Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
File:                     A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft (raw, json)
Hash identifier:          3Ho1v4DsSXXn2XIT/Ma418M6NJTU8LErL8s8dj7KFTI=
Subject key identifier:   C8:FD:1D:7E:54:27:8B:32:07:89:70:3E:C9:77:44:B0:25:75:D0:50
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       7B3FE9B824CA0D4F51C338941BC6E0A0D7BCC78C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
Manifest number:          01E7
Signing time:             Wed 07 May 2025 04:39:26 +0000
Manifest this update:     Wed 07 May 2025 04:34:26 +0000
Manifest next update:     Thu 08 May 2025 08:27:26 +0000
Files and hashes:         1: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl (hash: jpRroyABQCTj/0lsiTCRHkUnD6cTXTcDNleuAg5HhOU=)
                          2: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: jseZnQDpxM3OGEtPFiaXE9ESnwodw6BGWg1duSXkRMU=)
                          3: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: dF4lz4b9uILyKiQv5ty5oA8TE3niW+o+umdhEtVVLnc=)
                          4: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: h7T/IBKgZ+g5LGDA1fTNWZlyWBtya6uHa3uTkoL3u98=)
                          5: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: qeKhwSxBv73kgRxW6Pg8dImsSOEmPLh3wTLxedRpHZA=)
                          6: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: rsDe4gVLOQQ6T2XmrS2vrQjsrzLl/iWq5oMRojuFXSU=)
                          7: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: KjbRTlOn0pUH9so2EM+bXyKGqqTMvpmSO7usB8M9zXI=)
                          8: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: CnAZ047tmrpRp78Hj9O+EaIJNOL4YEi+nEB/HQghDBU=)
                          9: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA=)
                          10: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: hAG8kF083sc71HTpZHIm9pVONzb5X6Kq/j0og2972Og=)
                          11: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5sfxFWfTleTq60HeudpGR9w7CPONeSZsJgkPlM018cs=)
                          12: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: S6jgMc6rG0ZsUATxPWt7SrTUxQY234zCLU7DInT6Xy8=)
                          13: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: HKmgP2ypG6wwvWOLbdtRfnpQpQFEpIJ3B8Rmypw0n+E=)
                          14: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: bPQ1HBzdP13bWbYEcnsttiFohjw+mT+amFg13lB095M=)
                          15: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: mOOzHywYUf8zjI9dUNsK9l53AJEq7KLoJcvQC7/t8eg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3f:e9:b8:24:ca:0d:4f:51:c3:38:94:1b:c6:e0:a0:d7:bc:c7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: May  7 04:34:26 2025 GMT
            Not After : May  8 08:27:26 2025 GMT
        Subject: CN=C8FD1D7E54278B320789703EC97744B02575D050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:3c:98:d1:85:e3:64:46:0d:0e:70:94:25:
                    cc:d2:dd:81:69:6c:ac:84:78:5c:77:c4:ff:33:5d:
                    0f:83:b2:85:d4:69:c1:53:a5:0d:ce:6e:7f:8e:ca:
                    8a:44:ec:e1:b4:7c:7d:a8:22:e4:d2:a9:d0:70:3b:
                    35:85:a4:60:6e:cc:3b:7f:ce:46:98:ba:ae:4d:d9:
                    5f:55:ae:4d:cc:91:9d:2b:5f:ee:8c:86:f0:f0:24:
                    c1:74:26:62:3c:bc:b7:13:f2:34:69:a7:ee:61:65:
                    15:a6:b9:0a:64:16:9d:57:bb:ad:7c:6d:52:79:0a:
                    0c:89:fe:40:a9:77:f2:6e:0d:d4:e0:f9:38:58:2c:
                    46:2b:41:8e:cf:f4:f9:8b:9b:8f:1c:85:64:7e:6e:
                    4c:67:c5:69:d1:06:d6:60:f5:d2:43:b3:24:b8:d6:
                    13:05:51:26:8c:fd:09:3c:bf:df:47:2a:71:9a:f7:
                    07:e0:67:fb:4c:7f:94:b2:b4:0b:a1:09:f6:02:eb:
                    0f:4a:1c:83:73:ac:52:fc:da:b4:65:fc:7b:bd:5b:
                    1f:4e:5c:ce:01:80:28:0f:6b:2d:22:6a:28:d7:ad:
                    02:39:fc:76:ba:ec:7c:5a:fe:bb:39:c5:6d:4c:d2:
                    93:a9:22:b7:8b:c5:17:48:64:0e:43:f6:e2:26:24:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:1D:7E:54:27:8B:32:07:89:70:3E:C9:77:44:B0:25:75:D0:50
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:fe:15:d4:71:74:d9:f9:e3:9f:dc:fb:fb:0d:29:e2:b0:
         44:72:5d:ae:ec:97:7c:02:1f:e0:89:6e:b4:ae:47:66:2f:a7:
         13:44:e4:ad:2e:64:f9:53:cf:a1:b1:a4:bd:59:88:e1:4d:6e:
         73:cf:e1:9e:be:fa:43:2a:4f:9e:4f:74:1b:40:df:f2:17:2b:
         87:47:fe:75:2b:9f:6a:45:c3:d2:00:2b:0a:32:9d:fa:3e:41:
         e8:6e:97:d3:5b:60:d6:47:be:0e:a3:8e:61:e9:be:49:6e:81:
         f0:20:1a:4d:ba:16:3f:06:93:d5:8f:4b:74:4a:68:ce:97:87:
         1f:47:83:ac:4c:ad:cc:e4:87:fd:3f:4a:1d:99:3b:bb:ae:48:
         10:81:63:5e:05:e7:d7:23:d8:80:5e:8b:00:27:c0:14:47:4c:
         2f:d2:46:67:a8:59:bb:7a:66:f1:53:b4:c1:0e:57:de:ec:95:
         a6:8f:61:5b:4d:5f:da:48:31:3f:9b:0e:8b:bf:42:92:f8:fe:
         64:ff:e8:68:39:07:ea:86:86:c2:ff:07:39:73:9c:07:e6:3e:
         5a:ad:cb:ec:72:1f:c2:b6:f2:4e:2e:91:0e:f0:af:3c:70:51:
         ec:32:26:6d:4f:3a:2c:43:7b:95:57:57:28:fe:89:ed:ff:c3:
         27:c7:69:de
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUez/puCTKDU9RwziUG8bgoNe8x4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5
NzE5OEJGRDAeFw0yNTA1MDcwNDM0MjZaFw0yNTA1MDgwODI3MjZaMDMxMTAvBgNV
BAMTKEM4RkQxRDdFNTQyNzhCMzIwNzg5NzAzRUM5Nzc0NEIwMjU3NUQwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVDyY0YXjZEYNDnCUJczS3YFp
bKyEeFx3xP8zXQ+DsoXUacFTpQ3Obn+OyopE7OG0fH2oIuTSqdBwOzWFpGBuzDt/
zkaYuq5N2V9Vrk3MkZ0rX+6MhvDwJMF0JmI8vLcT8jRpp+5hZRWmuQpkFp1Xu618
bVJ5CgyJ/kCpd/JuDdTg+ThYLEYrQY7P9PmLm48chWR+bkxnxWnRBtZg9dJDsyS4
1hMFUSaM/Qk8v99HKnGa9wfgZ/tMf5SytAuhCfYC6w9KHINzrFL82rRl/Hu9Wx9O
XM4BgCgPay0iaijXrQI5/Ha67Hxa/rs5xW1M0pOpIreLxRdIZA5D9uImJO/jAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUyP0dflQnizIHiXA+yXdEsCV10FAwHwYDVR0j
BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5
QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz
LzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE0J/hXUcXTZ+eOf3Pv7DSnisERyXa7sl3wCH+CJbrSuR2YvpxNE5K0u
ZPlTz6GxpL1ZiOFNbnPP4Z6++kMqT55PdBtA3/IXK4dH/nUrn2pFw9IAKwoynfo+
Qehul9NbYNZHvg6jjmHpvklugfAgGk26Fj8Gk9WPS3RKaM6Xhx9Hg6xMrczkh/0/
Sh2ZO7uuSBCBY14F59cj2IBeiwAnwBRHTC/SRmeoWbt6ZvFTtMEOV97slaaPYVtN
X9pIMT+bDou/QpL4/mT/6Gg5B+qGhsL/BzlznAfmPlqty+xyH8K28k4ukQ7wrzxw
UewyJm1POixDe5VXVyj+ie3/wyfHad4=
-----END CERTIFICATE-----
Generated at Wed May 7 14:44:04 2025 by rpki-client