Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
File:                     FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json)
Hash identifier:          jqOuMf6joL1qJL3jynS2MqG7NJ6RyUEgM3/DTkN9kB4=
Subject key identifier:   99:17:BF:A2:6B:CF:49:8C:CB:26:38:AC:F7:30:55:57:75:C2:E0:81
Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
Certificate issuer:       /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Certificate serial:       1208E0D4B7F9FB1045AFB04A72EDAA0D2AD3D74C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
Manifest number:          017B
Signing time:             Tue 28 Jul 2026 05:10:50 +0000
Manifest this update:     Tue 28 Jul 2026 05:05:50 +0000
Manifest next update:     Wed 29 Jul 2026 08:20:50 +0000
Files and hashes:         1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: FPDnnghPdHgmWagArlFLHGeuwsdjBg1TM9r5cE/4R3A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:08:e0:d4:b7:f9:fb:10:45:af:b0:4a:72:ed:aa:0d:2a:d3:d7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
        Validity
            Not Before: Jul 28 05:05:50 2026 GMT
            Not After : Jul 29 08:20:50 2026 GMT
        Subject: CN=9917BFA26BCF498CCB2638ACF730555775C2E081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:fa:d0:db:08:d3:33:7e:a2:e4:a5:50:8e:
                    62:e3:52:50:09:ca:97:38:c6:a5:00:09:95:e0:c9:
                    f3:18:23:8f:11:9b:05:05:eb:2c:0a:c0:f2:8c:71:
                    a1:2d:8a:7c:5e:a8:26:41:29:1f:32:f1:b6:f0:34:
                    be:c2:0e:0c:97:dc:f7:40:d2:89:d5:21:14:2f:c4:
                    94:cf:33:d2:35:fc:50:b9:fa:28:b9:fb:64:e2:32:
                    f0:33:cb:5c:c1:ac:38:8c:a9:d2:1e:f7:20:a4:aa:
                    37:42:d3:c8:b8:c2:22:24:d2:26:07:e9:6c:63:6a:
                    2b:ad:a5:82:cf:2e:29:83:b6:ba:b5:8e:ea:d9:0d:
                    2f:bf:3f:5f:e5:0c:d5:cc:ac:05:7e:74:bd:38:6f:
                    a0:25:30:10:e5:77:90:f5:9d:4f:6b:13:df:69:73:
                    55:a7:bc:bc:7d:85:19:8d:d2:c0:9e:33:cc:cd:a0:
                    1b:91:fe:a6:bc:cb:41:7c:8b:19:59:73:bb:8e:31:
                    42:b3:36:02:22:72:92:94:d6:49:cc:34:80:d2:bd:
                    13:15:14:88:0d:b2:80:89:32:5c:c2:57:78:d8:1e:
                    1d:e4:3e:e6:15:4b:b1:6d:fe:90:9f:61:a5:9a:56:
                    30:29:00:d0:ef:52:06:da:30:c9:d5:ca:63:de:00:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:17:BF:A2:6B:CF:49:8C:CB:26:38:AC:F7:30:55:57:75:C2:E0:81
            X509v3 Authority Key Identifier:
                keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:af:f3:ad:61:fb:34:27:87:44:9f:0a:5a:fd:ab:5b:60:
         f4:fd:a9:68:ff:58:78:c6:f1:83:55:d3:59:4f:c3:1f:af:46:
         69:d0:43:dc:28:92:54:72:8a:25:87:9c:f2:c8:1b:f0:1d:b3:
         50:40:c0:38:3c:a8:9c:d3:59:68:22:56:dc:c3:36:71:f5:66:
         48:e1:74:2a:6d:ac:26:4a:54:5e:5d:35:cd:5a:c4:4c:9a:07:
         c2:c3:32:c8:29:28:27:c0:89:c9:1b:78:c9:2b:c6:d7:c0:ed:
         df:5a:81:11:37:18:78:ed:6d:48:71:37:f8:66:fe:56:c7:77:
         08:0b:d0:b7:f7:8f:e5:19:8d:35:d7:11:ad:dd:db:e9:23:f7:
         ee:08:7c:6a:97:d6:15:b8:73:0b:e4:0a:3f:55:05:05:bc:90:
         8c:1b:9f:72:79:2e:91:2f:74:a2:3c:b8:f2:a2:13:59:8f:52:
         0c:4a:0e:bd:20:1a:09:23:1f:11:45:22:f8:d3:d8:30:a2:f7:
         e3:99:78:6a:0f:f1:50:fa:88:53:b6:32:78:4f:5a:77:2b:6b:
         5c:81:23:91:5c:70:41:d4:d5:46:f0:22:5f:74:50:eb:32:0e:
         a4:51:e0:05:a5:77:30:d9:a9:fe:31:69:7a:bf:6d:82:e7:71:
         f1:ed:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:01 2026 by rpki-client