Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          h4O9h8n7IAhPMvcgq+kiuSUeBup69Nz4Y6+jgqZfStk=
Subject key identifier:   22:0A:C9:B3:AF:DD:1A:FA:94:BF:0F:4A:4B:99:76:01:A8:9C:B0:E6
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       78B2EEB8045742F8B670A76CBEE0466ACF9844BF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          017D
Signing time:             Thu 16 Apr 2026 23:22:51 +0000
Manifest this update:     Thu 16 Apr 2026 23:17:51 +0000
Manifest next update:     Sat 18 Apr 2026 02:38:51 +0000
Files and hashes:         1: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=)
                          2: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=)
                          3: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=)
                          4: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: Scrc5XfmQV9eC3p4uViaZDjb00uqBCuD2Un2A8ySdTQ=)
                          5: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=)
                          6: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=)
                          7: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=)
                          8: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=)
                          9: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=)
                          10: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=)
                          11: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=)
                          12: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=)
                          13: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=)
                          14: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=)
                          15: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=)
                          16: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=)
                          17: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=)
                          18: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=)
                          19: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b2:ee:b8:04:57:42:f8:b6:70:a7:6c:be:e0:46:6a:cf:98:44:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Apr 16 23:17:51 2026 GMT
            Not After : Apr 18 02:38:51 2026 GMT
        Subject: CN=220AC9B3AFDD1AFA94BF0F4A4B997601A89CB0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:fd:95:e4:ee:9c:fb:45:7d:fa:86:6d:b2:
                    5c:e3:78:e9:00:58:d5:c6:1e:0e:dd:04:d3:7f:2b:
                    8b:27:c5:65:45:21:00:84:c2:1b:78:96:e2:e1:7d:
                    ce:fc:90:5d:56:c6:6a:cb:51:5b:03:b4:be:c9:98:
                    09:ff:4b:38:33:fa:6f:0a:69:db:1c:8e:ae:bd:6a:
                    89:f0:0c:f4:2f:24:f4:1b:45:76:d9:fd:42:0f:fb:
                    5e:e5:e7:55:9b:df:32:eb:5d:db:de:c9:24:51:72:
                    9a:a8:7b:b0:51:74:af:19:c6:ad:9d:8a:91:d9:2b:
                    ea:f7:a6:ac:a7:df:5b:87:d2:2d:f8:4b:45:4a:df:
                    af:18:c1:3c:90:c7:85:05:fc:66:2d:d7:fe:50:d9:
                    41:e1:ae:30:63:9c:d4:f2:4c:8e:b5:42:e4:73:43:
                    a1:1e:c0:4e:f3:0e:e1:a8:18:6f:9b:b1:6f:e2:28:
                    d2:d6:4d:29:05:f8:75:9b:d0:61:b2:ae:9f:16:50:
                    1d:c6:27:9d:fd:ad:18:6e:a2:f0:53:1c:b0:6c:a8:
                    af:b3:b0:78:b1:74:c2:85:df:2f:a1:e8:b6:bf:8d:
                    0e:6e:d5:0b:3a:8b:d3:76:61:b0:fa:fd:54:69:9a:
                    a3:06:5c:c5:57:5b:c2:d7:2f:7e:54:39:66:69:e6:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:C9:B3:AF:DD:1A:FA:94:BF:0F:4A:4B:99:76:01:A8:9C:B0:E6
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:00:c2:ec:8f:aa:03:83:0c:ae:62:7d:b6:7b:77:ec:91:30:
         73:de:a7:67:28:d0:63:17:74:5b:5e:84:4c:a0:f2:ae:79:07:
         04:54:d2:e5:34:07:3d:b8:ff:cc:35:7b:5a:0d:c2:a3:c8:b1:
         ab:f4:b3:69:31:b9:da:cb:bb:b9:69:27:5c:c4:80:2d:80:98:
         02:f0:96:5f:00:77:d1:ee:2a:d2:ab:8a:1c:e5:81:13:cf:d1:
         74:bd:78:77:a9:8f:f8:5d:ac:a2:4b:fe:6b:72:a9:23:e1:54:
         88:c8:3c:8a:f6:93:df:1a:0e:47:8f:29:4e:ea:35:58:9e:18:
         b4:08:8d:48:03:a4:41:1a:29:82:00:05:1c:09:58:08:6f:8f:
         48:11:c0:c4:93:75:d0:f1:5e:65:a5:01:da:59:ad:5b:de:82:
         83:16:73:14:a5:25:50:5c:1a:26:9f:e2:c0:e1:6c:bc:44:ad:
         2e:7b:db:b0:f2:85:cf:7d:58:47:05:fa:dd:2a:df:4d:32:1c:
         2b:ce:e5:2c:ad:ea:61:e9:d5:4a:52:2c:3f:89:e6:14:3a:7d:
         d9:e5:04:42:6e:ce:8b:cc:db:79:a9:0d:dc:bd:16:b9:65:f9:
         3a:0c:f6:3a:1c:23:0b:e5:be:b5:d0:2a:dc:aa:cb:d1:90:2e:
         54:f5:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:23:16 2026 by rpki-client