Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          W066ZSf8I0MD0gADJjYRzN+bKaNkizahWhitK3/7kRI=
Subject key identifier:   45:44:10:1C:16:D0:49:1B:4C:D0:FB:57:E6:00:7C:D9:B2:C1:10:28
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       56F48A5DE730FD377B8D34DD4A6080817B17AC75
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          0163
Signing time:             Thu 26 Mar 2026 15:31:20 +0000
Manifest this update:     Thu 26 Mar 2026 15:26:20 +0000
Manifest next update:     Fri 27 Mar 2026 19:19:20 +0000
Files and hashes:         1: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          2: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          3: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          4: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          5: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          6: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          7: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          8: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          9: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          10: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          11: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          12: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
                          13: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
                          14: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          15: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          16: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          17: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
                          18: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          19: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: +st9LJT/FT5+bJAEmUEWLDvKNMURxCCcYWQa9aTmYoQ=)
                          20: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
                          21: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
                          22: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          23: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          24: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
                          25: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (hash: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY=)
                          26: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          27: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f4:8a:5d:e7:30:fd:37:7b:8d:34:dd:4a:60:80:81:7b:17:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Mar 26 15:26:20 2026 GMT
            Not After : Mar 27 19:19:20 2026 GMT
        Subject: CN=4544101C16D0491B4CD0FB57E6007CD9B2C11028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:79:44:4d:41:e6:f4:00:5c:fb:f4:f0:3d:
                    51:b6:50:49:8f:32:61:05:e6:02:3b:93:d7:9e:f0:
                    d3:0f:c6:7a:c7:7d:13:19:83:e3:b8:a6:b6:7b:9c:
                    f8:33:c3:00:eb:63:12:e5:6d:77:2f:bc:25:b6:ba:
                    7f:d7:de:75:25:90:09:26:3e:e7:d2:dc:75:a4:fe:
                    ff:8f:39:ce:47:05:e4:9b:94:75:20:7b:4f:ac:31:
                    d8:44:c2:1e:71:ed:47:56:84:47:91:06:a9:a4:3f:
                    7e:fc:4a:64:3b:6c:fb:3a:19:d2:c8:34:b7:e5:f2:
                    ad:03:0f:12:62:63:51:b3:6f:89:7f:65:ba:e8:3f:
                    c7:0d:d2:ff:4a:69:40:d9:0e:ba:a4:7d:88:83:e5:
                    d6:fd:f9:07:23:71:98:a4:97:e8:ef:c3:a2:fd:bc:
                    e4:48:71:21:b4:7b:0b:d1:6f:2b:b7:59:d6:53:ee:
                    0d:44:cd:d0:5e:23:e3:38:bd:38:96:f0:97:8f:e0:
                    79:b8:76:80:77:0b:6d:dd:e7:c6:10:93:f6:25:19:
                    de:a6:03:92:87:1f:c4:ac:94:d1:2e:b7:ad:97:fc:
                    50:ad:b3:51:bc:6c:38:4f:f0:ad:d5:85:da:79:d5:
                    98:a6:52:95:0a:82:c1:03:36:e4:90:3a:fd:d7:c9:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:10:1C:16:D0:49:1B:4C:D0:FB:57:E6:00:7C:D9:B2:C1:10:28
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:25:19:bf:88:eb:eb:f3:a4:5b:53:31:f9:a3:21:8d:e5:
         cc:9c:88:54:e2:3d:ac:fc:ce:aa:a4:82:2b:51:a0:c9:9c:85:
         5d:19:86:3e:f8:bc:fd:b0:8c:2a:20:88:05:01:a8:3c:83:03:
         ba:36:73:cc:8f:e3:23:77:b9:d1:93:8e:83:b3:77:5e:72:1c:
         ae:12:c4:99:88:ec:f7:f6:e1:c5:9e:2e:cc:fd:b9:2c:28:52:
         21:f0:5b:55:c1:0e:13:8d:53:e1:11:4f:3c:1b:66:6b:07:07:
         e1:7d:76:8a:c5:d8:0e:b7:e3:4e:cf:73:10:0d:af:aa:f5:88:
         d4:5b:07:8f:ad:45:58:27:d0:83:ae:e8:ed:c9:0f:52:34:34:
         8f:c8:7f:84:a7:ce:b4:5b:08:14:6a:08:91:f0:5f:f2:de:14:
         e4:43:5f:5a:e2:ce:76:0f:f9:39:8f:b1:bd:d8:f2:95:c6:da:
         03:b8:54:16:56:b0:b6:fc:fa:23:e9:5d:48:ca:67:1c:dd:58:
         4a:3b:ee:3f:0a:1d:1f:f6:4e:2b:64:dd:9b:e3:3e:a5:5e:33:
         b8:dd:60:51:9e:75:0f:b0:44:8d:94:71:2f:c5:bb:2c:76:75:
         38:58:4d:9a:5e:5c:24:db:c7:be:b2:2b:67:f2:60:ce:7c:86:
         5e:89:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:33 2026 by rpki-client