Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File:                     3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier:          DwTXEDvxm0fgvd7xXzPfvfBJ79osxKR68jQQalvRdvI=
Subject key identifier:   B2:17:55:DE:60:3D:B7:19:7C:BA:D4:F7:ED:96:A9:BC:3D:1C:0A:B0
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer:       /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial:       05BD29196C8A6E6DB79F748E4CB5AB382F85A035
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number:          015D
Signing time:             Mon 21 Sep 2026 15:18:58 +0000
Manifest this update:     Mon 21 Sep 2026 15:13:58 +0000
Manifest next update:     Tue 22 Sep 2026 16:34:58 +0000
Files and hashes:         1: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
                          2: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
                          3: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
                          4: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
                          5: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
                          6: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
                          7: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: B2013dGwbUYyKuMTFhugp7LfddA7Lf3DBL6rDBR2MUU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:29:19:6c:8a:6e:6d:b7:9f:74:8e:4c:b5:ab:38:2f:85:a0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
        Validity
            Not Before: Sep 21 15:13:58 2026 GMT
            Not After : Sep 22 16:34:58 2026 GMT
        Subject: CN=B21755DE603DB7197CBAD4F7ED96A9BC3D1C0AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:75:cc:cf:7d:e9:05:61:fc:ca:a1:ef:a3:
                    15:8c:fc:ed:b5:51:b8:b2:de:53:60:d3:cb:83:63:
                    f7:d8:79:ec:5f:d6:86:c7:13:21:6d:b5:55:52:9f:
                    be:4f:41:f8:96:40:5b:e2:97:62:46:fb:bf:9a:8d:
                    62:43:68:a3:d3:46:de:db:bd:a3:8d:4f:70:75:4d:
                    04:4e:df:1a:a8:d3:d2:76:18:39:a0:90:db:4d:19:
                    0a:95:55:d1:4d:5b:53:d8:6b:ad:25:ba:32:de:75:
                    ae:b0:8c:10:5c:48:f0:19:78:33:43:b7:0e:ba:22:
                    47:b2:6d:13:31:23:ed:e0:08:f9:d0:02:45:85:09:
                    99:c7:88:fd:e1:03:2d:19:a2:9b:08:19:a5:27:ca:
                    1b:d7:81:6a:bd:8b:5b:8e:3f:7c:0c:48:2a:10:6e:
                    64:dc:cc:53:8c:38:0f:e3:b7:14:1f:37:f7:6a:38:
                    92:4e:d1:57:ea:8b:9d:24:47:04:f4:0b:d6:31:e4:
                    6b:d1:14:e8:85:51:38:55:b8:c3:6f:92:6f:12:c9:
                    2b:98:8f:7c:77:af:35:04:0c:a1:67:90:11:bd:6a:
                    b0:51:f3:ac:23:92:89:95:c1:77:bd:9a:76:e5:da:
                    7d:38:6d:9d:e4:28:c6:b2:36:86:2f:71:0b:67:a7:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:17:55:DE:60:3D:B7:19:7C:BA:D4:F7:ED:96:A9:BC:3D:1C:0A:B0
            X509v3 Authority Key Identifier:
                keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:8b:7d:fe:0f:94:9c:73:ab:f9:36:e8:2f:32:f4:ed:0a:3c:
         2c:cb:11:f4:97:f7:41:52:66:1e:aa:06:01:d5:14:d0:0f:b0:
         8a:b5:e4:fe:e9:ed:88:b4:78:02:1e:1b:97:14:b8:49:6b:8c:
         72:eb:f1:b2:15:ab:2a:a1:2f:fe:90:bd:29:54:6f:dc:1e:69:
         21:1c:c2:22:6f:f9:c7:54:d6:c6:cf:66:f4:cd:f9:d7:56:96:
         af:b0:2f:6a:b5:3e:5e:13:e1:06:9a:14:9e:a0:42:72:38:dc:
         1e:e5:6b:2f:96:38:cd:dd:c4:57:22:64:8f:f7:27:cc:e7:15:
         ac:df:69:76:4e:2f:e4:67:f0:e0:f8:e3:f0:24:98:94:c2:3f:
         b6:57:c8:4d:f1:f8:2e:16:c5:17:35:45:2b:1b:d7:6b:c9:f5:
         d6:9f:dc:eb:cc:b9:f1:de:d2:29:0e:86:ed:34:8f:10:15:69:
         48:da:d9:1a:63:63:87:79:19:1a:5e:00:46:b2:9f:a8:4a:c7:
         db:f4:d8:a7:3c:1b:ea:ab:5e:92:58:4c:0b:81:16:09:33:e6:
         2f:74:e3:5e:91:5e:7c:dd:1e:ea:f6:e3:54:19:99:50:03:a5:
         eb:e0:61:13:5f:83:c7:16:31:b9:28:9b:0c:b0:0b:47:bb:ad:
         15:a5:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----