Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File:                     4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier:          rJSHdPjR6ELm7hu744PRRQOATsetFfW/jVOD143zJZQ=
Subject key identifier:   79:3F:5A:ED:3D:A1:79:30:FD:BA:27:C0:CE:E9:64:13:87:73:8E:0D
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       0C6D4D0382A29DA039F0587ADB6639985AB6119D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number:          91
Signing time:             Sun 19 Oct 2025 13:35:51 +0000
Manifest this update:     Sun 19 Oct 2025 13:30:51 +0000
Manifest next update:     Mon 20 Oct 2025 16:55:51 +0000
Files and hashes:         1: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=)
                          2: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: DLI+IlsDtpe6/1JCozGn0rUkOZiyIR5T0UsSteEwuYo=)
                          3: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=)
                          4: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=)
                          5: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=)
                          6: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=)
                          7: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=)
                          8: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=)
                          9: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=)
                          10: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=)
                          11: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=)
                          12: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=)
                          13: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:4d:03:82:a2:9d:a0:39:f0:58:7a:db:66:39:98:5a:b6:11:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Oct 19 13:30:51 2025 GMT
            Not After : Oct 20 16:55:51 2025 GMT
        Subject: CN=793F5AED3DA17930FDBA27C0CEE9641387738E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:33:b0:e6:68:72:4f:29:4d:24:ce:97:27:
                    d8:1f:87:48:f6:e6:55:4c:d8:d0:0e:c3:58:0c:b9:
                    d3:ca:2f:4c:ed:c6:0a:f2:06:a7:aa:e8:b8:8b:6f:
                    33:7f:27:9f:b0:59:2b:4c:d9:49:b6:0e:c0:9f:50:
                    83:f8:40:e8:e1:26:0b:7d:ce:0f:79:e2:41:ba:7c:
                    68:c6:20:82:0c:78:0f:9f:78:90:89:86:c3:a3:3c:
                    ce:71:dc:2b:7b:61:66:7e:99:c1:aa:e9:73:8f:10:
                    44:d5:9a:1c:35:fe:e4:a5:69:31:0d:e8:85:c4:b2:
                    84:05:60:60:1b:fe:bc:60:9c:9b:43:3c:6e:8d:74:
                    ff:d4:10:51:dc:36:a0:99:40:0c:11:89:c6:a4:e8:
                    cf:a6:1f:0b:74:47:a8:50:5a:c9:36:e5:0b:06:be:
                    c6:09:cb:f7:7a:ce:2b:3e:cd:f3:a0:9f:f3:3c:79:
                    8f:f7:01:a1:64:91:2c:34:78:b1:e9:00:71:08:64:
                    bc:a2:05:af:1d:2a:53:49:6a:eb:da:0d:fb:43:1d:
                    7a:f4:c4:b9:1a:ee:f2:f9:46:ad:07:7c:fb:65:27:
                    ca:67:83:dd:db:f4:df:df:3c:cd:57:3d:80:21:1f:
                    4a:ac:2b:cf:62:95:89:9e:81:ca:62:2b:e7:66:c2:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:5A:ED:3D:A1:79:30:FD:BA:27:C0:CE:E9:64:13:87:73:8E:0D
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:69:10:c2:33:78:1c:0d:fa:ec:9c:d3:f3:61:e1:fc:c1:7a:
         fc:ec:a6:81:e0:48:88:f8:4a:44:c3:df:0a:62:69:3f:3a:cb:
         a4:31:bf:32:ab:26:af:67:98:fe:8e:50:eb:3c:9e:17:6c:a0:
         14:c9:42:9f:79:37:bd:a4:bd:30:d2:79:d8:6e:dd:17:13:62:
         a4:da:ca:ec:a4:4c:89:51:f2:ed:66:aa:1f:c4:e4:ca:1a:1e:
         76:13:7e:a4:5c:11:43:23:fb:d8:01:07:15:ab:ac:0d:78:bb:
         93:43:3a:b9:0c:ef:cb:4e:8a:3e:84:d7:5b:99:a3:a3:2f:33:
         b9:ca:3a:53:81:40:9e:b3:98:a9:f8:dd:1b:44:ea:d9:62:0a:
         5a:11:59:7f:f4:40:99:66:eb:98:f0:43:68:80:79:14:5f:d3:
         89:a9:08:e0:83:0a:47:11:96:e6:90:f9:a9:cb:60:b0:62:81:
         ff:d6:fb:3d:dd:5b:78:91:6f:e2:12:9a:2a:75:b0:80:ce:56:
         f0:26:80:de:c3:73:44:a0:6f:33:c2:3b:c9:32:31:29:b7:a7:
         91:c6:a8:1c:c7:27:a8:e7:2c:bd:6a:45:a2:d3:99:69:cf:24:
         00:94:8a:d6:21:3a:03:6a:87:db:55:51:6e:aa:ad:ff:d6:ff:
         98:37:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:49:57 2025 by rpki-client