Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          FBgBXvwI1t+si4SgMfvrA6/NQnUAuD9Vsppb3sZ4y/U=
Subject key identifier:   3F:45:C7:77:6F:97:D7:AE:DB:8B:75:8A:46:A6:6A:7F:E8:58:C0:01
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       6E9F97324F99DCA5CD2E328F4E2C6DCFF2E11A2C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          0208
Signing time:             Sat 11 Jul 2026 22:17:55 +0000
Manifest this update:     Sat 11 Jul 2026 22:12:55 +0000
Manifest next update:     Sun 12 Jul 2026 23:15:55 +0000
Files and hashes:         1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: /nuwFgzUr6mVsm2Z/yqh2pszTv79FBIxh/nuAjUmsoA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9f:97:32:4f:99:dc:a5:cd:2e:32:8f:4e:2c:6d:cf:f2:e1:1a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: Jul 11 22:12:55 2026 GMT
            Not After : Jul 12 23:15:55 2026 GMT
        Subject: CN=3F45C7776F97D7AEDB8B758A46A66A7FE858C001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:4d:c8:8e:ac:8f:26:4a:91:42:d3:8e:ec:
                    90:1b:68:69:8d:e2:7c:5a:97:91:fc:de:a5:24:2b:
                    45:b4:c7:6a:54:59:1f:f4:c9:43:33:fe:25:11:3e:
                    77:1d:0f:0a:17:2c:19:8d:8d:22:d7:09:15:73:7c:
                    5e:c3:52:8f:18:bf:b1:d4:31:0c:fb:20:9c:5f:8c:
                    5d:bc:9e:e2:92:f0:20:8a:64:97:1a:74:cf:36:32:
                    51:1c:f1:80:28:73:3e:c9:80:f1:ee:43:0b:28:d5:
                    ae:c8:bb:0e:1f:a7:60:1f:90:18:36:0d:9e:bd:26:
                    94:7e:c4:5c:45:98:bf:2c:98:3e:a7:89:61:4e:fa:
                    47:36:89:d5:0e:e0:48:24:5d:52:47:7c:2e:79:ec:
                    7b:30:2c:2d:bc:35:8b:90:4a:5f:45:64:96:21:45:
                    06:4f:c0:48:f0:be:8f:62:20:8d:7f:9d:91:0f:b1:
                    81:01:10:55:82:2b:78:9a:71:75:7a:85:37:46:39:
                    d5:de:f9:c0:14:88:0b:f0:a7:cc:fc:97:e8:a1:c4:
                    80:7b:7e:27:67:e2:e3:c6:46:b2:a8:c4:a7:00:14:
                    63:f2:bf:83:3d:b8:79:10:30:75:5d:8a:f4:5d:c1:
                    21:5e:2c:f4:b0:bb:0d:b1:0e:87:88:c1:8d:54:fb:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:45:C7:77:6F:97:D7:AE:DB:8B:75:8A:46:A6:6A:7F:E8:58:C0:01
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:14:f1:3d:d8:67:3f:a4:cd:2e:af:71:dd:79:86:36:fe:
         a0:c7:01:1f:5d:b1:20:37:2a:61:12:e6:29:33:10:f8:2b:ae:
         ac:33:cd:72:85:f8:1f:09:22:ac:ac:ba:d2:42:9f:06:5d:27:
         1f:5b:fe:c6:2d:16:56:01:e7:a6:3e:7c:09:75:f2:87:b4:32:
         0e:a9:b8:3d:3e:9b:6f:29:2c:ce:cf:79:16:22:48:07:4a:c1:
         9e:d8:0b:b0:de:4e:b6:df:fd:50:07:6d:3d:03:58:f0:f3:5d:
         46:45:a6:34:6f:b5:42:23:f9:51:e7:9f:07:0f:7d:35:59:66:
         ce:03:f4:8c:21:8b:e0:53:21:74:f2:2f:7f:c8:a8:c3:dc:c6:
         3f:81:b6:2a:9d:41:54:c6:5b:91:a0:c1:c3:13:6f:33:b3:74:
         b5:d3:7f:83:92:cd:5c:d7:62:55:75:68:02:28:02:a9:be:e7:
         ba:29:8a:25:01:d8:57:37:70:70:5b:04:01:1c:20:b8:32:0f:
         2a:55:6a:94:32:90:01:77:d7:09:04:54:39:72:92:6f:3c:05:
         9c:cc:1a:85:fd:d4:01:32:e2:89:32:58:33:6c:b8:06:38:f1:
         e5:62:fa:61:a8:c8:a2:db:ad:47:9f:7e:0b:2a:e5:a8:0a:d0:
         08:fb:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 04:45:30 2026 by rpki-client