Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          Ebvmi2/GEmcdsJyGMmSacjRnTomxgeAzPEQfvx6VWas=
Subject key identifier:   5E:85:57:E1:24:30:0B:65:17:F4:FD:B4:E8:C0:12:58:21:D2:D8:52
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       06539836C94E37B81229172A29A4B1D07D7F1C63
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          0222
Signing time:             Tue 28 Jul 2026 16:28:29 +0000
Manifest this update:     Tue 28 Jul 2026 16:23:29 +0000
Manifest next update:     Wed 29 Jul 2026 19:34:29 +0000
Files and hashes:         1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: YOhPbf1IPSuiLOKm+yqgxA1YpEaLwSbE5lsYWcvz1Co=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:53:98:36:c9:4e:37:b8:12:29:17:2a:29:a4:b1:d0:7d:7f:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: Jul 28 16:23:29 2026 GMT
            Not After : Jul 29 19:34:29 2026 GMT
        Subject: CN=5E8557E124300B6517F4FDB4E8C0125821D2D852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:2b:71:8a:38:e1:1a:22:e3:72:92:0d:02:
                    fd:a0:06:bd:7a:c0:cb:b1:d6:a0:38:0e:86:94:e8:
                    ec:c6:f4:31:01:18:18:7e:04:26:18:1e:0c:3c:0f:
                    6c:c7:1e:77:7e:44:d0:eb:d2:9c:a9:00:b0:1a:cc:
                    55:2e:20:3a:ae:24:b2:55:b6:50:e4:bb:a3:a8:b5:
                    27:0c:24:34:d0:92:e8:8f:8b:e0:37:ce:48:52:a6:
                    01:17:27:0c:0c:6e:17:13:cd:43:c3:e5:06:6c:20:
                    c0:6c:3a:e6:43:d8:be:1d:6d:b4:b4:a8:f8:11:40:
                    cd:ed:34:c3:73:b5:9a:00:e9:98:b3:ab:24:de:d5:
                    2e:57:20:2b:19:40:f0:67:3c:f6:a8:5b:69:41:7d:
                    10:b5:37:5e:49:28:88:49:99:38:ee:8e:a4:58:67:
                    e9:f5:84:a5:2b:13:02:d0:9d:e1:ee:40:83:ab:7c:
                    b4:60:b3:2f:30:ef:90:63:81:d1:93:51:ff:42:7e:
                    71:b4:22:42:67:d0:a9:13:a5:09:23:24:80:23:2d:
                    c7:d6:c9:b9:55:68:01:11:95:45:eb:7f:a8:34:65:
                    e5:48:a9:a0:b5:f7:ec:90:ba:b4:fc:3b:dc:97:12:
                    36:10:e2:3a:39:54:cd:43:44:f0:9b:66:9c:c3:fb:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:85:57:E1:24:30:0B:65:17:F4:FD:B4:E8:C0:12:58:21:D2:D8:52
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:5b:5c:68:6c:db:3d:19:ba:c8:11:fb:28:3b:e3:7d:ca:
         cc:99:9a:fd:33:64:07:60:97:48:b0:43:78:1c:7e:c1:1e:40:
         10:c4:9f:7d:cf:51:3b:b2:03:db:71:8a:4b:7d:83:81:4c:86:
         c1:7b:fa:d9:c2:09:69:83:6a:13:5d:22:d9:49:fb:be:79:9c:
         1f:74:2c:87:f9:b4:73:a0:ea:19:ec:51:8a:e7:c3:93:27:7a:
         13:6f:8f:14:4d:64:11:a9:55:f7:85:59:44:d4:5f:34:a1:11:
         34:4d:80:de:97:74:9b:cc:6d:78:81:72:5c:f1:0a:b2:e5:41:
         2d:27:a9:c6:b0:c4:bf:b4:65:9b:91:c4:b6:f7:dd:7d:64:09:
         50:ff:f7:b3:d9:46:dd:b0:1f:61:1a:b3:ce:4a:2a:1e:07:50:
         ea:cb:af:2d:50:d2:84:71:b9:f6:f7:8e:48:d9:c5:82:b5:a6:
         31:06:f9:da:3e:34:2f:66:23:6d:b8:74:df:4b:b6:20:73:cc:
         82:3a:ce:ac:5b:be:29:dd:87:03:87:78:92:06:e3:bc:cf:eb:
         c4:80:eb:06:65:e3:f6:f8:4f:47:25:d6:4a:f9:49:c9:91:38:
         68:93:ff:bd:8d:11:91:c6:06:be:3c:7c:50:8d:41:f6:4e:3c:
         e5:50:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:48 2026 by rpki-client