Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
File:                     0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json)
Hash identifier:          Q89t6kL0qfnqAQyPwyhIcrdWdLI2DIlixxWOMyrerp4=
Subject key identifier:   FA:9F:99:D7:7B:CB:B0:26:8C:A2:66:3F:5E:60:D0:E2:D7:A9:66:98
Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Certificate issuer:       /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Certificate serial:       74A37127F2BB59D1429910159C4CEAAF2D3CD093
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
Manifest number:          0143
Signing time:             Fri 25 Sep 2026 05:58:30 +0000
Manifest this update:     Fri 25 Sep 2026 05:53:30 +0000
Manifest next update:     Sat 26 Sep 2026 09:36:30 +0000
Files and hashes:         1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: 2qm6YcBVCu7n/3zp2MJhoKOg7OiR3LuBsdcYAOB5Gak=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a3:71:27:f2:bb:59:d1:42:99:10:15:9c:4c:ea:af:2d:3c:d0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
        Validity
            Not Before: Sep 25 05:53:30 2026 GMT
            Not After : Sep 26 09:36:30 2026 GMT
        Subject: CN=FA9F99D77BCBB0268CA2663F5E60D0E2D7A96698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:8d:13:44:28:2e:7f:f9:9c:ff:55:1e:3b:
                    02:93:29:71:32:40:c0:97:0b:a8:61:56:59:29:f4:
                    92:1b:6d:a3:c7:6e:0b:df:d5:30:45:40:fe:03:5f:
                    c7:b8:4f:7b:f8:01:f0:8f:64:e4:07:7f:2a:6b:23:
                    4e:67:4c:f0:2e:8e:e5:89:89:db:5e:9a:53:46:38:
                    54:59:96:89:11:00:1c:be:8e:ed:70:6f:02:79:b6:
                    46:02:5c:78:90:f1:95:ee:36:c5:c5:97:f6:cb:97:
                    a9:2d:6f:b7:fc:f6:67:98:ca:f3:4a:86:26:54:8f:
                    83:20:dd:d6:43:55:3e:fc:bd:c2:05:be:21:50:06:
                    8b:ed:9f:a4:31:48:eb:b5:a3:9c:ab:3e:32:62:7b:
                    c3:9a:d2:4a:16:2e:29:16:a6:e5:24:7a:13:43:93:
                    0a:a8:73:ae:89:49:38:1e:f7:7b:5f:83:9d:6f:e9:
                    23:24:b8:6f:eb:75:81:08:46:5c:d7:98:32:5c:f4:
                    65:d7:32:7c:76:e9:63:65:9f:cb:aa:be:83:2b:12:
                    33:79:aa:99:c1:5c:80:80:10:6e:53:1d:cf:8b:55:
                    26:4f:71:87:be:57:54:7a:41:18:73:7c:eb:7b:fe:
                    4a:a8:53:85:32:5d:79:8a:46:79:58:c6:2c:d5:ab:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:99:D7:7B:CB:B0:26:8C:A2:66:3F:5E:60:D0:E2:D7:A9:66:98
            X509v3 Authority Key Identifier:
                keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4e:43:74:01:8b:61:2e:6a:2a:95:22:a7:25:c2:bf:24:f0:
         28:47:6d:6e:10:e0:c2:3e:c8:d9:50:06:01:dd:70:ac:7f:1b:
         97:19:51:63:73:c8:78:f6:96:69:2e:92:8f:80:64:c4:9b:35:
         27:bf:86:db:73:73:41:e2:52:01:fc:a9:09:73:0e:ff:3e:d3:
         9b:33:ae:64:76:82:36:25:49:b5:dd:1d:15:17:6d:33:0a:6e:
         a8:eb:93:98:53:4f:1f:48:ed:52:0f:28:11:67:54:60:e1:b7:
         01:d6:26:60:19:fa:58:f9:71:52:03:ba:06:09:8d:47:85:b3:
         d8:bd:f1:c1:04:fd:48:c0:c4:00:ca:8b:d1:3e:eb:67:45:51:
         80:c9:83:fb:f7:6a:8a:2c:36:ad:af:50:0f:4e:56:80:cc:ea:
         89:4c:6b:73:00:84:bf:68:53:bc:3b:95:6c:1f:6f:55:82:a2:
         1b:98:eb:54:8f:3e:53:73:e3:90:4f:34:6b:89:16:b2:b7:bd:
         77:2f:e9:50:7e:df:ff:08:a3:d2:a2:98:ae:18:ea:fd:41:f7:
         c1:35:9c:8e:e2:43:f1:46:37:2a:b6:8b:bf:97:44:11:29:63:
         c8:fc:e0:58:36:c6:4e:ca:97:f1:ba:f8:ab:ab:00:f5:1d:21:
         8d:28:f0:8b
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIUdKNxJ/K7WdFCmRAVnEzqry080JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIzQjY4QTIwNkI2QUY4NEEzNEFBMUI3NjMyRTk5QUIw
NkY1MjA3NzAeFw0yNjA5MjUwNTUzMzBaFw0yNjA5MjYwOTM2MzBaMDMxMTAvBgNV
BAMTKEZBOUY5OUQ3N0JDQkIwMjY4Q0EyNjYzRjVFNjBEMEUyRDdBOTY2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSZY0TRCguf/mc/1UeOwKTKXEy
QMCXC6hhVlkp9JIbbaPHbgvf1TBFQP4DX8e4T3v4AfCPZOQHfyprI05nTPAujuWJ
idtemlNGOFRZlokRABy+ju1wbwJ5tkYCXHiQ8ZXuNsXFl/bLl6ktb7f89meYyvNK
hiZUj4Mg3dZDVT78vcIFviFQBovtn6QxSOu1o5yrPjJie8Oa0koWLikWpuUkehND
kwqoc66JSTge93tfg51v6SMkuG/rdYEIRlzXmDJc9GXXMnx26WNln8uqvoMrEjN5
qpnBXICAEG5THc+LVSZPcYe+V1R6QRhzfOt7/kqoU4UyXXmKRnlYxizVqwVRAgMB
AAGjggJhMIICXTAdBgNVHQ4EFgQU+p+Z13vLsCaMomY/XmDQ4tepZpgwHwYDVR0j
BBgwFoAUCztooga2r4SjSqG3Yy6Zqwb1IHcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy
YmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2RjUyMDc3
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEIzQjY4QTIwNkI2
QUY4NEEzNEFBMUI3NjMyRTk5QUIwNkY1MjA3Ny5jZXIwgaAGCCsGAQUFBwELBIGT
MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEwLzBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQB3TkN0AYthLmoqlSKnJcK/JPAoR21uEODCPsjZUAYB3XCsfxuX
GVFjc8h49pZpLpKPgGTEmzUnv4bbc3NB4lIB/KkJcw7/PtObM65kdoI2JUm13R0V
F20zCm6o65OYU08fSO1SDygRZ1Rg4bcB1iZgGfpY+XFSA7oGCY1HhbPYvfHBBP1I
wMQAyovRPutnRVGAyYP792qKLDatr1APTlaAzOqJTGtzAIS/aFO8O5VsH29VgqIb
mOtUjz5Tc+OQTzRriRayt713L+lQft//CKPSopiuGOr9QffBNZyO4kPxRjcqtou/
l0QRKWPI/OBYNsZOypfxuvirqwD1HSGNKPCL
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:01 2026 by rpki-client