Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          u/lOlSt6jYGRQMvXa0WIaWcZzaK5oKdLwQUw9BorcIM=
Subject key identifier:   5B:B9:40:4A:92:5A:47:7E:ED:03:C1:92:05:C6:24:5F:02:8E:AD:27
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       551271919A28548F127AD09590C82B4592004801
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          2C
Signing time:             Mon 04 Aug 2025 20:17:31 +0000
Manifest this update:     Mon 04 Aug 2025 20:12:31 +0000
Manifest next update:     Tue 05 Aug 2025 23:19:31 +0000
Files and hashes:         1: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
                          2: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          3: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
                          4: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: ocaBl8xzCzHwBvDpeR/mrupczM8ZQxyRrSxUv0Ci+5Q=)
                          5: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          6: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          7: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          8: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          9: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          10: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          11: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
                          12: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          13: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          14: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          15: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          16: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          17: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          18: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          19: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          20: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
                          21: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          22: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          23: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          24: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
                          25: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
                          26: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 23:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:12:71:91:9a:28:54:8f:12:7a:d0:95:90:c8:2b:45:92:00:48:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Aug  4 20:12:31 2025 GMT
            Not After : Aug  5 23:19:31 2025 GMT
        Subject: CN=5BB9404A925A477EED03C19205C6245F028EAD27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:96:56:70:1b:a4:d1:32:26:9d:ce:eb:25:
                    17:12:be:9b:d8:f0:f6:ef:51:ac:da:3e:9d:2e:fa:
                    83:77:d0:e2:da:67:f4:f4:71:03:52:6d:b0:5b:14:
                    62:04:24:38:69:8f:34:7d:2d:af:3d:70:e3:93:c1:
                    b7:7e:5a:e7:6d:1d:98:c8:60:0a:a9:b5:df:85:7f:
                    ad:16:6a:dd:b9:f3:3f:6e:63:1d:78:63:4f:ab:64:
                    ed:51:6d:ac:41:8c:f2:e7:f0:26:5b:d0:93:d5:99:
                    7a:24:a6:f3:54:91:2c:7b:77:26:f6:91:aa:3b:b0:
                    da:09:75:ae:76:2e:ce:7f:cb:1e:5d:fe:49:9f:3f:
                    10:17:ff:fe:83:c6:79:39:87:de:83:e6:23:cb:97:
                    d6:2d:ed:7d:6d:b8:cd:8b:e1:d8:7e:5e:99:65:20:
                    f9:8a:48:7d:f2:94:ea:02:6a:29:9e:e6:d6:04:c6:
                    f1:ea:30:f4:ed:12:eb:e7:c5:98:ca:8d:9f:d4:23:
                    b3:15:5c:f0:df:a2:50:10:7f:02:50:a3:35:d0:13:
                    77:7e:35:8d:b3:e4:76:26:96:d9:44:ad:7e:8b:87:
                    8d:fc:a0:72:eb:6c:0a:87:57:33:b2:1e:27:4c:c1:
                    3c:4f:69:6e:46:a5:47:fe:35:83:6a:87:eb:84:88:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:40:4A:92:5A:47:7E:ED:03:C1:92:05:C6:24:5F:02:8E:AD:27
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:18:d4:a6:d0:8a:da:7b:26:db:d6:b2:7d:5c:f7:9c:61:
         9e:8c:25:2d:65:6a:f1:c6:6e:98:9d:13:51:7c:36:cd:c2:f0:
         a2:71:c7:9f:18:e5:d7:e3:da:9d:3b:0c:2a:e2:d4:e0:00:a6:
         20:a7:61:97:be:f2:8b:71:1d:3d:b1:35:1c:f4:d4:57:a8:ce:
         b2:5e:9f:5d:b1:5b:82:eb:51:fb:6a:40:26:23:d6:9a:b8:bc:
         d7:4d:e1:2f:19:56:33:a4:c0:b7:3b:ad:65:cd:01:29:ff:62:
         70:dd:da:3c:54:31:88:2d:8b:b9:d5:f4:08:11:a1:7d:a3:5c:
         a4:95:8e:3d:b7:a6:f6:3b:cb:78:7f:81:2a:db:49:9d:7e:d7:
         90:62:db:5a:60:4b:45:fd:1b:d2:a8:b8:f4:31:9c:f9:7e:00:
         c7:af:a6:1d:fa:bb:c2:96:53:9d:fd:4b:f6:fd:11:3a:4c:76:
         23:43:0f:9d:2a:6f:e4:f0:60:e9:2c:e4:ec:cf:91:5e:81:48:
         8f:ce:51:db:8b:aa:4c:ec:1f:d1:d2:1d:1b:6d:7c:f5:18:79:
         81:fe:9a:86:66:92:42:7c:44:a6:bf:bc:1e:9b:0e:ee:27:68:
         76:61:bc:31:fc:7d:88:a9:ab:a8:c4:87:f2:45:e4:a0:ec:05:
         09:99:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:26:06 2025 by rpki-client