Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          0g1l6grzupdIwBF7lszFpbLPI/cU6kbYbzsgBcYmvi8=
Subject key identifier:   6E:D0:4C:50:58:02:26:6A:DD:3E:EC:86:05:7D:7F:D6:5C:E1:77:CC
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       66408510639E3C6DAB0607BFBBF5332B4B150F1C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0255
Signing time:             Mon 21 Sep 2026 21:27:07 +0000
Manifest this update:     Mon 21 Sep 2026 21:22:07 +0000
Manifest next update:     Wed 23 Sep 2026 00:15:07 +0000
Files and hashes:         1: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: r9FazbYdcGWr8yxE7Xlc6COzFVG/V8HHiY4oJPUj9e0=)
                          2: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: 3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=)
                          3: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: Y1PCZcs+9Hl0rajcsrufc9z/aJxhV8gN3KKtcnKbxmc=)
                          4: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: 9FqI2AH8iG7ngg/AATvnFmVGt7pheRRWgwSiL6PjShw=)
                          5: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk=)
                          6: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=)
                          7: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=)
                          8: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: YlgR+wU+M0eLvld2xSh3zDm4tMxr1XJShIukMjED9oE=)
                          9: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=)
                          10: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=)
                          11: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=)
                          12: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: Iq8D7j+xsoj7tpHG2Rp1FT0u536kED76xFBqNqODvEw=)
                          13: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:40:85:10:63:9e:3c:6d:ab:06:07:bf:bb:f5:33:2b:4b:15:0f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Sep 21 21:22:07 2026 GMT
            Not After : Sep 23 00:15:07 2026 GMT
        Subject: CN=6ED04C505802266ADD3EEC86057D7FD65CE177CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:e7:15:38:d2:c0:b2:94:f5:3c:a4:65:be:
                    8b:e0:a9:e5:bf:e3:1c:9e:2c:5d:18:51:87:57:0a:
                    d0:63:9a:b5:2d:0c:dc:75:bb:a1:4f:1b:46:e8:b9:
                    31:f6:e9:50:01:18:e1:bb:e6:65:ad:6c:67:d9:5b:
                    bc:6c:99:76:24:8f:25:f8:90:e2:62:aa:88:a6:cd:
                    ff:9f:a5:43:53:8b:d7:f7:e1:d8:3e:15:76:56:cb:
                    36:52:7f:96:fa:b8:1b:5b:b0:1f:81:e8:2e:48:e9:
                    42:b9:c2:4e:99:ec:29:d1:d0:3f:60:3d:6c:f6:44:
                    68:33:ae:c3:49:2f:36:9f:21:1c:e9:e6:0e:d8:9f:
                    4b:b9:c5:fc:de:03:77:be:af:9b:c3:a4:66:dc:e8:
                    6e:eb:1e:9d:f0:66:16:8f:75:3b:fd:e5:cd:f1:22:
                    10:83:7c:6b:9d:98:4c:4b:11:4e:1d:79:3e:d0:6b:
                    ad:27:c4:73:3b:06:32:eb:9e:5b:bc:9c:a8:39:bc:
                    ee:5e:30:30:b1:01:6a:7a:45:da:7a:f5:67:9c:19:
                    ee:b9:26:82:b6:05:8c:8f:be:06:21:70:44:82:7c:
                    0d:3d:83:9c:a2:44:8b:83:18:0f:30:af:65:6f:14:
                    1f:c4:e0:aa:0d:5d:0b:89:dc:57:b5:72:b1:e6:ff:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D0:4C:50:58:02:26:6A:DD:3E:EC:86:05:7D:7F:D6:5C:E1:77:CC
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:de:b2:ba:71:1f:d7:30:db:74:1b:36:a6:63:fd:0a:d3:88:
         8b:a7:24:56:14:12:28:55:8b:3e:85:cb:53:e8:50:7a:aa:87:
         44:ef:e8:9a:c9:46:39:5d:a2:f1:5b:97:4a:51:8e:05:b0:ee:
         bb:22:91:72:11:ba:fe:b8:a8:0c:58:a9:93:d4:61:7c:5b:aa:
         1b:e6:74:c4:b3:f0:c9:e2:da:ca:e3:e8:ea:4d:28:34:2e:87:
         84:77:92:7e:3e:36:cc:0c:81:af:97:32:d2:0d:7b:68:c1:24:
         c7:9f:c7:97:9c:b7:44:2f:36:73:b4:e3:55:cf:c0:b9:cf:8f:
         a6:5e:51:7b:0c:b9:27:87:83:f5:e8:4e:2f:e2:b5:e2:3e:0f:
         6b:c4:ab:0a:8e:d9:90:ed:ff:02:3b:ba:4f:71:9f:f9:ae:e0:
         dc:05:39:11:61:c6:ae:4f:f4:13:e7:da:b8:c7:f1:f8:f1:4e:
         2a:3e:48:b8:10:36:84:7c:9c:e0:0b:54:aa:e3:08:17:23:8b:
         cc:b6:1f:dd:11:b6:5e:ac:3a:2c:a8:cb:1c:fa:a7:9f:72:db:
         00:05:5e:de:59:aa:6d:55:fc:4f:cf:e9:04:f7:4a:32:61:98:
         6a:79:bc:8e:78:45:01:be:62:62:36:4e:a5:08:f2:69:ab:65:
         f3:01:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:46:23 2026 by rpki-client