Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
File:                     FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json)
Hash identifier:          Fux/x4jZl1E0CW43ro/V9dTTgVUB0FNNOXNwVBipxgA=
Subject key identifier:   4F:D5:CF:93:18:38:88:DB:3B:92:C4:04:C1:F2:EE:A8:7C:CB:E1:33
Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
Certificate issuer:       /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Certificate serial:       0C4E1D02B4F65A1D0A1986CD29E0A833FB0AF492
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
Manifest number:          C2
Signing time:             Wed 11 Mar 2026 20:46:26 +0000
Manifest this update:     Wed 11 Mar 2026 20:41:26 +0000
Manifest next update:     Fri 13 Mar 2026 00:27:26 +0000
Files and hashes:         1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: irbzIZk2yz0rEf/Ln/Z4UklSVytLuI8fNHL3OtuwpK8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4e:1d:02:b4:f6:5a:1d:0a:19:86:cd:29:e0:a8:33:fb:0a:f4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
        Validity
            Not Before: Mar 11 20:41:26 2026 GMT
            Not After : Mar 13 00:27:26 2026 GMT
        Subject: CN=4FD5CF93183888DB3B92C404C1F2EEA87CCBE133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:6c:99:9c:06:61:13:5f:09:28:e4:96:a1:
                    cf:80:62:e9:27:50:e7:15:3f:7b:fd:e9:f7:ad:45:
                    be:9e:83:5d:54:8b:9a:4b:19:8f:45:78:aa:75:25:
                    35:44:ec:5b:82:85:e3:0b:67:a3:c6:7f:a0:93:05:
                    73:66:0f:7b:b1:fc:44:c4:af:e0:7a:05:a7:99:fb:
                    a8:0c:d2:21:b3:af:67:0f:34:28:14:41:d0:88:06:
                    5a:93:13:5b:d7:97:2e:03:6b:c4:fe:f8:e5:c3:70:
                    11:32:41:f1:d0:61:5c:65:cc:4f:71:0b:70:d9:df:
                    48:de:00:ce:58:03:43:6a:c3:41:ca:a9:77:ea:69:
                    ad:5f:14:0f:11:57:ba:fc:22:8d:e4:cb:d6:b7:73:
                    9e:c1:ee:35:92:53:28:07:af:61:8e:c2:ba:6a:28:
                    30:de:55:c9:9b:f7:cf:35:a8:83:69:e6:7c:db:20:
                    91:e1:60:dd:ab:51:ee:92:85:8f:66:0d:5c:72:e8:
                    81:07:27:58:58:e4:ae:6d:d9:eb:62:b1:6f:c4:88:
                    46:25:b5:6d:65:f0:4e:69:60:df:d9:c3:ff:ad:dd:
                    60:ac:22:8e:13:c2:a1:3a:02:b9:8b:a4:b9:08:8e:
                    36:e1:49:53:41:29:a8:92:5c:96:fc:5d:a9:9d:09:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D5:CF:93:18:38:88:DB:3B:92:C4:04:C1:F2:EE:A8:7C:CB:E1:33
            X509v3 Authority Key Identifier:
                keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:33:dc:f5:41:ca:66:a6:5d:f9:fb:c3:e9:8c:f9:9a:5b:
         d7:cf:bd:88:85:6a:13:90:16:0d:56:21:0f:18:39:b1:c3:ef:
         2c:1e:ee:b0:65:ce:bc:43:00:96:1b:81:54:54:4d:38:e9:92:
         a4:69:cc:7b:d6:4c:46:a1:c0:44:50:d4:31:a5:1e:e6:65:a1:
         80:f2:fc:de:b7:19:5a:b6:9b:20:51:d7:40:c7:55:21:79:4a:
         6e:88:60:79:6f:35:13:03:f6:fa:53:13:4f:d7:12:6d:d5:83:
         d1:e0:b7:97:64:36:d6:a2:ca:81:eb:92:92:6a:b1:49:71:c8:
         ea:ac:f2:11:a5:e6:22:46:e0:c7:c7:84:f7:39:eb:e4:f2:9b:
         42:50:f7:71:82:13:a2:52:7a:d1:1f:a5:4b:0f:49:d9:c8:b6:
         f1:5f:95:ca:e9:de:6b:e0:89:32:0e:96:d9:3e:77:33:e6:60:
         c7:44:8a:ab:24:06:90:be:4f:59:aa:80:41:d6:5e:a1:8e:89:
         d8:ae:63:59:02:58:e3:3c:c3:51:dc:50:61:68:0d:c3:96:45:
         31:3f:c6:40:18:fe:31:b5:a7:67:6c:03:ea:38:72:50:5e:58:
         41:e1:28:4f:e8:2d:d3:75:db:54:44:30:3b:19:de:4f:c6:8d:
         43:dd:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 10:08:11 2026 by rpki-client