Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          37ugT4AxQHA0CntXjfEsojpURH1SL4x7Vp1LIrq/ERo=
Subject key identifier:   FC:72:04:59:FD:1A:9B:7A:17:77:86:EB:7B:FF:50:CB:B0:65:D6:02
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       52454E8A66D5B4852AE6BE4337D2263E63404AA9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          01BC
Signing time:             Wed 27 May 2026 12:05:00 +0000
Manifest this update:     Wed 27 May 2026 12:00:00 +0000
Manifest next update:     Thu 28 May 2026 12:53:00 +0000
Files and hashes:         1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: vvTN8XCzrDprs5XE76+TnvtaeZe6UYDj4aAgbCYDWEA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 May 2026 01:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:45:4e:8a:66:d5:b4:85:2a:e6:be:43:37:d2:26:3e:63:40:4a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: May 27 12:00:00 2026 GMT
            Not After : May 28 12:53:00 2026 GMT
        Subject: CN=FC720459FD1A9B7A177786EB7BFF50CBB065D602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:fc:c2:93:6d:be:ab:07:9f:82:14:b0:77:
                    d6:30:cc:18:5a:3c:35:d4:a5:81:a2:cf:a4:23:c2:
                    52:3d:fc:65:61:7a:78:bf:85:67:27:35:6a:d5:fc:
                    f1:b1:bf:a2:28:f8:ec:8c:3b:05:46:5b:fd:e3:c6:
                    34:dd:29:ed:83:4c:35:10:9c:55:d5:2d:54:e3:ff:
                    23:55:90:8f:3c:bb:ba:d1:6c:07:8f:dd:72:b3:75:
                    c2:d6:4d:57:3d:38:76:99:c9:9e:be:67:60:e6:fd:
                    68:4f:1c:59:5e:b8:c4:54:7b:d5:f9:29:8a:9a:dd:
                    e0:2f:04:13:84:66:e1:3d:9d:b9:cf:40:7b:28:12:
                    d0:e3:a3:c5:9f:a5:ed:22:d6:57:73:af:d2:ad:d2:
                    77:4d:86:e2:64:1e:7e:aa:a5:ca:ab:da:49:84:a8:
                    70:89:01:a0:eb:d2:0b:08:96:4e:80:be:11:a2:07:
                    4f:64:07:2c:a2:8c:8a:1f:2b:57:18:04:88:f9:95:
                    2f:0b:a4:35:1c:3d:b0:95:f8:78:e4:22:7e:cc:82:
                    3e:c4:06:e3:64:07:ad:21:52:ff:7d:8d:1d:e4:02:
                    6b:42:0b:16:bd:8f:b6:f3:a2:5c:ce:a0:99:f0:f8:
                    66:63:b6:b8:b1:e6:aa:28:07:dc:bc:ed:ef:0d:37:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:04:59:FD:1A:9B:7A:17:77:86:EB:7B:FF:50:CB:B0:65:D6:02
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:ae:2e:c9:0f:3a:4c:62:56:3e:aa:4f:ce:52:e5:13:bc:
         31:de:45:c6:f4:b3:2f:9f:91:4f:4a:7d:89:22:14:3a:2e:fb:
         06:98:06:27:e8:18:02:52:31:ff:08:67:7d:fb:1c:0a:11:6f:
         8f:71:1b:a9:cf:e1:85:48:76:f2:20:0d:dd:ff:cc:c3:55:9a:
         c8:f0:49:74:2d:c6:fd:84:6d:45:d0:2b:31:3d:aa:6f:a8:a1:
         8e:12:dd:5f:07:2c:73:3c:45:41:ca:f1:23:76:51:97:13:a4:
         0b:8a:a1:ef:21:f3:89:a3:ae:2b:4e:de:15:1a:59:0a:8f:d1:
         10:98:a8:b1:4f:57:e7:81:f9:36:fb:39:6a:33:8b:22:5d:b7:
         2c:de:b2:27:c2:81:a3:7b:b7:54:f6:20:80:82:84:3b:e5:12:
         56:8b:1a:db:69:02:b9:c8:d1:fc:5a:5b:d1:5b:39:9b:2b:10:
         64:7d:d6:d5:6f:f8:f4:6a:ae:a0:cc:6c:4a:eb:b6:8b:24:e8:
         88:97:8a:00:34:00:3c:ff:49:bb:50:df:f1:77:88:3f:01:7b:
         46:a8:41:d7:29:69:9f:b1:b8:4b:72:42:90:59:2c:21:a3:b5:
         f0:01:e6:58:28:e0:7d:e6:ef:6e:49:10:2b:22:df:74:b1:31:
         4f:66:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 16:16:39 2026 by rpki-client