Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          JZ1uavj2QExqa7IbHMPy66YSOEUHrMAQJ7pUhnuNXio=
Subject key identifier:   EB:29:C6:51:71:BD:FF:DB:81:6C:2E:03:03:B6:D2:58:B2:EE:AD:60
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       7A38DF084A03E5DC00AF01C5C1E9C191EBD96EF1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0140
Signing time:             Sun 01 Mar 2026 11:12:30 +0000
Manifest this update:     Sun 01 Mar 2026 11:07:30 +0000
Manifest next update:     Mon 02 Mar 2026 14:16:30 +0000
Files and hashes:         1: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=)
                          2: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: I8u8Rpqy1CvrbNMj0zdyU4X2BzkRTRQnSmZQqHEcWuk=)
                          3: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=)
                          4: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=)
                          5: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=)
                          6: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=)
                          7: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=)
                          8: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=)
                          9: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=)
                          10: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=)
                          11: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=)
                          12: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=)
                          13: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=)
                          14: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=)
                          15: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=)
                          16: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=)
                          17: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=)
                          18: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=)
                          19: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:38:df:08:4a:03:e5:dc:00:af:01:c5:c1:e9:c1:91:eb:d9:6e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Mar  1 11:07:30 2026 GMT
            Not After : Mar  2 14:16:30 2026 GMT
        Subject: CN=EB29C65171BDFFDB816C2E0303B6D258B2EEAD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:08:d2:20:dc:7e:b9:71:b6:9a:46:1b:cd:
                    9b:28:3c:70:8b:4e:8d:da:a9:15:00:d7:69:ec:9f:
                    4d:03:8d:30:dc:65:99:33:ef:0d:2d:e8:bb:10:4a:
                    c3:3a:37:c0:99:76:3f:6a:e8:7c:e3:5c:a6:c9:79:
                    86:05:9a:b1:20:cb:14:c8:86:cf:f7:74:fe:a4:bf:
                    88:09:a4:d9:93:54:3c:a0:81:21:5c:f5:19:0b:1e:
                    fd:7e:b0:e5:4b:3a:70:3a:ab:52:10:51:ce:44:2c:
                    70:70:5b:d0:87:11:57:a9:52:1c:73:e8:7a:2d:83:
                    48:6c:58:33:9f:a5:15:56:db:c0:0b:ba:c7:f1:81:
                    7c:1b:69:83:0e:01:a4:9d:6e:ca:79:1a:23:17:b2:
                    ac:88:48:61:a7:0e:92:14:d1:5d:2e:0c:84:9c:1f:
                    db:fa:c9:51:50:37:89:b1:76:4e:e6:a5:f0:9a:3b:
                    b6:ff:3c:f4:5d:6e:ac:a4:11:b9:66:e5:b5:b6:ae:
                    2c:75:80:c9:6a:d1:f8:a4:08:2b:e8:0c:75:ae:fe:
                    c5:cf:d3:d9:5d:ba:6f:cf:d9:fd:cc:7f:50:a8:c9:
                    e0:19:a6:19:0e:9a:50:92:7b:f1:83:98:c7:5a:ea:
                    dd:f6:f8:a0:77:b0:25:d3:98:a5:6a:f3:e2:c3:6b:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:C6:51:71:BD:FF:DB:81:6C:2E:03:03:B6:D2:58:B2:EE:AD:60
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:87:c2:19:f6:98:61:e5:89:80:34:d6:f6:a2:cc:5f:e6:13:
         71:ae:42:ae:2e:b7:af:61:1d:c8:21:f7:ed:8a:58:7d:37:87:
         ac:80:3e:9c:d9:71:3a:f4:ca:22:48:53:d0:eb:35:c6:74:8e:
         7a:1b:f0:16:69:6b:cc:d8:19:d5:2e:61:d2:78:50:e0:67:42:
         fe:4c:0d:df:32:07:24:26:df:14:c7:8f:0f:0e:1c:5a:6e:8a:
         b0:4c:14:02:07:9b:2a:98:ff:24:3f:b0:97:ab:a1:48:ff:2b:
         4c:ed:cb:4c:79:b1:d5:f6:da:9a:30:43:7d:f1:f2:11:69:8c:
         5b:58:c2:9a:66:99:48:44:99:9a:84:c7:5b:97:de:c4:9b:c3:
         b5:e2:0d:d4:d9:eb:be:b5:b7:a5:e6:ad:3f:51:71:9d:55:62:
         0a:25:6a:f3:d6:c4:ec:b2:e8:16:db:33:22:aa:59:fa:b7:69:
         90:56:ad:4a:d9:e9:2f:e0:89:69:23:9b:ca:a0:41:b9:57:f0:
         db:56:e5:11:70:c2:42:88:72:69:61:50:f7:dc:b8:ab:c0:e8:
         b2:7e:14:62:fb:7c:13:49:5f:bf:db:a4:d4:ac:84:2d:57:97:
         d9:a9:6c:9d:1d:c7:00:1a:30:e1:20:97:4c:18:f9:a7:91:bb:
         87:56:08:6d
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUejjfCEoD5dwArwHFwenBkevZbvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3
MTdDOTNDQzAeFw0yNjAzMDExMTA3MzBaFw0yNjAzMDIxNDE2MzBaMDMxMTAvBgNV
BAMTKEVCMjlDNjUxNzFCREZGREI4MTZDMkUwMzAzQjZEMjU4QjJFRUFENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqgjSINx+uXG2mkYbzZsoPHCL
To3aqRUA12nsn00DjTDcZZkz7w0t6LsQSsM6N8CZdj9q6HzjXKbJeYYFmrEgyxTI
hs/3dP6kv4gJpNmTVDyggSFc9RkLHv1+sOVLOnA6q1IQUc5ELHBwW9CHEVepUhxz
6Hotg0hsWDOfpRVW28ALusfxgXwbaYMOAaSdbsp5GiMXsqyISGGnDpIU0V0uDISc
H9v6yVFQN4mxdk7mpfCaO7b/PPRdbqykEblm5bW2rix1gMlq0fikCCvoDHWu/sXP
09ldum/P2f3Mf1CoyeAZphkOmlCSe/GDmMda6t32+KB3sCXTmKVq8+LDazlbAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU6ynGUXG9/9uBbC4DA7bSWLLurWAwHwYDVR0j
BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1
RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4N2Yy
LzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHCHwhn2mGHliYA01vaizF/mE3GuQq4ut69hHcgh9+2KWH03h6yAPpzZ
cTr0yiJIU9DrNcZ0jnob8BZpa8zYGdUuYdJ4UOBnQv5MDd8yByQm3xTHjw8OHFpu
irBMFAIHmyqY/yQ/sJeroUj/K0zty0x5sdX22powQ33x8hFpjFtYwppmmUhEmZqE
x1uX3sSbw7XiDdTZ6761t6XmrT9RcZ1VYgolavPWxOyy6BbbMyKqWfq3aZBWrUrZ
6S/giWkjm8qgQblX8NtW5RFwwkKIcmlhUPfcuKvA6LJ+FGL7fBNJX7/bpNSshC1X
l9mpbJ0dxwAaMOEgl0wY+aeRu4dWCG0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:56 2026 by rpki-client