:46:56:
26:07:5b:56:14:53:a7:c0:11:b1:ab:83:8c:65:d5:a2:12:7d:
70:ec:70:07:e7:ec:1e:41:fa:e7:d1:b1:78:8a:5c:2c:e7:fa:
f9:0f:76:f6:dc:93:3c:2f:17:d3:6b:8a:b4:d7:01:cb:93:f8:
25:c1:67:a1:e9:7b:3f:b2:c7:a7:15:1c:5e:5b:db:a7:a3:d1:
5e:9c:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:03 2026 by rpki-client