Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
File:                     D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft (raw, json)
Hash identifier:          710LNerbcZyn9W6C8wBUzyJH7yhFzYmEZ+kAPnitzHE=
Subject key identifier:   FA:DD:45:90:57:CE:BF:9D:67:22:CB:73:62:3C:73:24:76:8C:D2:DC
Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Certificate issuer:       /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Certificate serial:       367759D5F46DED294AFDDB12585FFC89BD21B48D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
Manifest number:          44
Signing time:             Sat 23 Aug 2025 14:44:36 +0000
Manifest this update:     Sat 23 Aug 2025 14:39:36 +0000
Manifest next update:     Sun 24 Aug 2025 14:49:36 +0000
Files and hashes:         1: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: Akh6Hk6S0OH2Z77HSUXUpo9sndUP6ZpVYbaZ0C+pMkU=)
                          2: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: CWOxtutFW8hhUOi9VObNEvn/pGQ0cmbzWj3A/jlfZ7k=)
                          3: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl (hash: s5W0X0pLRyPNOa1/cHP4HHT1wmvlPchlDl6yxL3QZtk=)
                          4: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U=)
                          5: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: 4lliDoKad0QWiI8QFd6IuWpcnQIUMJu5VW5vCep/nzY=)
                          6: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: EPhN/IdQdctHEgcI5mRqnnjYfzJlSrsw3WqDekvn86Y=)
                          7: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw=)
                          8: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: SuaWG0h25mSOkF6TUnfvTVFuLybBa5x6nHfCETqFdvg=)
                          9: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:59:d5:f4:6d:ed:29:4a:fd:db:12:58:5f:fc:89:bd:21:b4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
        Validity
            Not Before: Aug 23 14:39:36 2025 GMT
            Not After : Aug 24 14:49:36 2025 GMT
        Subject: CN=FADD459057CEBF9D6722CB73623C7324768CD2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:5d:76:9f:9c:2a:e9:e4:43:fe:75:11:72:
                    7f:9e:e1:da:7a:ce:f8:50:e7:bd:17:18:70:67:9f:
                    b8:03:17:fb:5f:fb:5e:93:2f:2a:a1:e0:aa:65:d3:
                    20:d9:75:2b:c0:94:28:b7:82:76:3a:6b:60:9f:67:
                    eb:2e:d6:b4:c6:0c:70:6c:c7:38:08:05:e5:ba:8c:
                    98:a0:60:44:93:11:66:f2:33:1b:69:c0:e3:1f:fa:
                    27:21:05:90:1a:9e:c1:4f:82:db:7c:7f:11:2d:45:
                    9d:40:1e:2b:0a:3f:33:69:53:d9:c7:12:06:30:6d:
                    81:ef:b8:1b:f5:23:fd:1d:9e:e4:3e:c1:fb:6d:7a:
                    5c:30:0e:be:0d:4b:99:36:b0:06:6d:e6:d4:bd:49:
                    c1:30:1c:b6:ed:bf:d5:60:7b:e6:49:8f:51:f0:da:
                    f4:a2:0e:52:ab:86:2c:e2:20:f0:cf:d3:86:a3:e6:
                    76:87:db:7f:f0:9a:6f:a2:5b:3c:f4:43:ec:a4:06:
                    ce:36:b6:94:c3:8c:7d:78:92:d4:18:79:11:b1:6a:
                    0d:89:69:12:ab:22:3e:54:16:b0:89:0d:97:fa:d7:
                    db:5e:28:1c:71:35:5f:a9:09:49:3d:6a:ab:fe:75:
                    fd:2d:39:aa:fc:94:5a:fa:79:f8:b5:60:f7:9f:93:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:45:90:57:CE:BF:9D:67:22:CB:73:62:3C:73:24:76:8C:D2:DC
            X509v3 Authority Key Identifier:
                keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d1:a7:fe:d0:03:12:e2:a6:d0:18:33:fd:12:98:db:9b:79:
         4a:47:7b:99:67:87:60:5e:cb:d6:43:e9:c8:d1:88:b4:21:f4:
         fb:d1:1c:6a:02:94:12:29:61:bb:2b:68:f0:47:51:64:12:11:
         ac:1d:b4:c5:40:30:3b:0d:93:35:ea:3d:8f:ef:02:92:54:a8:
         d8:3e:28:64:74:75:27:15:83:80:d2:e5:bd:e6:43:90:2c:41:
         34:c1:d0:37:94:18:b6:67:01:f9:44:5e:b7:d3:cd:51:49:67:
         bf:86:f7:97:8e:55:c8:dc:c4:8f:58:6d:7b:6d:9c:a3:57:6c:
         8a:ce:95:fc:88:f3:f7:5d:9c:3c:e6:b2:10:9d:07:16:2d:34:
         b5:83:29:05:c4:45:d8:aa:58:fc:19:e0:35:c8:d7:1d:57:f4:
         d9:57:ce:ed:36:27:3c:04:52:ac:25:ab:bf:3a:3b:5c:4c:5a:
         10:c3:75:cb:05:44:e3:d9:e1:cc:8f:f0:55:8d:73:79:50:1b:
         4c:4f:22:d2:53:ed:ed:0e:da:6c:54:b8:1a:b4:c9:8d:e2:08:
         e5:40:3f:d1:9c:6d:cb:dc:21:d1:a3:c6:fb:11:23:5a:09:d4:
         ea:23:b7:65:6a:e4:2c:35:cf:74:5f:0d:2d:28:f0:27:8d:3f:
         94:79:24:0f
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUNndZ1fRt7SlK/dsSWF/8ib0htI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF
OEJCQjgwMTAeFw0yNTA4MjMxNDM5MzZaFw0yNTA4MjQxNDQ5MzZaMDMxMTAvBgNV
BAMTKEZBREQ0NTkwNTdDRUJGOUQ2NzIyQ0I3MzYyM0M3MzI0NzY4Q0QyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK112n5wq6eRD/nURcn+e4dp6
zvhQ570XGHBnn7gDF/tf+16TLyqh4Kpl0yDZdSvAlCi3gnY6a2CfZ+su1rTGDHBs
xzgIBeW6jJigYESTEWbyMxtpwOMf+ichBZAansFPgtt8fxEtRZ1AHisKPzNpU9nH
EgYwbYHvuBv1I/0dnuQ+wfttelwwDr4NS5k2sAZt5tS9ScEwHLbtv9Vge+ZJj1Hw
2vSiDlKrhiziIPDP04aj5naH23/wmm+iWzz0Q+ykBs42tpTDjH14ktQYeRGxag2J
aRKrIj5UFrCJDZf619teKBxxNV+pCUk9aqv+df0tOar8lFr6efi1YPefkyGZAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU+t1FkFfOv51nIstzYjxzJHaM0twwHwYDVR0j
BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3
RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy
LzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHfRp/7QAxLiptAYM/0SmNubeUpHe5lnh2Bey9ZD6cjRiLQh9PvRHGoC
lBIpYbsraPBHUWQSEawdtMVAMDsNkzXqPY/vApJUqNg+KGR0dScVg4DS5b3mQ5As
QTTB0DeUGLZnAflEXrfTzVFJZ7+G95eOVcjcxI9YbXttnKNXbIrOlfyI8/ddnDzm
shCdBxYtNLWDKQXERdiqWPwZ4DXI1x1X9NlXzu02JzwEUqwlq786O1xMWhDDdcsF
ROPZ4cyP8FWNc3lQG0xPItJT7e0O2mxUuBq0yY3iCOVAP9GcbcvcIdGjxvsRI1oJ
1Oojt2Vq5Cw1z3RfDS0o8CeNP5R5JA8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:11:02 2025 by rpki-client