Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
File:                     553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json)
Hash identifier:          ed5tu0GtIxBmNy1prBQCxytTsrUlFOKqUV0aH9dYbpY=
Subject key identifier:   38:5D:77:C6:5B:D7:CF:E4:95:A4:A3:28:0F:E1:2B:7B:45:D4:A7:57
Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Certificate issuer:       /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Certificate serial:       3A3A779B35862F4E3602B997146C51FB33F30D17
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
Manifest number:          90
Signing time:             Mon 20 Oct 2025 14:36:58 +0000
Manifest this update:     Mon 20 Oct 2025 14:31:58 +0000
Manifest next update:     Tue 21 Oct 2025 17:50:58 +0000
Files and hashes:         1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: C1r65zxOZ4glJy9eDLQVmesJhw+pBPUFRyyPax2r4Lo=)
                          2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3a:77:9b:35:86:2f:4e:36:02:b9:97:14:6c:51:fb:33:f3:0d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
        Validity
            Not Before: Oct 20 14:31:58 2025 GMT
            Not After : Oct 21 17:50:58 2025 GMT
        Subject: CN=385D77C65BD7CFE495A4A3280FE12B7B45D4A757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:98:bd:1f:f6:37:98:61:b9:f6:be:02:2c:
                    a1:38:a4:74:3c:26:ae:5c:87:66:08:1d:e1:86:6e:
                    a2:29:55:45:cc:36:40:39:19:07:f4:e3:93:0f:67:
                    e2:56:9f:52:59:30:5f:08:8b:81:01:ae:81:5b:33:
                    de:55:fb:6c:fb:8a:8c:31:a1:e8:ef:bb:5c:05:ac:
                    ec:ee:57:e4:60:94:a2:6a:9d:76:fb:61:8e:79:ab:
                    42:2b:f0:02:1f:58:e3:aa:cb:69:ee:ae:6b:a0:27:
                    1b:a9:b7:e3:92:45:0c:91:1d:b3:e7:6b:fb:ca:63:
                    47:af:09:35:06:1d:ac:39:5f:f5:7b:22:0e:42:b5:
                    eb:31:be:a1:6a:62:ba:19:bd:f9:87:5c:d5:7c:25:
                    0a:37:39:51:a5:8d:e4:7e:35:6a:40:0a:9b:20:cd:
                    47:f3:b8:9f:70:62:16:23:e4:27:52:08:9a:9e:77:
                    f1:76:e6:f1:ca:0c:52:cd:48:24:05:95:d7:10:f0:
                    6f:51:a5:1c:03:8c:8f:58:88:b9:6b:e5:d0:b9:35:
                    bc:c9:e2:7f:70:66:32:df:b1:6f:e2:fc:19:48:68:
                    39:6c:57:d9:e4:a0:3c:21:81:f0:a3:44:c1:7a:66:
                    b8:42:e3:c0:c6:33:d1:83:2d:33:33:03:ce:45:e8:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:77:C6:5B:D7:CF:E4:95:A4:A3:28:0F:E1:2B:7B:45:D4:A7:57
            X509v3 Authority Key Identifier:
                keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:8c:1f:5c:bb:b8:66:8a:a1:90:82:97:b2:ce:66:24:b0:
         df:b8:fa:da:f5:af:f4:e2:2f:5b:05:67:ed:c6:e3:e6:48:21:
         16:ba:9b:6e:15:46:48:95:8a:b5:b2:a9:47:9f:3b:18:7b:75:
         c0:70:18:e5:d5:4d:fe:ac:0e:71:56:48:24:3b:23:eb:63:d4:
         04:cd:92:29:0f:a5:68:22:e1:c3:3a:de:de:fe:89:b4:0b:a8:
         04:fc:91:6c:ca:eb:16:9d:19:8b:a0:e2:2e:79:73:8f:5b:b3:
         24:3e:6c:cc:db:6c:28:96:32:4f:82:ea:6d:20:80:fb:ca:a4:
         b2:53:01:4d:31:4b:d1:5d:bf:84:4e:be:c7:c4:f4:6f:66:93:
         5b:23:42:b0:69:7c:86:1f:9b:92:ce:9d:42:9a:dd:eb:4b:1a:
         a8:0a:93:4c:5a:6e:b7:fa:28:8f:55:c7:14:61:c1:fd:fb:a0:
         74:62:dd:47:b3:11:2f:15:2a:1b:65:a2:b3:2a:b1:70:97:0a:
         e2:1d:e9:52:3b:73:08:b2:c8:1f:d6:bf:96:8a:6d:0f:c9:3c:
         e8:ce:d0:88:f5:e5:d5:92:0e:33:41:aa:fe:e8:2d:fb:7d:54:
         e7:f5:cb:7e:1c:3e:e2:92:7c:1c:9a:7f:da:2b:ce:47:b3:a8:
         a9:b6:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:05 2025 by rpki-client