Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File:                     4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier:          jERusNbbs4EbG4g6YR/Ph2lVOOTQQHsLD1JEm8ufDLM=
Subject key identifier:   BD:A1:D6:20:06:71:34:AB:3F:3E:8E:C6:67:3C:EF:51:20:5D:13:8C
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       6EA6686C66E46B641D2F4FD81B05FFA93334C967
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number:          0162
Signing time:             Wed 25 Mar 2026 09:39:41 +0000
Manifest this update:     Wed 25 Mar 2026 09:34:41 +0000
Manifest next update:     Thu 26 Mar 2026 11:28:41 +0000
Files and hashes:         1: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=)
                          2: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=)
                          3: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=)
                          4: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=)
                          5: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=)
                          6: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=)
                          7: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=)
                          8: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=)
                          9: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=)
                          10: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=)
                          11: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=)
                          12: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=)
                          13: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: WDDonq1zXsOnJNhboO8WSpyFEd7sevwKSG4PnTp0Tc8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 11:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a6:68:6c:66:e4:6b:64:1d:2f:4f:d8:1b:05:ff:a9:33:34:c9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Mar 25 09:34:41 2026 GMT
            Not After : Mar 26 11:28:41 2026 GMT
        Subject: CN=BDA1D620067134AB3F3E8EC6673CEF51205D138C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:64:f8:09:ea:0f:5f:a3:a7:4d:7d:9b:40:
                    de:54:e7:42:68:4d:f1:24:28:6f:32:71:ce:78:10:
                    51:7d:75:1c:ed:e1:e9:34:eb:b3:48:05:24:9e:30:
                    3a:4f:e1:ec:63:41:37:5d:24:61:be:02:98:e1:47:
                    54:00:e0:c0:56:3c:60:91:13:1f:b1:c5:24:40:76:
                    57:a6:4c:ce:bc:4e:d9:40:94:36:8d:d0:05:8f:c6:
                    72:bc:94:cd:3c:23:63:ad:02:51:ad:68:79:d5:3f:
                    4d:3b:dc:04:62:d8:e0:c7:15:49:7c:23:b6:a0:8e:
                    69:46:8c:ab:45:6b:22:ed:35:1a:56:9f:db:84:68:
                    3a:50:e3:4f:cd:dd:5b:49:46:3e:50:d3:b5:f8:8a:
                    84:20:a4:d4:3e:54:dc:99:29:6f:12:ab:a9:57:68:
                    d9:84:0a:98:f6:37:d2:bd:de:5b:8f:33:cb:2f:a7:
                    51:f4:67:6d:87:fe:3f:d3:08:9e:15:2e:f8:2a:d3:
                    77:d9:c9:2b:7b:ee:44:5c:8d:08:9d:13:78:85:92:
                    cd:16:e0:9d:7e:dc:58:7b:29:09:6f:05:13:9e:5a:
                    cc:99:e0:44:71:73:52:b1:0b:8e:22:4d:d5:e0:b0:
                    b4:5a:de:6e:e3:a7:a0:d8:cc:13:80:72:8d:41:08:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:D6:20:06:71:34:AB:3F:3E:8E:C6:67:3C:EF:51:20:5D:13:8C
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:28:db:b7:bb:92:9b:9e:6a:51:fe:d9:61:ae:d9:55:0e:
         99:b3:e0:71:88:9c:69:3c:ab:93:f7:0f:88:4e:1d:3a:f7:a5:
         0a:8b:d8:1d:27:74:88:09:f5:00:59:66:a9:ac:c6:b3:91:aa:
         0a:a3:0a:f0:87:05:e9:86:08:11:a9:03:70:cb:17:f2:06:dd:
         82:38:47:53:6a:9a:af:93:ff:6c:7f:95:89:70:40:65:85:f2:
         c0:48:37:df:34:80:af:1e:4c:8b:4b:a8:0f:49:ea:15:26:de:
         59:59:aa:fd:7b:dc:9d:2a:22:a9:10:f4:68:d0:c5:7b:71:8b:
         37:95:19:4f:08:c2:f4:70:3a:39:0b:31:3e:d0:e8:6a:0f:0e:
         fd:a7:b7:43:ab:d7:0e:c1:05:d6:8a:74:a0:55:91:ae:9b:2e:
         89:d8:6c:a3:d6:22:3a:a1:92:8c:a7:1e:3e:96:59:6b:bf:d1:
         60:b3:78:d8:1c:25:16:34:d9:b5:5c:70:a0:ea:13:ef:d5:79:
         2d:81:f3:b9:97:a8:2f:83:b3:86:d7:dd:9d:7f:1c:91:6c:70:
         73:b1:70:4e:2a:3b:2d:79:cc:7b:0c:9c:7a:84:92:14:0b:a6:
         b3:b8:cc:db:56:13:d1:f9:07:41:9c:fd:f0:40:8f:86:3e:53:
         d9:30:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:54 2026 by rpki-client