Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          p+j6tr6lZs6/J0eA3X3S6pHZ+O90HDNc98T6gEY8034=
Subject key identifier:   ED:95:AF:79:37:A4:14:1A:49:7E:C9:AD:C1:D7:EC:69:AE:58:8F:36
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       5579DE7E6E03CEF1DA5C02540567864EB7E0071A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          0274
Signing time:             Tue 22 Sep 2026 11:03:49 +0000
Manifest this update:     Tue 22 Sep 2026 10:58:49 +0000
Manifest next update:     Wed 23 Sep 2026 11:34:49 +0000
Files and hashes:         1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: xBf2L9XirMvxYLJOfKERnyd+tX5LJhG0nN/k70uLxCE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:79:de:7e:6e:03:ce:f1:da:5c:02:54:05:67:86:4e:b7:e0:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: Sep 22 10:58:49 2026 GMT
            Not After : Sep 23 11:34:49 2026 GMT
        Subject: CN=ED95AF7937A4141A497EC9ADC1D7EC69AE588F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:84:f6:b9:ee:d0:b4:1d:b2:20:31:f2:09:
                    6e:e4:7e:ee:f8:c3:ba:fd:6f:aa:bf:12:e0:72:b3:
                    a1:97:ec:91:b9:04:a8:88:25:5c:de:10:59:c4:e7:
                    41:0a:b0:65:1a:b9:c4:f8:4c:fc:90:27:90:d6:2d:
                    3b:19:2f:b4:1c:3b:8f:ed:27:a3:3e:94:d6:07:1e:
                    f5:a8:40:90:83:0e:02:dd:ff:0c:d0:90:2b:04:ca:
                    e8:79:a4:7f:c1:bf:91:42:2b:e4:6a:99:e4:9b:5c:
                    6d:58:94:34:a6:23:c9:00:47:97:21:2a:46:b1:d2:
                    e9:8d:00:43:40:3f:40:e6:53:ea:e1:3f:82:bd:08:
                    76:12:f1:5a:74:68:09:a0:84:b6:5f:91:10:b7:eb:
                    7a:ef:1f:45:c1:69:9f:9e:eb:32:41:43:a0:84:d0:
                    db:1d:e8:3d:e2:8f:8d:e5:47:b7:0b:2b:b7:9c:ac:
                    98:19:02:a9:de:09:54:77:f2:2f:28:64:a5:74:84:
                    af:20:c6:dd:99:cd:2d:2b:3a:83:b4:00:fa:e3:57:
                    f1:39:c3:47:f4:2c:55:7b:6e:f8:ab:9a:7c:f2:74:
                    e3:fc:35:15:d0:90:97:ba:ce:ec:b9:0b:1f:65:06:
                    ac:f0:2a:fe:e2:51:4b:ee:d5:d4:a8:0d:39:32:40:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:95:AF:79:37:A4:14:1A:49:7E:C9:AD:C1:D7:EC:69:AE:58:8F:36
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:10:7a:e6:26:30:fc:fc:ab:69:13:cd:7a:89:28:bc:62:
         0e:87:fa:cd:e0:36:98:01:52:74:c7:e2:e4:06:c6:6d:b8:c5:
         09:e7:a4:f2:d8:aa:3b:5c:a8:8b:7b:23:ac:23:90:21:ae:87:
         4f:5e:b2:38:ab:01:84:53:ab:2c:6c:3b:96:ac:7c:b6:20:ce:
         05:ec:eb:b9:15:4d:d7:97:68:53:5f:f1:fb:a3:3c:eb:b5:cc:
         4d:31:41:ba:88:d8:a2:2f:37:67:f0:e0:fb:35:04:92:c6:03:
         fc:0d:4b:24:aa:27:f7:ae:07:53:4d:d1:c3:c4:e9:e2:ca:ec:
         92:fb:24:ba:8e:84:b9:60:f5:fc:d1:63:03:de:4d:1d:c2:53:
         ee:1b:4c:a9:93:9c:dd:85:73:9c:ca:89:21:9d:92:c2:52:ee:
         e8:a2:62:37:d6:50:40:8e:73:be:4b:2d:22:1c:32:3b:c0:87:
         3a:4c:81:1f:f3:d8:d5:a8:41:f6:6a:2b:39:dd:74:da:2d:0f:
         65:0b:cf:e0:0b:01:c9:f3:15:05:e3:a5:da:db:f0:66:36:2b:
         23:d6:4b:43:bc:a4:ab:1b:1c:c9:73:06:0f:4f:16:47:0a:0d:
         50:47:68:48:d3:a8:cd:e3:a7:b8:f8:77:30:01:3d:d2:89:3c:
         5d:74:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:09:45 2026 by rpki-client