Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
File:                     FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json)
Hash identifier:          Of/gMmY9Yn5QCqVduxbxPRJGCrj3Iz4mZOOqCwye5zY=
Subject key identifier:   FB:48:6E:E0:58:17:19:8D:AF:F2:96:C0:BC:26:C3:3F:9D:38:31:70
Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
Certificate issuer:       /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Certificate serial:       050A026E26CD977DFCFE940256205087FAB646C6
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
Manifest number:          0114
Signing time:             Tue 12 May 2026 16:24:11 +0000
Manifest this update:     Tue 12 May 2026 16:19:11 +0000
Manifest next update:     Wed 13 May 2026 18:32:11 +0000
Files and hashes:         1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: GvKDaAGnPQi8fM4SJYxSysf56buw6/riORt1XPRP8UE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:02:6e:26:cd:97:7d:fc:fe:94:02:56:20:50:87:fa:b6:46:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
        Validity
            Not Before: May 12 16:19:11 2026 GMT
            Not After : May 13 18:32:11 2026 GMT
        Subject: CN=FB486EE05817198DAFF296C0BC26C33F9D383170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:22:46:bd:92:0f:63:47:e9:2a:32:c4:92:
                    89:30:88:66:64:a2:dd:41:cd:be:e4:1e:3d:2d:4a:
                    f9:1d:3c:6c:56:c1:56:4d:6e:c2:55:ba:67:49:22:
                    e7:bf:56:f1:02:09:a4:73:d6:da:f1:0a:85:cf:41:
                    c7:d7:8a:d3:91:f9:45:eb:c2:4c:1a:3d:55:5b:93:
                    2e:eb:88:c8:ba:33:c8:5c:2b:84:25:56:1c:6e:a0:
                    6b:71:ac:c4:a7:7a:9c:b5:fa:1e:e0:1c:54:f7:6b:
                    42:7a:29:06:f7:d4:5c:fc:f8:a6:a8:c8:cb:ca:d1:
                    ad:9f:2c:91:44:73:0d:1f:1b:6e:d1:ac:0c:01:47:
                    ac:0f:a3:4f:26:99:7e:01:42:85:d8:71:0b:b9:a8:
                    5b:70:b0:c8:e6:c0:36:6d:0f:87:4d:2c:b7:bd:88:
                    98:7f:aa:a1:06:a7:87:c7:d5:46:79:38:99:e3:93:
                    8e:28:d0:3f:26:e8:c4:20:a1:c2:3d:09:59:11:1c:
                    c0:ee:50:72:b4:2f:9b:95:f2:a5:50:2c:dc:21:47:
                    09:9e:b0:cd:4a:2a:59:f7:46:a3:da:53:ed:ea:18:
                    d3:bc:c0:7b:c7:68:ef:52:c9:fc:e0:3f:de:b0:65:
                    fd:59:29:a2:33:bf:60:af:8c:c3:45:46:f1:e3:6d:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:6E:E0:58:17:19:8D:AF:F2:96:C0:BC:26:C3:3F:9D:38:31:70
            X509v3 Authority Key Identifier:
                keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:a6:30:ff:78:63:a5:2e:7f:a0:1d:fc:35:14:fa:0d:80:
         f7:1b:e5:e6:42:0f:8b:07:3c:03:4d:0a:cf:07:3a:c0:d0:71:
         0c:73:b3:a2:26:94:c5:48:e7:77:f6:85:44:bd:e5:db:32:c2:
         ed:b4:e9:3d:56:1c:04:3c:ab:cc:55:3e:59:a8:f1:f2:83:07:
         f9:c0:57:a1:f8:da:aa:66:6c:b8:24:78:0b:2f:70:70:1c:3c:
         72:08:f5:2e:37:da:1c:b7:bd:2b:f9:0c:d9:0f:21:a2:6d:ec:
         32:c3:10:c1:11:2d:a1:df:b6:2c:10:94:85:0b:11:c6:11:86:
         d7:5e:93:df:f7:9a:24:09:d8:a7:22:39:bb:12:c6:91:04:67:
         92:a8:e9:4c:0a:ea:e3:68:ad:59:1c:f5:a4:9e:18:67:33:d2:
         08:f6:0b:a2:0c:2b:7b:87:b6:0e:ee:9b:e1:e8:d6:a5:ad:db:
         b1:29:ff:3d:bc:94:b5:ab:8a:65:7a:ab:28:d1:51:02:97:2b:
         32:e9:d2:26:71:ac:c5:46:ed:7e:53:1d:25:eb:ef:ae:1e:b9:
         b2:c4:af:2f:a0:f5:39:b4:12:1d:fa:77:f5:0b:e8:46:52:cf:
         60:b6:9e:66:73:c1:2b:fa:6d:0a:bc:81:cf:2c:3f:da:69:f9:
         34:6d:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:45 2026 by rpki-client