Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          t8477P1edZQTxAbyx5RI90OIlkc76MhhbChLg+B79oc=
Subject key identifier:   D6:B0:B4:F6:47:42:14:5C:F5:19:D1:E1:01:27:D8:19:C2:30:4D:C8
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       0E24315DA50328D61834366B5C2B8A3E2835C35A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          021A
Signing time:             Thu 23 Jul 2026 20:11:22 +0000
Manifest this update:     Thu 23 Jul 2026 20:06:22 +0000
Manifest next update:     Fri 24 Jul 2026 21:50:22 +0000
Files and hashes:         1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: sXHcBlEBRj96cm6Co0NFsi6oLbLz5Yx6AsW9djxGZQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:24:31:5d:a5:03:28:d6:18:34:36:6b:5c:2b:8a:3e:28:35:c3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: Jul 23 20:06:22 2026 GMT
            Not After : Jul 24 21:50:22 2026 GMT
        Subject: CN=D6B0B4F64742145CF519D1E10127D819C2304DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:28:ae:0e:8d:39:95:7b:3f:71:ba:d1:71:
                    fb:c7:62:ef:d8:89:fb:76:43:0b:2b:9a:f8:d9:50:
                    40:7f:58:4c:51:39:d5:9d:22:e2:09:72:d5:cc:d8:
                    70:d5:46:0a:a9:b2:56:bf:b6:14:92:c0:dc:00:2e:
                    76:34:6b:68:5c:82:61:8d:1b:a2:33:81:00:fd:50:
                    58:2f:8c:64:d0:b0:01:46:d3:5f:ad:9e:73:65:c7:
                    0b:6a:ab:d9:45:a9:d4:99:07:db:49:9a:ee:9d:70:
                    8a:2b:89:74:de:08:e0:eb:eb:76:92:76:a8:7b:c5:
                    4e:a0:b4:34:8f:63:2a:12:d2:6f:00:e0:3f:c0:62:
                    16:cb:22:32:b1:da:fc:d5:16:5a:f7:3b:66:a7:d3:
                    be:c7:dd:f5:d7:84:7c:b6:6f:37:77:d8:bf:41:6c:
                    ff:c6:45:7f:a9:ba:aa:7c:51:c8:46:2a:74:ce:30:
                    79:f5:6a:a8:76:49:69:f9:9f:59:01:be:45:8e:a2:
                    59:16:23:fd:77:50:f3:24:58:bb:60:62:31:de:c9:
                    83:d2:4c:ea:22:d4:5a:08:94:20:45:5f:0b:33:53:
                    40:cd:6c:e6:40:c9:a1:ed:6a:b6:46:ed:cf:a2:c2:
                    b6:4b:a3:da:c9:56:79:6a:d3:12:49:98:20:32:ee:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:B4:F6:47:42:14:5C:F5:19:D1:E1:01:27:D8:19:C2:30:4D:C8
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:48:14:58:b6:2f:11:68:2a:08:d4:b7:e5:3d:99:1c:64:59:
         2a:61:14:c4:c2:49:89:42:0d:e2:71:f2:b2:65:c1:e0:c3:67:
         05:64:4a:f4:be:18:e7:f1:c5:94:c8:8e:c1:81:9f:1c:84:52:
         a0:11:89:26:92:50:7c:61:86:10:ea:60:6e:05:56:29:19:bf:
         d2:bb:e9:98:7f:87:04:f4:b6:16:38:ae:3a:15:24:06:c4:c3:
         9a:fc:45:fa:69:d7:3a:39:11:4d:d9:c7:41:7f:4e:2d:38:92:
         dc:f0:4f:98:e0:0a:60:72:1c:c5:01:8e:d0:80:79:84:a3:53:
         d3:89:10:81:ea:7d:85:49:4c:01:43:c1:02:cd:80:77:18:99:
         97:3a:4f:23:c3:db:57:7c:92:a0:88:c6:52:15:2c:60:bb:94:
         88:0c:2e:bd:8f:f9:0b:b7:b6:65:dc:65:59:bd:59:11:a2:af:
         e1:6f:09:00:33:5e:40:ba:7b:f1:24:4f:fe:15:98:91:05:cd:
         9b:ac:6e:06:77:bb:67:a7:ed:8c:a2:b8:f5:6b:e1:cd:59:49:
         56:21:5b:a1:7c:da:b2:26:24:61:02:de:83:10:26:c9:a5:7f:
         52:b6:66:14:4a:b5:08:ef:10:d8:6c:1e:55:92:cb:1b:d7:81:
         9d:63:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:40 2026 by rpki-client