Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          +ru2oy0X6/ae/ENFKIFRHfs9zIxH9FO7Engy0Pzo/xU=
Subject key identifier:   C9:A6:75:94:6D:EB:44:E5:C4:02:6E:C6:64:FF:D2:F4:0A:3B:45:5C
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       298BD40D34783970B60B3475F62FAC2867AE13EE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          2D
Signing time:             Wed 06 Aug 2025 07:00:50 +0000
Manifest this update:     Wed 06 Aug 2025 06:55:50 +0000
Manifest next update:     Thu 07 Aug 2025 08:05:50 +0000
Files and hashes:         1: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
                          2: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
                          3: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
                          4: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
                          5: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
                          6: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: wOFC9QI8GelsG8geVBZYw7NXSrIqNI+SPY2auPGgaCQ=)
                          7: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
                          8: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
                          9: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
                          10: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: uTe3RpuC5xHTpbzhstyrLed5Fn2IO9mhtG4WFqEyr0c=)
                          11: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
                          12: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
                          13: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: cYX/aooBYPctF6B6T+2hjlSFfoouQLj2WzXGFmeQb+A=)
                          14: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
                          15: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8b:d4:0d:34:78:39:70:b6:0b:34:75:f6:2f:ac:28:67:ae:13:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Aug  6 06:55:50 2025 GMT
            Not After : Aug  7 08:05:50 2025 GMT
        Subject: CN=C9A675946DEB44E5C4026EC664FFD2F40A3B455C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:3d:a2:c6:9d:e3:c6:ff:6c:88:5b:e1:7f:
                    e6:ad:28:e3:f1:65:d8:50:a4:12:3d:ee:ae:75:4d:
                    db:97:3f:50:4a:09:a3:99:4f:5d:36:7e:ef:9c:a2:
                    7f:b6:25:4a:37:76:d3:77:a6:7d:60:ee:bc:2e:0c:
                    17:67:f4:eb:ef:e3:65:8f:29:a7:9c:38:60:e1:87:
                    11:19:e0:91:88:bc:52:77:35:18:59:80:d0:ec:51:
                    e2:ed:4a:f5:a9:52:d8:33:42:22:78:50:ee:0d:e9:
                    b9:3a:dc:62:71:1c:d7:e1:87:de:8c:c9:e4:9f:64:
                    4d:ca:6c:d5:68:ea:f6:15:af:d1:fe:21:12:97:88:
                    fe:9a:69:70:73:f9:fa:dc:e4:73:dc:8e:ed:7a:76:
                    78:87:8a:27:31:17:94:f6:7b:09:d2:77:62:95:e6:
                    b1:ce:ff:53:dd:19:6d:e5:8a:f0:00:45:1e:b6:83:
                    59:7d:96:9f:bf:f6:91:02:fc:a9:63:d1:0d:0a:74:
                    71:8d:e8:33:03:4e:cd:3d:25:72:6d:f2:f5:69:c1:
                    31:c3:db:61:ed:3c:e2:39:e6:5d:c2:53:d2:7b:45:
                    90:40:e1:c3:d6:0f:1f:bf:65:40:b2:3e:9e:ae:e1:
                    01:ef:21:4a:cf:f8:0a:ba:29:6e:14:fa:0d:83:9f:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:75:94:6D:EB:44:E5:C4:02:6E:C6:64:FF:D2:F4:0A:3B:45:5C
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:67:c9:2c:36:cb:a3:a8:f1:c1:c0:7e:bb:f0:07:54:33:28:
         32:28:89:06:58:7f:1f:75:bb:d5:38:cc:e5:ba:c5:90:52:24:
         d2:d1:f1:47:f4:86:c0:5c:f1:e8:20:d3:d6:6e:b7:b8:1c:10:
         c7:58:11:d5:7b:02:9e:b3:43:5f:6d:38:a8:fb:bf:a1:9a:d9:
         46:c1:52:24:e3:b1:2c:ef:cb:be:41:98:8f:b4:04:ee:44:fc:
         d1:6a:d7:43:33:a4:b2:6b:ac:0f:6b:a0:9d:15:d7:cc:a5:ac:
         76:2c:70:ac:43:50:a3:b0:23:5e:69:c9:6f:13:ab:be:9b:da:
         3f:bf:d1:cd:89:d4:5d:06:20:39:9f:c3:a8:92:df:3f:b4:ce:
         3b:9e:2b:ee:7a:01:4a:c0:5f:63:59:44:8d:ba:b0:34:e9:e0:
         10:16:8d:fa:ea:78:6d:52:b2:6f:49:43:fd:87:b8:31:e9:41:
         da:1a:ab:6f:58:c6:61:32:ad:ec:a9:b2:ee:ef:bb:65:ae:44:
         ad:ed:3c:9a:de:39:96:c0:7a:1d:77:0c:bf:5c:25:59:3a:eb:
         8b:11:9a:ee:db:b0:8a:0a:45:23:ce:4d:93:e1:b5:45:82:92:
         4e:d3:93:02:97:63:91:44:18:3e:e8:e8:0e:f7:57:26:d2:38:
         47:a3:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:54 2025 by rpki-client