Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File:                     4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier:          L4M04XS3iS/+IUXOc9FXYagwAR3XFXpGusbBoj/eLeY=
Subject key identifier:   FE:C7:86:D3:82:3B:95:4C:B1:34:1B:4B:FF:50:49:65:09:6A:3E:6A
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       6C9293281D491E8C37089DD613682EFCF7AAB746
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number:          45
Signing time:             Sat 23 Aug 2025 08:27:52 +0000
Manifest this update:     Sat 23 Aug 2025 08:22:52 +0000
Manifest next update:     Sun 24 Aug 2025 11:14:52 +0000
Files and hashes:         1: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=)
                          2: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: m6E4pK7R8pPCnNReMsmiV0e8Z/a/N1HMfyl81IfzS/8=)
                          3: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=)
                          4: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=)
                          5: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=)
                          6: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=)
                          7: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=)
                          8: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=)
                          9: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=)
                          10: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=)
                          11: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=)
                          12: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=)
                          13: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 20:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:93:28:1d:49:1e:8c:37:08:9d:d6:13:68:2e:fc:f7:aa:b7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Aug 23 08:22:52 2025 GMT
            Not After : Aug 24 11:14:52 2025 GMT
        Subject: CN=FEC786D3823B954CB1341B4BFF504965096A3E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:bd:47:e8:0b:47:e8:3f:c9:8f:aa:b7:d1:
                    4a:ef:4c:87:e7:12:80:29:70:de:ba:1a:e8:7c:03:
                    bd:56:3a:24:d8:85:af:e9:6b:25:24:30:eb:fb:53:
                    fe:af:34:de:01:5f:b3:2e:30:7c:6c:50:61:69:69:
                    1b:8d:4e:c0:9e:3b:37:7b:68:7e:b1:6c:49:83:0f:
                    e8:06:9e:e0:2e:02:71:7d:f6:68:15:40:23:90:0a:
                    b1:e8:31:38:d6:f2:06:42:de:5e:95:25:a9:64:44:
                    06:63:b5:bf:9a:19:f0:f7:fc:6d:45:f9:d0:c1:a2:
                    e0:80:72:f0:00:d6:2e:cb:46:52:39:14:85:a9:34:
                    f7:e4:4f:35:db:84:fe:ef:e3:16:78:7f:97:02:a3:
                    5b:32:ca:91:e5:dc:7c:12:ed:ff:b5:6d:36:e0:67:
                    a7:1e:56:20:0c:f1:26:4c:51:67:c0:64:d2:f5:75:
                    08:38:f5:96:be:06:a0:e4:f7:3c:c0:56:db:6c:16:
                    c2:89:df:c6:02:7f:60:10:66:cc:5d:e5:7d:b1:fe:
                    0c:2e:92:60:1e:ed:8d:be:3e:cd:64:29:cc:12:86:
                    fe:2e:f6:e6:45:42:a7:fd:0f:2e:b8:a5:b2:2d:51:
                    1c:c5:87:55:24:05:8b:ab:dd:7e:00:33:31:93:81:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C7:86:D3:82:3B:95:4C:B1:34:1B:4B:FF:50:49:65:09:6A:3E:6A
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:88:fc:70:88:88:5b:98:6c:ae:95:60:ee:eb:05:aa:d1:
         0a:3c:10:8d:b9:3b:69:e7:b5:5d:3f:57:94:9f:0d:3b:1a:a9:
         eb:22:77:84:bd:c8:83:78:c1:be:d3:de:b5:25:28:12:e6:62:
         46:74:c1:81:78:56:ee:f8:82:16:0e:cd:df:b7:14:7e:fc:a9:
         d0:60:96:62:b9:8b:8a:79:04:59:10:db:21:66:ae:58:18:d3:
         42:5a:9c:87:80:0b:25:73:aa:7d:34:9f:0a:31:4b:2c:a0:72:
         c2:f7:95:a5:6d:00:a4:9e:d1:9a:f2:ff:1a:06:6c:d1:b2:04:
         19:e1:45:03:4d:a8:0f:73:a0:06:b1:d9:0f:d5:4c:57:57:c4:
         3d:2b:06:83:63:61:40:6c:43:e1:4f:3d:63:05:58:dc:96:5c:
         a7:4b:41:5d:0c:e8:c0:0d:61:77:22:02:2a:8a:6f:0f:90:33:
         a1:be:87:89:24:2a:94:53:74:86:6e:0f:d9:78:de:3c:b7:1e:
         28:83:60:b9:4e:36:b7:12:72:ba:6b:83:a1:45:9b:4b:59:b7:
         6d:c8:e7:fa:61:c2:15:7f:50:d7:7b:78:1e:98:c0:24:90:ec:
         cd:9a:a7:41:9d:aa:79:73:97:01:44:59:65:89:1a:19:ce:0a:
         36:6b:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:15 2025 by rpki-client