Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          9G+MR5jHHmIBpgU/guDGHC2Jj/ygG6UCMuJBWRPXaYo=
Subject key identifier:   F3:A7:EA:6D:CC:B4:2F:CA:E1:FD:B5:78:6A:3F:37:BA:31:08:44:97
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       5B4BB2AA3DA9429C0008C63DD8B30688EB3A121A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          01D9
Signing time:             Sat 13 Jun 2026 07:48:32 +0000
Manifest this update:     Sat 13 Jun 2026 07:43:32 +0000
Manifest next update:     Sun 14 Jun 2026 10:27:32 +0000
Files and hashes:         1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: L7qZDGRDvOhPz+RAhdyaDAeuGcYRdFaBhcixrdrUsb4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4b:b2:aa:3d:a9:42:9c:00:08:c6:3d:d8:b3:06:88:eb:3a:12:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: Jun 13 07:43:32 2026 GMT
            Not After : Jun 14 10:27:32 2026 GMT
        Subject: CN=F3A7EA6DCCB42FCAE1FDB5786A3F37BA31084497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:34:d4:e1:78:42:d5:62:53:46:1d:6f:d1:
                    56:f0:79:13:fa:9b:1c:89:64:91:07:85:fe:9c:7d:
                    2a:1e:5f:46:48:6f:34:32:41:0d:02:cf:cc:32:0b:
                    ba:03:50:5c:1b:2f:ef:ae:9d:cb:a6:d8:93:0a:cb:
                    7c:a3:01:fe:f8:1a:f9:86:c3:15:ed:f5:35:fc:c4:
                    98:94:88:2b:b7:1a:7f:dc:be:46:34:8f:07:59:bb:
                    86:bf:cf:81:2c:c7:8f:5f:57:e4:d8:97:bd:c0:7b:
                    b6:c5:9c:8c:c3:99:af:fd:54:93:54:eb:9f:9c:39:
                    be:b2:9d:19:a1:fd:e4:e8:eb:ad:5c:30:33:1f:33:
                    92:41:aa:0c:24:07:18:b9:21:7b:ac:2a:3f:85:43:
                    06:b9:71:41:74:15:69:d6:c9:b9:af:13:6c:3f:a1:
                    bc:33:53:ce:36:ad:75:18:ea:cd:6d:60:5d:c8:34:
                    cc:97:43:19:92:7a:87:78:d9:90:bd:d8:b6:d9:d1:
                    dd:c0:cf:a8:c4:a8:10:aa:63:01:b8:a3:c8:29:a2:
                    1c:05:3b:d0:cd:11:00:88:78:8a:bf:11:5e:fd:02:
                    28:8f:cc:38:5d:ff:54:1e:6c:f1:56:8f:1c:30:f3:
                    4d:78:2d:9a:72:54:d7:77:40:e0:65:90:41:81:46:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A7:EA:6D:CC:B4:2F:CA:E1:FD:B5:78:6A:3F:37:BA:31:08:44:97
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:41:ec:69:c1:fd:be:d6:15:b4:a7:49:66:eb:ce:dd:ef:33:
         43:58:ec:03:3c:44:56:22:b6:3e:16:3f:c3:2e:da:3f:73:fc:
         de:35:38:1e:ad:8c:4a:51:43:79:7b:4d:52:6a:da:62:e0:0b:
         fc:3f:c5:c0:fe:24:04:77:0d:59:b7:ca:8b:e5:84:e4:b0:ae:
         c5:df:2a:d6:3d:d0:ce:4b:d8:68:5c:4c:7c:84:63:f1:a5:3b:
         0a:c6:04:2f:41:6b:c0:38:96:eb:37:fb:5b:23:c0:c9:95:6d:
         63:60:15:66:de:fe:a4:21:6f:84:04:8a:81:2b:4b:de:a8:e9:
         b0:ca:33:4b:52:75:86:90:bb:ad:27:2b:23:ce:cc:22:31:14:
         2f:c2:d5:3f:62:c4:fa:8d:44:20:3e:ce:c2:bd:cd:44:d3:7c:
         b4:12:37:a7:05:74:df:07:e3:c5:cf:bb:88:29:68:c8:ec:6e:
         21:84:d9:34:6a:79:3a:e1:23:42:a9:5a:95:b4:56:11:5b:b3:
         6a:bc:2f:47:15:8c:a8:df:87:3a:64:6d:f5:71:7b:b8:ec:c4:
         8b:f8:40:9f:30:ad:92:bf:18:76:eb:42:81:ff:fc:62:3d:fc:
         2b:aa:42:31:cd:d4:5c:c4:68:84:3e:05:e7:ac:9c:a5:e2:d2:
         14:27:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:13 2026 by rpki-client