Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          +Ji0z5f9Awerjqn2uf7Xqu7D29rPLARXTnGHtvXvajQ=
Subject key identifier:   DD:41:F3:E7:2E:84:44:89:29:58:9C:AA:18:BA:1B:F3:FD:51:B9:1D
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       3B53179119025031261CC4292AD3FE4BE601DA7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          2B
Signing time:             Mon 04 Aug 2025 22:07:19 +0000
Manifest this update:     Mon 04 Aug 2025 22:02:19 +0000
Manifest next update:     Wed 06 Aug 2025 01:55:19 +0000
Files and hashes:         1: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: J26CNRoGCzBDI1rRvPQQjcRz4iKTA4F06JGjnrwTBjo=)
                          2: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=)
                          3: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=)
                          4: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=)
                          5: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=)
                          6: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=)
                          7: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=)
                          8: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=)
                          9: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=)
                          10: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=)
                          11: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=)
                          12: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=)
                          13: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=)
                          14: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=)
                          15: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=)
                          16: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=)
                          17: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=)
                          18: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=)
                          19: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:53:17:91:19:02:50:31:26:1c:c4:29:2a:d3:fe:4b:e6:01:da:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Aug  4 22:02:19 2025 GMT
            Not After : Aug  6 01:55:19 2025 GMT
        Subject: CN=DD41F3E72E84448929589CAA18BA1BF3FD51B91D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:75:50:ba:7a:b8:79:f2:51:cb:67:5a:f5:
                    dd:76:20:90:fe:3b:26:50:3c:f1:d2:f5:94:07:89:
                    90:b9:ab:46:4e:40:1d:66:9c:b4:01:0d:3c:b3:41:
                    ed:ee:3d:5c:3d:a3:b6:c6:9a:12:6b:e8:a6:7a:83:
                    c5:71:8d:f9:25:28:a6:7f:15:b2:b1:33:9e:4b:6a:
                    ac:a1:fe:2e:64:61:4b:99:a7:6e:26:e2:a0:de:9a:
                    74:af:2f:a5:e0:55:2b:83:55:ec:69:9a:e0:ad:be:
                    b5:1e:c0:b5:15:0b:d1:82:59:b7:e6:4e:69:5c:f5:
                    a4:dc:aa:ec:17:3a:29:17:8c:1b:09:a6:34:f3:a2:
                    83:f7:82:7e:51:b0:ce:7a:f2:20:9c:56:b8:b2:dc:
                    2b:9b:b4:db:36:8e:49:eb:6b:fe:df:fc:3a:69:68:
                    92:73:0a:e3:cf:23:73:6a:56:7c:c8:22:1f:b7:11:
                    ed:e0:80:f2:2a:62:39:8e:e6:59:de:e1:0f:65:6a:
                    ec:0b:54:b2:3d:9f:7e:f8:0d:44:dd:2a:9f:ab:8c:
                    3f:d4:b6:61:62:e7:10:a4:9f:5d:09:78:d5:04:31:
                    72:23:ff:f6:82:b8:fc:81:8c:42:63:1d:46:4c:77:
                    8c:13:7e:3c:94:13:c8:c4:9a:9a:23:40:f7:a9:e1:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:F3:E7:2E:84:44:89:29:58:9C:AA:18:BA:1B:F3:FD:51:B9:1D
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:16:c7:b6:f6:04:a4:1f:13:b6:f9:62:05:6a:51:24:3f:
         e8:ae:cd:1b:db:8f:b7:e3:fe:79:55:ce:e5:f3:c6:1b:7b:b0:
         cf:93:5b:97:20:7a:44:26:b1:52:32:62:81:e3:2f:f6:b2:54:
         ae:04:75:0d:da:56:d8:d1:1c:3e:60:de:86:23:30:a4:f8:22:
         96:60:ec:f9:3d:55:81:23:91:29:0a:8b:83:d6:e5:51:b0:36:
         84:c9:fe:92:93:21:67:6b:f3:da:2f:09:8a:66:5a:17:c5:68:
         49:dc:4d:ec:d5:d8:f5:4b:a8:3b:10:77:1f:75:e4:76:bf:8f:
         4d:5e:f1:c7:a2:bc:5c:82:5f:4e:e1:88:40:17:46:db:20:f8:
         88:7e:d8:ad:4a:73:a1:87:43:4d:c3:c4:f7:54:d7:42:8a:82:
         da:57:7d:bb:25:b4:25:b2:b1:5a:f3:df:6f:80:e6:ad:31:ec:
         3f:2e:94:5e:73:15:2b:7c:67:b0:1e:df:90:e3:97:a2:f6:b5:
         c2:b7:14:e2:de:1b:40:d8:91:b1:71:8f:e6:74:0f:57:3d:f7:
         bb:4d:50:5f:61:1f:7e:6c:46:0e:0d:86:f4:2c:82:87:c4:64:
         d1:a8:61:97:c0:19:88:0e:6d:63:db:3a:49:5b:07:25:63:ef:
         29:b3:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:55 2025 by rpki-client