Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          SVvxmTg5xPkqw4VGH+hF8ItKcI916n4yoswPPPbtBaA=
Subject key identifier:   CD:EE:27:51:62:E8:1B:9C:CD:B0:A4:10:90:F4:00:59:41:36:7F:C2
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       19A654B51831BC906B867D11BC275534562CE1F7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          0145
Signing time:             Sun 01 Mar 2026 14:09:03 +0000
Manifest this update:     Sun 01 Mar 2026 14:04:03 +0000
Manifest next update:     Mon 02 Mar 2026 14:34:03 +0000
Files and hashes:         1: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
                          2: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
                          3: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
                          4: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
                          5: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
                          6: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
                          7: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
                          8: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
                          9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
                          10: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
                          11: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
                          12: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
                          13: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: MJrtLkFS06pwA3Hf6uyD9MXP5VUcJQJkI2axcvUWsNI=)
                          14: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
                          15: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a6:54:b5:18:31:bc:90:6b:86:7d:11:bc:27:55:34:56:2c:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Mar  1 14:04:03 2026 GMT
            Not After : Mar  2 14:34:03 2026 GMT
        Subject: CN=CDEE275162E81B9CCDB0A41090F4005941367FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:d9:42:ec:98:8e:34:bd:3e:4d:95:e1:a4:
                    fc:71:46:00:a6:dc:f7:84:8a:a3:02:5d:1c:7b:52:
                    4b:35:de:dd:20:59:4c:8d:c8:b6:d5:7a:d1:aa:bb:
                    ee:0b:49:1c:eb:31:e8:a8:fc:dd:bc:9f:8d:63:9b:
                    15:c8:83:e1:64:aa:f6:6f:8c:11:0e:14:97:60:96:
                    08:72:57:2d:24:a2:16:a3:bb:8e:8c:19:1e:47:71:
                    9c:26:3f:90:83:56:f6:f6:4f:3a:04:1f:85:64:2e:
                    2c:84:fd:56:06:28:ce:97:04:5f:c7:76:da:91:f0:
                    bb:08:35:8a:85:2d:01:df:73:cd:bb:75:e2:f5:08:
                    05:4b:04:ef:dd:37:c1:37:7f:ea:ad:7e:77:79:c9:
                    5d:a9:87:5f:3b:bb:3a:45:b8:d5:54:b4:32:e8:19:
                    49:5d:8a:be:c3:de:fe:63:a6:cd:8d:2c:e8:af:20:
                    fe:f0:18:b4:8e:f7:85:07:57:d4:b8:3a:0f:52:3c:
                    13:ac:49:e7:f1:00:71:a0:d6:d7:f0:10:b1:35:2f:
                    e9:6a:fb:e1:50:8f:d8:d2:c8:10:9f:3f:f5:ce:72:
                    18:2d:cb:6f:b1:bf:78:c2:92:7f:f5:3f:3a:7f:02:
                    ab:90:89:aa:14:17:20:71:4c:67:b4:13:a3:32:a7:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EE:27:51:62:E8:1B:9C:CD:B0:A4:10:90:F4:00:59:41:36:7F:C2
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:f0:25:d2:84:f5:6e:15:34:13:f0:c0:26:04:47:4d:a1:
         fb:7b:21:ea:09:b2:9f:78:a7:09:18:3d:dd:3c:66:b9:a4:2b:
         5c:c5:de:32:56:3b:9c:cd:ce:33:17:8a:72:0f:a0:ee:10:c5:
         6d:44:70:06:3e:50:a5:dd:8f:f1:3a:1c:c7:60:fe:f2:bd:b1:
         87:a2:d2:e4:45:b0:30:b7:94:b1:30:1b:c9:e8:bb:3c:ad:85:
         b7:85:d3:98:41:ae:62:28:fd:f6:38:19:9d:b8:be:b7:66:02:
         e1:ac:9c:3c:74:64:33:30:f9:0d:e3:a1:68:9c:a3:32:6a:01:
         ed:2c:79:2f:6f:ff:d6:6f:bd:05:5f:5c:ce:5d:61:ad:6f:af:
         bf:18:1b:91:1a:46:ee:76:03:85:0d:31:e7:87:55:05:87:de:
         f3:ae:e7:3a:56:e5:5e:a8:c9:25:14:8a:74:03:08:cd:a3:4c:
         4f:5a:b8:fa:78:45:41:1a:ca:65:2a:a4:83:fe:19:9e:55:a7:
         4e:46:51:0c:2b:82:fe:53:6b:95:e6:84:55:3e:d7:10:27:9b:
         64:fd:10:4f:9b:52:cf:e2:43:ad:1e:8d:08:4b:57:3b:94:0e:
         a9:e3:5e:3a:d5:b9:8c:49:b7:b8:c1:fc:dd:e0:08:1b:4c:3b:
         9c:47:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:43 2026 by rpki-client