Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          RFn7ozPIyhKv6u4HwKtEIVNk/hqoB7usodugTXfPDhc=
Subject key identifier:   6E:C4:D3:6F:EE:6F:7F:5B:9B:9B:67:E1:8C:6A:56:7F:6D:A9:2B:86
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       0228AC4BF829B70A47DF6AC74825B538301B4284
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          025D
Signing time:             Fri 25 Sep 2026 19:49:10 +0000
Manifest this update:     Fri 25 Sep 2026 19:44:10 +0000
Manifest next update:     Sat 26 Sep 2026 23:44:10 +0000
Files and hashes:         1: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: wEyfAfNi/sWI31resF4abq0GveoOB60FcGUxSyLT84Q=)
                          2: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=)
                          3: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: 1GdKwaiZZMUPaKMrZsRjBpqXP8X/viR8NTU0VBdDiIs=)
                          4: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: qXzAtd8D2DJwzcUhLNYNl/tXZOUKVl/yvZK64cjJKyI=)
                          5: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=)
                          6: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=)
                          7: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=)
                          8: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=)
                          9: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=)
                          10: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=)
                          11: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=)
                          12: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=)
                          13: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:28:ac:4b:f8:29:b7:0a:47:df:6a:c7:48:25:b5:38:30:1b:42:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Sep 25 19:44:10 2026 GMT
            Not After : Sep 26 23:44:10 2026 GMT
        Subject: CN=6EC4D36FEE6F7F5B9B9B67E18C6A567F6DA92B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:fe:94:09:9f:34:1b:44:86:48:3f:84:3e:
                    da:af:58:c1:69:e8:80:71:5b:6c:47:df:7c:2b:be:
                    76:c3:ca:c2:55:e4:d1:1d:f8:1c:47:19:f5:80:eb:
                    d5:4a:c0:ac:17:f5:b4:f8:d3:d2:a8:db:a7:97:da:
                    4f:08:d8:ff:a2:0d:52:1d:09:53:53:2b:e3:0e:e4:
                    01:12:bb:04:1a:44:df:45:28:73:dd:80:95:c4:47:
                    96:3f:44:ef:1a:b9:80:7a:75:07:e9:83:48:ea:f0:
                    42:56:98:87:a7:59:aa:18:7c:5a:47:2b:62:52:dc:
                    44:12:1a:35:31:92:52:39:6f:21:33:fd:63:c2:f0:
                    8a:e4:ae:62:cf:d4:db:3c:4f:1f:a9:5f:0b:c7:90:
                    78:41:09:52:db:37:f3:08:1d:bc:a7:2d:90:f0:c2:
                    eb:a4:9d:9a:d7:bb:9e:a7:90:8c:c0:0d:a0:b6:a3:
                    35:70:10:40:f2:2c:0f:f9:69:c6:1c:78:fa:68:a2:
                    c4:b4:8d:a1:9a:2b:8d:f7:97:6b:e8:92:50:71:86:
                    5d:fd:c6:3f:96:40:0f:c6:5d:b8:98:78:09:b9:d5:
                    a5:c7:1f:73:82:9f:02:6d:5a:7a:ea:9b:63:6e:d2:
                    05:fb:c0:f1:51:e9:0c:a6:5e:7c:88:a9:7b:b0:7b:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:D3:6F:EE:6F:7F:5B:9B:9B:67:E1:8C:6A:56:7F:6D:A9:2B:86
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:8b:8a:74:77:db:26:66:57:61:86:ed:30:f0:28:d8:a4:
         21:ae:df:31:3d:35:c1:87:e5:5b:af:37:33:cf:76:1a:60:5b:
         cf:5e:72:48:ae:1c:49:b5:60:ff:da:7a:68:cc:36:f6:b1:76:
         b0:76:72:85:c9:4e:7c:ae:9d:89:73:96:48:9a:28:86:58:81:
         44:ea:05:99:99:2b:aa:44:3c:a7:5b:93:d1:f7:36:57:10:5d:
         43:00:3f:04:53:d1:f4:8b:44:e7:7d:72:16:fb:ce:91:73:e5:
         d2:da:c5:ca:8d:b2:73:a6:88:51:d3:c8:d2:d5:56:3b:b2:8a:
         21:da:ec:fb:f8:fa:61:c4:00:bc:85:96:62:97:b8:2d:4e:b8:
         9c:de:24:34:14:85:4a:15:e0:d8:85:1d:5a:87:0f:57:5e:09:
         be:72:3b:df:02:b5:ac:e3:ad:5a:d2:94:0f:94:e5:f7:66:7c:
         46:31:40:84:47:6b:00:c0:47:0e:84:1d:78:26:c0:f5:a3:79:
         66:25:e6:80:8d:18:b7:e3:60:69:61:a7:65:ec:9e:77:7d:9e:
         b0:6b:f0:fb:a0:14:4a:48:01:b0:3a:07:65:94:33:1d:6f:52:
         cb:59:b1:e1:e7:48:9f:e5:47:ce:61:4f:b7:32:ae:d6:98:62:
         72:4d:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:32:29 2026 by rpki-client