Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
File:                     309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json)
Hash identifier:          HE4TNLFjmxdcvYZD2IJWfzPbersHnybqs+/idIEsARI=
Subject key identifier:   71:BB:86:A9:91:C9:E4:1A:DA:C4:DC:89:AE:61:AE:6B:97:74:A3:54
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       28514B67CE14749F981E77F4FB33B444B9A64051
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
Manifest number:          0175
Signing time:             Mon 16 Jun 2025 10:38:18 +0000
Manifest this update:     Mon 16 Jun 2025 10:33:18 +0000
Manifest next update:     Tue 17 Jun 2025 13:05:18 +0000
Files and hashes:         1: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=)
                          2: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=)
                          3: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=)
                          4: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=)
                          5: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=)
                          6: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=)
                          7: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=)
                          8: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=)
                          9: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=)
                          10: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=)
                          11: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=)
                          12: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: zcyIpA1s6d5XiKdGxntRVZAm29u5I+IGPxC1exp+lDY=)
                          13: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:51:4b:67:ce:14:74:9f:98:1e:77:f4:fb:33:b4:44:b9:a6:40:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Jun 16 10:33:18 2025 GMT
            Not After : Jun 17 13:05:18 2025 GMT
        Subject: CN=71BB86A991C9E41ADAC4DC89AE61AE6B9774A354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:47:9c:c3:0c:13:ac:b4:49:cc:b7:8d:40:
                    eb:53:6e:df:a1:84:bc:bf:74:53:05:24:61:50:51:
                    f7:e1:6f:d6:73:19:c3:50:28:25:56:3c:74:e1:41:
                    09:44:dd:80:cc:c9:d7:16:3f:03:f4:8b:32:a5:5e:
                    78:9c:0f:0e:f0:0d:78:a0:eb:1e:c0:d3:ca:63:7f:
                    4d:ea:28:c8:de:f5:31:6a:01:90:36:dd:73:e9:4b:
                    ad:11:82:12:f9:e9:30:ea:58:01:23:b9:9c:ce:97:
                    7a:32:30:bb:62:f8:9f:a6:fe:30:94:c0:8a:23:d1:
                    16:1a:62:bb:a1:1d:53:85:5d:1e:1d:b4:10:fd:30:
                    b4:92:1a:49:cc:44:fb:dd:04:13:3e:a2:18:c8:b6:
                    19:ae:ca:9b:3e:0d:da:fb:c5:2c:ec:71:de:3c:ba:
                    d4:e8:a8:18:6f:d5:77:f3:db:f7:6f:17:4c:55:c7:
                    ba:49:1c:bb:4e:e9:98:ce:22:a8:55:d9:7e:44:de:
                    c2:de:80:72:7c:28:c8:52:88:15:d9:c9:6e:44:b3:
                    2a:9b:af:24:46:d7:53:11:38:e7:49:dc:11:1e:eb:
                    1a:18:0e:07:05:ba:d5:64:f3:41:d0:01:54:4c:e7:
                    e2:8c:8d:d4:92:0d:ec:b0:af:ac:87:2e:b4:65:fa:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:86:A9:91:C9:E4:1A:DA:C4:DC:89:AE:61:AE:6B:97:74:A3:54
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:df:d2:e5:99:6e:93:1d:06:b0:80:59:0e:20:f8:fa:63:
         27:2d:f6:ab:85:93:21:0f:c6:1e:84:e6:55:b2:fa:a0:86:89:
         2a:96:29:d8:45:bf:7c:d5:c8:70:8f:1c:71:ac:5e:4e:ef:40:
         99:96:a0:72:7c:80:07:7a:0a:76:90:ec:f8:e4:f6:1d:f9:c5:
         2c:13:22:c0:a5:93:0a:46:83:b5:79:07:0d:9a:f9:f6:37:12:
         d6:60:ab:99:05:a1:b7:f0:a0:92:62:58:0f:5d:ca:8f:81:59:
         12:b6:67:d1:72:b5:78:69:9a:05:40:dc:92:45:64:af:23:6d:
         6f:79:fb:a6:7d:de:50:92:40:9b:0d:64:f1:c7:5d:a6:c1:76:
         a6:45:62:4f:87:f8:ba:8a:a1:fe:6b:de:93:9d:c9:cb:43:69:
         07:02:0d:66:bc:22:cd:b0:bd:29:d8:46:67:2c:c7:e2:7a:0b:
         61:64:7e:92:97:5f:45:dc:d8:e1:69:97:86:60:c4:3b:8a:5c:
         ec:0d:db:8e:28:b8:89:18:7e:f4:0d:c7:d7:24:b5:55:34:ea:
         c3:9d:eb:f8:4b:b3:2b:8d:07:0e:05:76:d7:9e:ef:8e:64:bf:
         91:c1:f5:de:a8:2c:dd:ad:67:07:6e:bc:6f:35:bb:a3:9b:f9:
         e7:a4:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:50 2025 by rpki-client