Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
File:                     553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json)
Hash identifier:          OExa2KJCxjg3oIq87cZ/kjWQzGF5T/Uun8LlMdkdGZk=
Subject key identifier:   B5:7A:40:A9:60:33:F8:B2:CB:E6:9C:B8:95:BF:14:AE:66:C1:EC:E8
Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Certificate issuer:       /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Certificate serial:       06FFDDEA89EBC69A117313C15C09B2FC547A9901
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
Manifest number:          0165
Signing time:             Fri 27 Mar 2026 01:53:14 +0000
Manifest this update:     Fri 27 Mar 2026 01:48:14 +0000
Manifest next update:     Sat 28 Mar 2026 02:19:14 +0000
Files and hashes:         1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=)
                          2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: ZtYuVZ/qW2QoIqQIpkvP9Wz5QazVpkq/213wD0rOG24=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ff:dd:ea:89:eb:c6:9a:11:73:13:c1:5c:09:b2:fc:54:7a:99:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
        Validity
            Not Before: Mar 27 01:48:14 2026 GMT
            Not After : Mar 28 02:19:14 2026 GMT
        Subject: CN=B57A40A96033F8B2CBE69CB895BF14AE66C1ECE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:dd:26:ac:ee:02:a1:50:a1:61:dd:ee:a7:
                    14:18:42:0c:ed:7f:e0:21:a2:e5:e2:42:7f:8d:5e:
                    a2:b1:0f:de:f7:1e:56:07:a3:ac:b5:ed:00:9b:b6:
                    6b:26:44:43:05:54:53:ed:32:64:ef:8d:46:7c:1b:
                    c1:7e:48:ad:b4:33:77:d3:ee:2b:22:cc:7d:93:b0:
                    27:ea:b1:82:9d:0a:e2:63:98:c6:06:bc:39:dd:8c:
                    16:83:78:bf:86:08:d7:3e:d9:28:5d:d0:ef:05:77:
                    86:be:e3:40:77:dc:6e:de:ac:25:2d:58:ec:91:cd:
                    25:5f:e4:25:af:7d:0e:ad:4d:5d:1d:1c:6b:31:2d:
                    24:c4:16:48:77:d7:0d:6b:85:36:15:3d:e9:7a:84:
                    60:f9:4a:c3:36:0d:bb:b1:42:49:4f:ee:2c:0a:c8:
                    2d:3c:79:22:56:03:98:06:ee:8f:1c:bb:7f:1b:45:
                    2a:a7:98:0e:f3:ac:5d:bf:2e:ea:df:3d:df:c5:79:
                    a3:df:20:a0:e7:9b:d6:10:50:87:04:8c:61:f8:ab:
                    f4:83:e1:7d:31:62:ce:9b:b9:74:41:ab:75:e7:6e:
                    af:ac:9b:49:eb:a2:17:c8:4a:68:dd:e4:ee:75:bd:
                    6e:a7:2e:fd:5b:3a:80:4e:54:eb:ad:52:b0:b3:28:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7A:40:A9:60:33:F8:B2:CB:E6:9C:B8:95:BF:14:AE:66:C1:EC:E8
            X509v3 Authority Key Identifier:
                keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ac:ff:a2:53:a2:a0:5a:46:96:ba:66:15:fd:3f:0d:5f:43:
         40:64:b9:5a:50:33:2f:88:f5:5a:a3:7f:f5:ab:2a:e8:ae:45:
         56:04:6f:1a:4d:13:33:51:32:97:c0:86:de:af:82:ea:2f:f5:
         90:96:23:c9:1a:28:e7:df:4d:93:17:e4:c3:26:56:3a:e9:d2:
         e8:f2:92:7d:5b:96:8c:f1:48:06:8d:53:9e:56:7b:0d:b6:6a:
         6b:33:a5:2e:73:14:59:7f:33:6f:6f:96:ae:4d:cd:b0:53:6b:
         17:85:8f:48:0d:15:a4:30:2c:5b:34:cb:ae:0c:ac:f6:87:5c:
         76:da:df:db:09:f9:c2:06:97:f2:93:dd:af:4b:e4:f3:15:3a:
         65:9c:fa:e6:6c:ef:39:75:95:bc:cb:36:66:8f:7d:53:53:46:
         90:e6:f3:35:d3:41:21:a6:9e:b6:a2:de:38:e3:ac:0d:b4:96:
         20:ed:6b:5d:33:bb:3b:09:10:fa:40:3b:41:39:28:46:c9:0b:
         d6:73:c6:80:b6:4f:b6:f4:ec:27:b1:11:7e:a5:06:12:d5:29:
         c5:0d:4b:60:b0:31:be:d7:92:85:2b:87:b8:dc:b7:42:28:a1:
         fa:92:81:d0:b5:a3:44:9b:97:c8:45:61:61:46:69:8b:b8:be:
         ab:8c:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:19 2026 by rpki-client