Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
File:                     0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json)
Hash identifier:          AI0Sxi45/1+zz9EFQpB9Vr60BFTwHCwCLnWzqMGydz4=
Subject key identifier:   E1:A9:50:88:ED:BD:6B:9D:43:82:1C:D1:7E:30:70:F9:AA:24:CF:6C
Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Certificate issuer:       /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Certificate serial:       1B5EC730066CFE227F57019652548FC1B9D37D65
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
Manifest number:          011A
Signing time:             Wed 26 Aug 2026 17:28:35 +0000
Manifest this update:     Wed 26 Aug 2026 17:23:35 +0000
Manifest next update:     Thu 27 Aug 2026 19:17:35 +0000
Files and hashes:         1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: +pcbmXdvuHRnRS+KG7NWCxGPrGFbD2Rn6zYKUSOUTsk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5e:c7:30:06:6c:fe:22:7f:57:01:96:52:54:8f:c1:b9:d3:7d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
        Validity
            Not Before: Aug 26 17:23:35 2026 GMT
            Not After : Aug 27 19:17:35 2026 GMT
        Subject: CN=E1A95088EDBD6B9D43821CD17E3070F9AA24CF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:94:e6:8d:43:e7:e1:af:fa:1f:95:c1:27:
                    1b:c4:f9:2e:28:69:0a:b6:0a:ae:20:5b:1f:c8:cf:
                    83:1c:a8:30:e8:5f:90:13:75:3b:6c:6d:01:28:84:
                    a9:02:7b:a4:be:12:b9:90:4d:fa:4a:ff:6e:bf:f6:
                    21:43:76:91:66:0c:25:22:c9:f3:af:d6:9f:46:90:
                    66:23:b6:96:33:99:7b:97:6f:69:52:15:d5:ca:53:
                    e2:53:32:be:44:63:7f:e9:1a:96:0e:8e:aa:11:45:
                    b7:a2:f6:da:94:a2:7b:c6:14:d7:fc:e7:46:af:e2:
                    d8:73:ac:8a:5c:b6:9b:52:8e:84:2d:34:79:09:53:
                    91:22:82:e0:1c:5c:f9:68:af:0e:d6:6f:3e:a4:ac:
                    4b:92:0b:08:f8:14:d2:40:8d:08:32:22:45:97:fe:
                    ea:17:fe:c1:06:cc:4d:43:d0:7e:de:f0:2b:1d:21:
                    4a:f8:d1:a0:e6:d7:28:88:c6:f7:9c:5a:90:d7:f5:
                    1b:28:52:cf:5b:37:ee:13:1a:e1:52:59:be:ab:18:
                    6a:d1:83:c8:bc:e4:4d:6c:f9:3e:57:93:57:59:9d:
                    62:79:03:92:94:c6:d9:3f:5c:33:26:c7:73:14:60:
                    76:9b:43:35:13:94:47:0c:a6:90:fc:3c:6b:f2:fb:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:50:88:ED:BD:6B:9D:43:82:1C:D1:7E:30:70:F9:AA:24:CF:6C
            X509v3 Authority Key Identifier:
                keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:9b:b1:10:f8:77:c0:26:f2:e0:09:01:69:c0:f1:df:c2:
         73:a8:ea:28:c1:95:1b:c5:0b:30:48:87:53:de:10:9c:61:42:
         68:b8:ee:2f:b5:a2:15:3d:0a:63:2b:5a:9f:55:1b:e2:75:34:
         33:bf:41:c2:6e:a9:33:f1:fc:11:e3:87:cc:ab:d0:73:b1:7d:
         f7:ca:06:e0:2c:41:6d:9b:b7:7a:b8:25:ae:28:71:10:eb:4d:
         6b:45:f1:7f:62:cc:58:1b:b0:c4:d9:49:dc:c8:90:ed:89:59:
         55:d2:5d:86:f5:c1:b2:21:e5:6e:26:6e:e2:f8:c8:a9:2a:6b:
         26:c3:2a:13:bf:a0:72:c4:9e:79:5e:dd:16:d2:cc:ca:e7:6a:
         f8:37:f3:bb:93:b4:8c:42:d5:90:97:91:34:c9:d3:26:9b:c3:
         6e:56:02:35:b3:4f:db:e7:4b:d8:ff:ef:97:b9:40:d4:42:a4:
         9c:22:04:2c:45:14:74:cd:3b:c0:d0:a5:46:8c:f5:9f:7d:85:
         0e:ea:26:ca:17:5d:34:1c:f8:f2:2a:33:8d:63:2c:dc:c9:7e:
         9c:69:2d:49:1d:ac:ee:35:73:6b:02:93:98:86:5c:bb:e8:39:
         18:01:13:87:54:e8:7f:b4:da:0c:6c:31:1b:62:33:70:0e:63:
         91:ea:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:09:33 2026 by rpki-client