Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
File:                     FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json)
Hash identifier:          9ba++YMdb6HiYgK8B9BKs22O9AIrkonGPvZYfUB9CYk=
Subject key identifier:   FE:39:A2:99:9F:D9:E3:B5:6F:D0:FF:BF:FE:7A:25:23:53:01:F8:95
Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
Certificate issuer:       /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Certificate serial:       3E7EA81044A7350B1CFD1CC3120CE940388BEFFA
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
Manifest number:          33
Signing time:             Sat 23 Aug 2025 13:33:57 +0000
Manifest this update:     Sat 23 Aug 2025 13:28:57 +0000
Manifest next update:     Sun 24 Aug 2025 16:54:57 +0000
Files and hashes:         1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: cnFBIU/x+kJtGUn3ninOcOOqLhP9d8wt7ofT/XPYF2M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7e:a8:10:44:a7:35:0b:1c:fd:1c:c3:12:0c:e9:40:38:8b:ef:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
        Validity
            Not Before: Aug 23 13:28:57 2025 GMT
            Not After : Aug 24 16:54:57 2025 GMT
        Subject: CN=FE39A2999FD9E3B56FD0FFBFFE7A25235301F895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:50:e7:e7:66:ba:a9:2b:b9:03:c8:05:0b:
                    f0:7c:df:25:e7:56:3f:0a:21:78:02:8b:0a:2e:ea:
                    74:a5:e6:b9:8a:df:95:7e:74:33:3c:8e:fc:ba:d6:
                    ec:7b:15:bf:8d:89:5b:80:a4:76:7f:c8:07:f3:49:
                    16:6b:29:a4:f1:27:93:87:18:5d:08:a9:13:e7:44:
                    b8:bd:9d:77:82:12:41:d0:62:3c:eb:36:01:6f:d8:
                    0f:cb:ad:7e:83:e5:2b:d3:24:22:2d:76:14:d6:45:
                    16:12:fd:98:86:97:bb:03:28:e7:27:f7:aa:80:2c:
                    2f:37:21:c7:45:a5:98:86:df:8d:ff:72:ea:e9:97:
                    08:e4:12:d4:06:08:ad:b8:bd:2e:1e:38:76:82:ad:
                    08:61:2c:64:de:f7:08:f4:dd:ec:11:64:23:c0:aa:
                    7e:94:7c:c8:16:4f:4a:d8:88:7c:b7:f7:30:3d:f9:
                    7a:e4:30:2e:a2:71:35:1e:45:63:bf:1c:55:a9:0f:
                    3d:51:3a:6e:81:b5:1b:8c:58:63:1f:e5:77:f1:58:
                    f1:4b:8f:5d:69:ae:b4:ad:fe:6e:48:fe:5d:67:fe:
                    55:c3:1f:6b:40:52:26:a3:ba:9c:7c:fd:81:66:7c:
                    d3:4a:ac:fa:cf:98:28:bb:37:48:ed:da:ec:50:94:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:A2:99:9F:D9:E3:B5:6F:D0:FF:BF:FE:7A:25:23:53:01:F8:95
            X509v3 Authority Key Identifier:
                keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:34:5b:f2:94:0a:32:b0:9e:5d:0e:15:7c:53:c8:6d:06:
         80:89:4e:b5:63:a7:0d:4b:aa:94:31:c5:e3:ff:49:96:30:dc:
         22:f2:98:9a:3b:28:9a:e4:cc:95:1a:c8:d4:7b:bb:07:3c:79:
         7e:25:91:95:4d:a2:f4:75:05:3a:0e:77:5d:93:95:9c:3b:b3:
         56:32:32:74:bd:6d:50:05:08:df:ce:6d:36:b3:54:49:e1:e8:
         98:db:c0:d5:75:dc:2e:cf:35:0d:f7:bb:c6:2b:5d:c8:c2:c0:
         da:47:de:90:e9:53:d3:af:f7:ad:54:31:8f:40:d8:04:f5:6d:
         37:06:51:c4:71:38:c4:b2:bd:f7:3b:ec:fe:5b:bd:22:c3:19:
         72:f7:df:30:71:df:6f:2d:e8:03:77:ee:60:3c:62:85:8e:3b:
         e9:88:39:56:20:61:74:f0:21:4e:ec:30:63:b3:f0:1f:a9:6a:
         8b:4d:1f:3c:ef:d4:14:fd:38:01:43:38:b8:e2:e5:84:6d:05:
         18:22:71:16:13:1b:24:11:0b:7a:8f:bb:61:47:39:00:70:83:
         74:c8:13:22:ef:e8:45:47:eb:10:5f:2a:1b:ef:c4:6e:2f:f3:
         3a:4d:c1:cb:f2:b9:6e:0b:96:3f:de:69:0a:36:6f:ea:7a:bb:
         2e:29:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:55:13 2025 by rpki-client