Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          d5YsQ1CDKx2x0eGbldLzekOgwG6GarZXRg77j9Xc7BI=
Subject key identifier:   45:81:3C:D4:CE:7C:76:CE:1A:EF:9E:E6:B2:33:83:66:B0:CD:43:EA
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       65DD62C9AF2D8E3711ECDC3079DECDE8FFD5B4B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          0260
Signing time:             Mon 28 Sep 2026 01:39:10 +0000
Manifest this update:     Mon 28 Sep 2026 01:34:10 +0000
Manifest next update:     Tue 29 Sep 2026 05:17:10 +0000
Files and hashes:         1: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=)
                          2: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: qXzAtd8D2DJwzcUhLNYNl/tXZOUKVl/yvZK64cjJKyI=)
                          3: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=)
                          4: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=)
                          5: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=)
                          6: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: 42QP3bM1peKLJfg3RP+k4qaXbwQMIsZ/iuuhjSMe55I=)
                          7: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=)
                          8: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=)
                          9: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=)
                          10: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=)
                          11: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=)
                          12: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: 1GdKwaiZZMUPaKMrZsRjBpqXP8X/viR8NTU0VBdDiIs=)
                          13: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 05:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dd:62:c9:af:2d:8e:37:11:ec:dc:30:79:de:cd:e8:ff:d5:b4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Sep 28 01:34:10 2026 GMT
            Not After : Sep 29 05:17:10 2026 GMT
        Subject: CN=45813CD4CE7C76CE1AEF9EE6B2338366B0CD43EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:8f:73:72:74:20:f9:c7:17:2f:95:35:97:
                    ad:8c:5b:fb:5d:97:0d:b7:86:41:67:1e:d6:67:b6:
                    7c:d2:28:9e:44:7b:10:75:89:6d:60:7f:3d:50:20:
                    7b:1f:f5:ef:db:6b:14:70:d0:37:d6:ad:75:73:91:
                    84:f9:1a:2e:6f:86:36:40:e7:db:fa:40:e7:9b:7c:
                    14:9f:ec:96:b7:92:4c:77:6f:57:14:3a:a2:30:78:
                    70:29:f4:da:76:71:c3:17:c5:3c:b5:39:8f:bf:e1:
                    da:67:45:d5:aa:6b:50:89:a8:3a:0a:07:d4:b3:57:
                    30:1f:4d:97:f9:1b:6b:4f:0d:3d:c5:52:78:da:a6:
                    7a:40:b1:db:f2:94:ee:ae:a6:2f:ee:23:4f:d3:38:
                    88:be:18:e7:bf:3a:71:8c:f0:2e:89:ed:f2:a5:20:
                    36:c2:28:49:b2:09:41:cd:5c:b5:91:49:e7:d7:3f:
                    bc:13:88:ec:b2:f6:1c:29:d1:46:b2:19:63:9a:9a:
                    9b:dc:10:ce:79:84:1d:5f:bf:75:6e:8b:eb:56:3b:
                    88:bd:d5:ba:66:37:75:2d:72:6d:c8:d4:49:04:b6:
                    1e:5c:ed:97:8a:19:58:46:3a:25:8e:8f:96:36:86:
                    76:a6:39:f0:ee:50:83:28:b1:02:0d:b8:53:4c:43:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:3C:D4:CE:7C:76:CE:1A:EF:9E:E6:B2:33:83:66:B0:CD:43:EA
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:66:3a:27:04:9f:bb:6f:aa:b4:68:5e:47:48:1c:e6:ad:6e:
         17:4a:ed:70:8c:91:6f:2d:c3:c8:68:67:a5:4d:ba:a5:06:77:
         87:e9:5b:88:15:4d:fa:06:04:25:4b:90:3d:43:b4:02:e3:c1:
         b1:47:e0:27:cb:93:8d:69:43:1b:29:55:17:8e:e1:8e:ac:c4:
         89:93:2b:a4:7f:41:07:0e:ee:dc:0a:22:68:99:e1:86:ad:39:
         11:9b:35:90:43:5f:37:26:7a:01:7d:a2:be:07:da:f4:d0:74:
         28:92:06:bd:fd:51:9a:30:a9:c8:32:49:f8:33:c6:e6:78:a4:
         e2:42:39:91:6a:5f:c4:03:13:9f:3c:d2:86:b6:c4:6c:21:9c:
         ac:4b:77:c5:6b:f0:21:f7:90:b1:1e:d9:df:08:4e:6d:a3:3d:
         7c:87:5f:c1:8d:1c:af:37:ab:88:6e:03:f0:8e:78:58:76:a0:
         81:84:4a:23:c3:37:18:8f:08:43:46:ec:28:57:47:a2:36:1c:
         85:52:e4:1e:a6:e3:33:e5:94:6a:9b:95:05:22:c4:c1:b1:3d:
         10:62:f0:68:e4:24:0f:a8:f1:49:7d:8d:01:dd:67:25:8d:41:
         31:5d:6f:13:fc:14:5b:79:0e:ed:35:78:1b:51:24:2b:71:d1:
         6c:56:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:17:09 2026 by rpki-client