Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          3xlsy9fs8647bjOZK3DLIlJw7yuq3EZpbKiVdpZJ2q0=
Subject key identifier:   DE:E6:9B:77:B1:AF:70:2B:65:C7:D3:20:E4:EF:52:7E:60:2A:71:33
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       11924FA9E97785B2758E75E4E593750AFD245583
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          44
Signing time:             Sat 23 Aug 2025 03:59:28 +0000
Manifest this update:     Sat 23 Aug 2025 03:54:28 +0000
Manifest next update:     Sun 24 Aug 2025 07:26:28 +0000
Files and hashes:         1: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          2: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          3: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          4: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          5: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          6: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: qYuPGoCcdfZMNKAQSwq9Mre01fFrCyzshob2uDtO7eg=)
                          7: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
                          8: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          9: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          10: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          11: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          12: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          13: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          14: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
                          15: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          16: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          17: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          18: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
                          19: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
                          20: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
                          21: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          22: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
                          23: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          24: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          25: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          26: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:92:4f:a9:e9:77:85:b2:75:8e:75:e4:e5:93:75:0a:fd:24:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Aug 23 03:54:28 2025 GMT
            Not After : Aug 24 07:26:28 2025 GMT
        Subject: CN=DEE69B77B1AF702B65C7D320E4EF527E602A7133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:69:62:8b:c9:1c:f1:49:72:06:23:61:9a:
                    ee:7b:45:0f:4b:1a:56:4b:fe:ff:fa:87:7f:84:48:
                    b7:08:4a:08:a7:69:f7:a2:3f:03:41:80:cf:a0:42:
                    0c:38:ef:97:9d:64:21:9b:38:88:7d:b7:fb:32:ac:
                    86:0f:d3:c7:fa:9f:2b:d8:28:82:30:ed:07:28:06:
                    f1:d5:dd:73:13:53:c2:02:27:01:61:f5:dd:cd:5a:
                    dd:64:78:b5:91:37:d4:be:3e:93:4b:7f:ca:91:95:
                    66:18:51:fe:c4:79:b6:84:94:d8:ee:29:28:32:f2:
                    aa:ea:b2:21:1f:63:aa:e9:e4:e4:70:ef:90:63:8d:
                    ef:4d:bd:97:9c:e0:c1:bb:58:90:7b:14:06:1a:32:
                    1f:a7:7c:f9:6b:29:66:8c:c3:cb:55:47:3f:9d:21:
                    4b:2e:d9:47:5b:32:41:7d:32:88:e8:48:5a:a1:ce:
                    d7:32:53:23:a7:9d:29:1b:db:58:cb:d7:0b:9f:fe:
                    21:97:ff:c5:a3:35:76:8d:78:b5:8f:1d:f1:76:62:
                    fe:d5:1f:fd:d6:c6:d9:53:b0:d7:00:eb:13:4c:7a:
                    cf:0d:f9:be:05:68:99:7f:2b:1f:fa:85:af:ea:75:
                    47:d8:9b:b6:08:8c:25:d5:9b:55:bb:09:7a:ed:61:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E6:9B:77:B1:AF:70:2B:65:C7:D3:20:E4:EF:52:7E:60:2A:71:33
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:6c:cf:a3:75:92:7f:2c:50:f3:d0:1f:c3:c8:e6:50:72:
         da:58:68:f7:39:dc:b4:69:dd:94:93:3e:ae:c1:af:c8:c1:53:
         11:a6:e5:c0:13:b9:61:8a:03:5d:9d:44:93:2e:68:a7:79:d2:
         39:e0:74:30:84:52:06:cf:5e:a0:9c:e4:96:16:e9:f2:25:bc:
         91:22:bf:14:ed:c3:ca:b6:aa:09:44:c6:aa:5a:1a:5d:10:4b:
         ff:3e:26:8f:82:10:2a:e4:89:79:cc:eb:ee:96:f1:97:4e:c0:
         a7:0b:95:cd:0e:c6:a3:e2:55:96:88:2c:bc:2e:79:64:cd:03:
         3c:9b:ee:66:43:b0:e5:21:f4:b1:86:53:3e:9a:d5:da:4b:40:
         bd:a8:ef:fd:18:af:5f:4b:88:3e:c0:00:6e:82:cc:1c:f4:48:
         74:84:16:d9:3d:2d:73:28:f9:4c:7a:fd:d2:45:a8:45:5a:a9:
         7b:64:f2:60:b2:73:e0:a8:b2:47:b8:62:84:8f:aa:0f:4e:07:
         34:02:12:36:24:52:05:2a:98:47:66:d1:c1:b8:26:ef:92:ea:
         b7:80:e4:0b:08:b7:98:ed:d6:c3:dc:30:4b:05:a7:94:c3:63:
         49:b8:da:b6:70:bf:4b:fb:c1:a4:a4:a2:f9:b6:1a:9e:2e:c4:
         ac:8c:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:23:14 2025 by rpki-client