Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
File:                     0F728B914670434DCF5633E81E2B8721DF75CEB8.mft (raw, json)
Hash identifier:          9cIqcXfhRKP6jMWbdydgV8XKXAA3E2H+bl9+PHPyS54=
Subject key identifier:   1E:F4:DE:D1:8C:2F:D1:48:9B:1C:68:4C:54:98:EB:7F:87:37:5C:31
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       2D584EA63DC6C07382DB402564FB0C9AC0F4524B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
Manifest number:          0185
Signing time:             Fri 17 Apr 2026 12:29:19 +0000
Manifest this update:     Fri 17 Apr 2026 12:24:19 +0000
Manifest next update:     Sat 18 Apr 2026 14:35:19 +0000
Files and hashes:         1: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (hash: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8=)
                          2: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (hash: T/jZB6hJnvckE1oQM04wQ4G6elO8ybOC5fa2RX6LRvo=)
                          3: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (hash: yfbaeT34FbMIGlyj0tQySNH5shIHOUf5oJ7SB3fvio4=)
                          4: 326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa (hash: ar7Y00UY3ufrm6UZpfgTHbTZkbGAoNVyqXFlniq5sWY=)
                          5: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (hash: wQCSXfUitadFHqKjKe8NWt6UbMgOvdQ9vSj233OT9/o=)
                          6: 326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (hash: MtzTkzQ35m22EvkbzZHwIxUncfZ/F5ZBQnc0K5rFcKk=)
                          7: 326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (hash: WTZmUkrbRvCnq1WV0/b4J3wKCnYUZUlJ7NyI7AuLwZg=)
                          8: 326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (hash: 6S/HZN+hofz7bGbwqskKxqv7EIALWOyIB31Jd/CmpLk=)
                          9: 326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (hash: 5zkOtfMFRCYhmVW7LBhzu0cT34wr5G4zsYBbwLKUwUQ=)
                          10: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (hash: t9hcvqhwXlPB3lKs0hXk2UPtuWy2Mwkk+JEAH74z3hU=)
                          11: 0F728B914670434DCF5633E81E2B8721DF75CEB8.crl (hash: Vgl6pKw76JOr/X6PovCQbtk51pFSJN1V5/fQQUxz9tc=)
                          12: 326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (hash: o0c6z8BVXaf88Og/NHkXsPQxVXa5TEEzjiKJXKikl2E=)
                          13: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (hash: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=)
                          14: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (hash: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=)
                          15: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (hash: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw=)
                          16: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (hash: 9olAe2k5YVfRqkBWbCUyoH95HOSdUCIE1uFD0aZVTK8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:4e:a6:3d:c6:c0:73:82:db:40:25:64:fb:0c:9a:c0:f4:52:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Apr 17 12:24:19 2026 GMT
            Not After : Apr 18 14:35:19 2026 GMT
        Subject: CN=1EF4DED18C2FD1489B1C684C5498EB7F87375C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:36:84:cd:be:98:06:99:82:f9:cf:e5:30:
                    83:ec:d6:32:1f:6f:a5:ba:a9:59:e3:b5:2a:56:eb:
                    51:98:40:2d:81:58:b6:75:2e:b6:79:d0:9c:6f:b3:
                    65:4b:5c:b0:12:ad:81:43:ea:63:b4:80:82:54:75:
                    15:30:b4:d3:10:5e:6b:8c:f7:df:64:bc:7e:7c:d9:
                    f4:61:39:a5:3d:26:60:ad:84:04:83:11:a3:f4:4c:
                    44:75:ae:96:ec:3b:da:2b:75:7a:9d:47:36:31:74:
                    cf:9b:4f:d6:b9:4c:9e:04:7f:f3:e2:93:62:98:a6:
                    f6:bb:50:39:13:a9:83:57:85:f8:e5:20:20:1a:f4:
                    08:ac:26:cd:3b:2f:03:07:8b:f0:c6:8e:fb:9f:cc:
                    67:fe:52:1e:d0:20:3a:0e:32:23:45:cd:b4:44:b8:
                    4a:6c:df:0e:8e:a0:09:cd:69:98:f0:99:68:24:de:
                    3b:32:fe:34:97:2f:01:fc:3e:99:b7:f6:80:cd:ec:
                    a4:0d:93:19:6a:48:db:31:9a:a0:7e:fd:1b:bb:45:
                    1d:45:71:7a:b8:a9:57:0b:fd:ed:4d:d9:32:52:29:
                    62:86:06:af:62:e8:fd:32:f8:24:b3:c9:9c:c6:78:
                    a1:54:18:ca:23:82:74:83:88:9e:f7:f7:b3:a2:bf:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:DE:D1:8C:2F:D1:48:9B:1C:68:4C:54:98:EB:7F:87:37:5C:31
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:50:be:58:16:6f:df:0e:3d:d6:26:56:3d:00:e1:93:6a:
         99:cc:70:9a:01:69:90:df:bc:ce:b1:5e:9f:a2:5d:dd:67:e0:
         f5:9c:7c:ea:3b:85:64:c4:f1:04:2d:65:5a:02:3f:05:14:5c:
         fb:dc:d5:9c:c1:18:83:89:ba:04:d8:93:77:62:75:e1:c2:57:
         69:1e:57:7d:c3:d4:55:de:cb:79:c5:a8:2b:68:a7:dd:69:55:
         c6:d9:6f:94:d2:ec:4e:b2:a6:1c:a1:09:e2:17:68:4b:47:d2:
         9e:da:fe:f2:92:a6:78:fd:ac:cf:64:6c:2e:54:d1:ec:e1:65:
         1f:3d:d3:05:a0:1f:06:86:34:b2:b1:dc:eb:9a:07:df:5d:41:
         dc:00:d5:41:82:97:1c:9a:c7:6c:f5:e3:a8:9e:1a:77:65:b4:
         d7:7f:55:8f:b2:a2:73:5f:09:2f:04:93:c3:1e:db:44:60:58:
         04:82:b5:10:a2:60:5f:50:bf:04:b6:08:b0:2c:14:77:d1:b2:
         98:ae:dd:68:02:50:55:49:97:3d:f1:55:d1:20:f8:3d:a9:97:
         97:98:29:68:f3:cf:80:5a:90:6c:50:80:7b:b6:35:b7:44:2b:
         1e:f8:f3:26:f2:64:fe:b6:0d:d0:0b:89:50:76:59:6b:11:2d:
         5b:27:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:16:01 2026 by rpki-client