Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          pFmJMgqPB/15Xi2xefPEfdcy5Kfug0mCb5Z17s72CyE=
Subject key identifier:   83:F5:88:4D:50:A3:F8:18:89:76:76:B2:CA:4A:16:21:04:8D:F8:B3
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       3627BF4792A0E9CC9DE0E4A7C6065AAF813507C3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          01D2
Signing time:             Fri 12 Jun 2026 21:52:55 +0000
Manifest this update:     Fri 12 Jun 2026 21:47:55 +0000
Manifest next update:     Sun 14 Jun 2026 01:21:55 +0000
Files and hashes:         1: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=)
                          2: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
                          3: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: Bn2XKO2XrMbXDAHQTCqpEF8lZ5BD7ezJZW/sowpz7pY=)
                          4: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=)
                          5: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=)
                          6: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=)
                          7: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=)
                          8: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=)
                          9: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=)
                          10: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=)
                          11: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
                          12: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=)
                          13: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:27:bf:47:92:a0:e9:cc:9d:e0:e4:a7:c6:06:5a:af:81:35:07:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Jun 12 21:47:55 2026 GMT
            Not After : Jun 14 01:21:55 2026 GMT
        Subject: CN=83F5884D50A3F818897676B2CA4A1621048DF8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:fd:95:cb:f6:fa:40:60:b0:8c:06:bd:27:
                    ad:24:04:e0:97:6a:3d:ba:c3:88:48:d8:06:4a:e7:
                    52:c9:ec:de:e0:00:30:3f:a3:03:bd:43:ba:1e:f3:
                    f7:cf:1c:f1:e7:b7:58:d0:c0:e9:e1:38:84:0e:d1:
                    36:f1:c9:ef:95:20:c0:fa:73:e9:23:e2:2d:db:07:
                    a4:ca:0a:64:01:1f:bd:80:57:80:00:11:0a:07:f2:
                    ca:06:e7:2f:d7:23:0c:db:ae:5b:7e:2a:3f:39:9a:
                    4f:21:42:3c:3e:4c:dc:b5:52:03:f6:e4:32:9e:52:
                    35:f4:ee:12:6b:4b:d2:c7:09:e8:33:9c:bc:d3:c6:
                    9f:73:ca:db:ee:d9:dd:02:89:14:90:f4:9e:71:19:
                    dc:5d:ac:cb:b5:d7:8e:7e:ac:f2:01:9b:55:b4:59:
                    08:af:21:84:09:67:94:56:56:42:3b:f6:40:aa:1b:
                    22:37:58:bb:c9:06:ec:f3:c8:b2:41:17:46:51:2f:
                    cc:11:82:ac:d7:71:e5:f1:af:a9:f2:47:f6:71:5f:
                    31:9a:ca:08:5b:80:7b:bb:ce:f6:d0:96:71:77:39:
                    ab:85:e9:13:1a:3b:1c:be:ac:ca:7f:35:89:fd:f4:
                    4b:26:42:3b:ea:f6:f3:83:93:a2:86:3d:00:4d:8f:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F5:88:4D:50:A3:F8:18:89:76:76:B2:CA:4A:16:21:04:8D:F8:B3
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:80:6e:3f:84:3f:1a:db:9f:81:a8:cb:49:f5:56:53:1b:47:
         66:33:a0:29:43:7f:56:70:b6:de:4d:9e:c8:a7:15:72:0a:12:
         e1:b5:96:75:a5:95:55:3c:59:63:87:62:10:a5:7f:08:75:7b:
         0f:07:8e:63:73:b6:12:72:ac:ad:19:de:75:d0:bb:24:49:45:
         72:cb:33:48:9f:62:9c:46:aa:77:0d:f6:50:11:e8:7b:33:61:
         8e:18:84:73:cd:1c:5f:92:01:3e:db:e9:b7:ec:7c:d3:80:1d:
         29:bd:07:6f:d4:c4:2a:26:6a:a9:33:c8:45:45:06:34:1c:c9:
         63:93:e2:a3:d2:46:2d:81:d9:c9:ed:05:37:38:b0:82:62:45:
         3f:49:7c:7e:ef:38:27:e9:b4:30:c3:62:06:f3:7b:89:33:08:
         04:0b:e7:01:2b:95:0b:9e:e1:db:1d:71:35:4f:dc:68:64:84:
         e2:a9:77:97:e7:6a:c9:6b:5a:21:f9:40:ae:77:67:8c:50:09:
         55:d4:d3:d0:05:28:58:85:52:00:14:54:e4:1f:4f:96:bf:1b:
         52:78:f5:99:51:b2:c9:96:57:41:6a:e4:b2:65:5b:e7:9e:8d:
         bc:3f:ab:03:78:36:a2:5a:48:0a:c2:a0:f8:9b:49:b5:66:0b:
         7d:eb:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:07 2026 by rpki-client