Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File:                     3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier:          7SOPuyD7QDQBNrBF9a1fZTt9SqfuZouwoeLxnp2aTak=
Subject key identifier:   62:EB:20:04:A7:47:54:8A:95:3B:52:E9:D2:60:C6:A6:C2:BC:ED:D0
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer:       /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial:       6576C00E6E105171B8CD50C18AF195E82B867090
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number:          011A
Signing time:             Tue 28 Jul 2026 23:55:33 +0000
Manifest this update:     Tue 28 Jul 2026 23:50:33 +0000
Manifest next update:     Thu 30 Jul 2026 02:04:33 +0000
Files and hashes:         1: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
                          2: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: 549cxdUONBclzUV+D70NtcKG1e7aMzOKROWn0CYajCg=)
                          3: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
                          4: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
                          5: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
                          6: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
                          7: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:c0:0e:6e:10:51:71:b8:cd:50:c1:8a:f1:95:e8:2b:86:70:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
        Validity
            Not Before: Jul 28 23:50:33 2026 GMT
            Not After : Jul 30 02:04:33 2026 GMT
        Subject: CN=62EB2004A747548A953B52E9D260C6A6C2BCEDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:c6:a3:2d:a2:de:20:20:ea:ab:80:8d:a6:
                    8c:a3:67:15:31:e8:4c:db:80:9f:cd:6e:41:3b:cc:
                    43:14:ff:41:3f:a5:f6:64:13:de:60:3a:bd:d0:19:
                    6f:ac:e2:ba:aa:1b:d4:b8:a3:b4:1d:37:23:8c:59:
                    53:86:77:6b:3d:38:77:34:68:ef:15:a9:2a:57:91:
                    b8:27:73:d9:fb:8e:09:4c:4f:34:73:44:ea:9e:6a:
                    b9:c0:58:58:98:de:3e:70:26:14:21:ef:52:45:e3:
                    f7:06:ee:0e:7c:43:30:2e:01:80:3b:8f:2c:e8:3f:
                    77:6c:05:24:4d:04:20:51:a2:c1:54:84:f8:18:71:
                    40:ce:26:70:08:7e:04:08:a4:84:fa:b3:5f:db:ac:
                    4e:c8:95:5b:00:e3:70:9b:ee:d0:12:88:ca:75:4b:
                    83:9a:7b:6a:47:67:7a:38:b0:4b:e1:c2:c1:c2:cf:
                    32:bd:6b:89:ed:a3:dd:d1:b5:12:de:b6:1b:ff:ab:
                    19:97:6b:7b:d2:79:48:94:60:f9:84:b3:e8:7a:75:
                    2b:73:1b:31:8a:6a:32:dc:7a:21:1d:6b:32:92:87:
                    fe:a6:f0:45:7c:8b:d3:7b:44:d4:2f:0d:f8:3f:4e:
                    38:64:75:a5:1f:28:c3:1f:dd:c1:f4:92:55:c6:1f:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:20:04:A7:47:54:8A:95:3B:52:E9:D2:60:C6:A6:C2:BC:ED:D0
            X509v3 Authority Key Identifier:
                keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:6c:7d:0a:1b:a2:0a:58:03:81:64:8d:f1:e1:ac:a6:32:
         d5:56:73:e4:5c:34:88:14:74:25:91:25:4d:a9:0b:03:31:93:
         26:01:90:d8:a3:84:b3:7b:23:b1:10:95:80:e2:61:a2:a4:c6:
         45:eb:71:d6:2e:e9:68:6e:a6:ab:54:fc:0b:ce:13:86:94:f5:
         1a:a6:76:bd:6d:d4:ce:c0:a6:ab:b4:60:7d:75:cd:fb:54:a0:
         d9:7c:d8:40:c4:30:f3:f5:84:bb:3c:90:a2:16:b9:00:86:02:
         68:d2:cd:1f:90:fa:56:61:8b:bd:85:05:78:aa:0d:a6:de:ce:
         3c:37:66:42:a4:2d:ee:cc:89:4f:08:f3:e3:85:e4:9a:86:55:
         77:f5:50:38:0b:3f:61:fb:f3:68:6a:cc:37:f6:ed:7a:57:60:
         2b:16:96:50:ec:75:c5:a5:b9:85:8b:65:3d:b6:62:3c:4a:dc:
         db:a6:01:79:00:1e:a5:d3:1b:a2:89:9a:56:1a:df:18:bd:df:
         1a:87:1b:5f:83:ff:58:7e:93:c9:de:c0:6b:84:af:f1:ea:37:
         46:9c:d7:df:70:65:d4:db:ae:d2:5f:7b:40:b7:b0:07:8c:0e:
         79:a1:cf:71:d3:08:b3:54:7c:2a:66:50:21:06:56:34:42:1d:
         29:39:41:4c
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUZXbADm4QUXG4zVDBivGV6CuGcJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3
NkJCMDI3NzAeFw0yNjA3MjgyMzUwMzNaFw0yNjA3MzAwMjA0MzNaMDMxMTAvBgNV
BAMTKDYyRUIyMDA0QTc0NzU0OEE5NTNCNTJFOUQyNjBDNkE2QzJCQ0VERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNsajLaLeICDqq4CNpoyjZxUx
6EzbgJ/NbkE7zEMU/0E/pfZkE95gOr3QGW+s4rqqG9S4o7QdNyOMWVOGd2s9OHc0
aO8VqSpXkbgnc9n7jglMTzRzROqearnAWFiY3j5wJhQh71JF4/cG7g58QzAuAYA7
jyzoP3dsBSRNBCBRosFUhPgYcUDOJnAIfgQIpIT6s1/brE7IlVsA43Cb7tASiMp1
S4Oae2pHZ3o4sEvhwsHCzzK9a4nto93RtRLethv/qxmXa3vSeUiUYPmEs+h6dStz
GzGKajLceiEdazKSh/6m8EV8i9N7RNQvDfg/TjhkdaUfKMMf3cH0klXGHyXTAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUYusgBKdHVIqVO1Lp0mDGpsK87dAwHwYDVR0j
BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw
QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk
LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABzqbH0KG6IKWAOBZI3x4aymMtVWc+RcNIgUdCWRJU2pCwMxkyYBkNij
hLN7I7EQlYDiYaKkxkXrcdYu6WhupqtU/AvOE4aU9Rqmdr1t1M7Apqu0YH11zftU
oNl82EDEMPP1hLs8kKIWuQCGAmjSzR+Q+lZhi72FBXiqDabezjw3ZkKkLe7MiU8I
8+OF5JqGVXf1UDgLP2H782hqzDf27XpXYCsWllDsdcWluYWLZT22YjxK3NumAXkA
HqXTG6KJmlYa3xi93xqHG1+D/1h+k8newGuEr/HqN0ac199wZdTbrtJfe0C3sAeM
Dnmhz3HTCLNUfCpmUCEGVjRCHSk5QUw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:07 2026 by rpki-client