Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
File:                     A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft (raw, json)
Hash identifier:          5+cZElSyA8usmy26YOfHDcMHhhka6dBtpKt6fJLTrFM=
Subject key identifier:   B5:DE:F6:34:29:BE:C2:56:54:09:F8:0D:7F:D2:C8:98:86:9F:8F:75
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       54217ACA30F41518EFDAC8770E3ED426184B303D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
Manifest number:          01DB
Signing time:             Mon 28 Apr 2025 04:34:20 +0000
Manifest this update:     Mon 28 Apr 2025 04:29:20 +0000
Manifest next update:     Tue 29 Apr 2025 06:14:20 +0000
Files and hashes:         1: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: mOOzHywYUf8zjI9dUNsK9l53AJEq7KLoJcvQC7/t8eg=)
                          2: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: qeKhwSxBv73kgRxW6Pg8dImsSOEmPLh3wTLxedRpHZA=)
                          3: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: jseZnQDpxM3OGEtPFiaXE9ESnwodw6BGWg1duSXkRMU=)
                          4: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: h7T/IBKgZ+g5LGDA1fTNWZlyWBtya6uHa3uTkoL3u98=)
                          5: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: KjbRTlOn0pUH9so2EM+bXyKGqqTMvpmSO7usB8M9zXI=)
                          6: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA=)
                          7: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: dF4lz4b9uILyKiQv5ty5oA8TE3niW+o+umdhEtVVLnc=)
                          8: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: CnAZ047tmrpRp78Hj9O+EaIJNOL4YEi+nEB/HQghDBU=)
                          9: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: rsDe4gVLOQQ6T2XmrS2vrQjsrzLl/iWq5oMRojuFXSU=)
                          10: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl (hash: LbDXrbbsGVRDwAvXmtpV8G0rFw6SLJoQ6pIDzSF7QbI=)
                          11: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: HKmgP2ypG6wwvWOLbdtRfnpQpQFEpIJ3B8Rmypw0n+E=)
                          12: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: hAG8kF083sc71HTpZHIm9pVONzb5X6Kq/j0og2972Og=)
                          13: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: bPQ1HBzdP13bWbYEcnsttiFohjw+mT+amFg13lB095M=)
                          14: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5sfxFWfTleTq60HeudpGR9w7CPONeSZsJgkPlM018cs=)
                          15: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: S6jgMc6rG0ZsUATxPWt7SrTUxQY234zCLU7DInT6Xy8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:21:7a:ca:30:f4:15:18:ef:da:c8:77:0e:3e:d4:26:18:4b:30:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Apr 28 04:29:20 2025 GMT
            Not After : Apr 29 06:14:20 2025 GMT
        Subject: CN=B5DEF63429BEC2565409F80D7FD2C898869F8F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:3b:bd:bb:e9:25:82:5d:02:5b:27:19:d8:
                    65:9f:bd:7c:8a:b7:7a:ed:be:5a:ce:2b:a2:6c:0b:
                    88:3c:fa:69:be:86:8d:19:f8:e4:2d:cb:d8:a0:f7:
                    58:bb:3b:04:aa:d1:a0:36:f5:ac:d5:ca:13:b9:06:
                    de:1b:c1:c4:e4:0a:65:a8:67:62:4f:ed:ae:fe:05:
                    1b:bb:63:e2:bf:7e:cf:82:ff:de:1a:0c:73:73:27:
                    55:1f:e6:54:10:66:d8:7c:38:7d:56:a5:77:b6:5d:
                    3d:5e:80:eb:64:59:17:91:2e:46:7d:3a:c7:0c:be:
                    64:f5:64:08:cc:35:be:2e:96:41:f2:6f:07:47:2a:
                    d5:a0:67:b1:bb:2e:9f:b6:2f:75:34:26:1f:61:bd:
                    14:1d:c5:85:34:b0:59:cd:0a:62:90:cd:51:4b:8b:
                    24:09:54:08:d4:2d:bb:46:01:b4:12:97:1e:d7:5a:
                    79:a0:2e:73:b0:52:b9:bf:e9:b2:37:4e:a9:9b:17:
                    b9:fd:05:66:a7:05:fb:23:d3:26:58:98:09:58:9b:
                    fd:62:da:0f:09:27:95:11:9d:70:d9:ce:94:cd:43:
                    c3:39:02:bb:b2:c9:da:43:00:1a:4a:fb:c6:b6:67:
                    17:04:c7:27:71:cf:f7:07:4a:b2:99:7e:e8:d5:b8:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:F6:34:29:BE:C2:56:54:09:F8:0D:7F:D2:C8:98:86:9F:8F:75
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:e4:df:68:1b:69:15:ab:9a:af:65:83:b7:a4:61:8d:3a:
         3a:7b:e2:d1:87:32:6b:f2:75:b8:3b:a8:d5:27:87:5b:90:39:
         de:b6:90:22:36:5d:84:bf:f9:75:f5:0c:fe:8b:d1:98:f1:1f:
         ba:d6:53:55:9e:0a:34:de:81:73:6e:31:78:c8:74:2b:a4:dd:
         1f:5e:83:65:8f:9c:c2:d6:ff:cd:30:b2:6f:89:49:6a:19:aa:
         dc:94:e1:24:05:76:4f:3c:ed:ca:fe:0f:ef:ca:3a:ad:4c:02:
         95:69:db:6a:6f:01:75:99:26:c3:7e:93:a6:10:92:3f:61:3a:
         2e:fd:65:84:bd:99:12:29:ae:d2:e8:9d:b0:c4:f8:3c:d8:25:
         6d:d0:36:95:78:ff:5a:41:74:be:c4:7e:bb:35:83:8b:82:23:
         3a:7c:7b:25:99:d1:3c:9e:7c:77:ba:75:60:5c:e1:a0:94:f8:
         3b:fe:f0:1e:88:bf:bb:81:b1:14:9f:dc:b9:6a:08:f9:16:76:
         30:3d:ac:0f:70:70:7c:12:01:86:70:1d:c0:23:4a:7e:71:c3:
         22:55:d7:7d:ff:52:b3:47:b5:03:16:1b:18:16:d3:ae:6e:14:
         c5:83:6b:d7:ef:74:06:c5:f9:c3:36:d7:3c:3c:2d:fc:4e:b0:
         82:c1:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:16 2025 by rpki-client