Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File:                     3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier:          BxDoTvCI2uFBPwdZIsM8/EdIlfdxpMSXqI6WY3aOdlc=
Subject key identifier:   2C:42:67:53:4E:42:E6:1F:86:3D:D4:31:02:ED:A0:B9:00:65:CB:FE
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer:       /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial:       1669BC6A0E9AEAF96669814F836607512A7814DE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number:          BB
Signing time:             Tue 12 May 2026 19:08:51 +0000
Manifest this update:     Tue 12 May 2026 19:03:51 +0000
Manifest next update:     Wed 13 May 2026 19:54:51 +0000
Files and hashes:         1: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
                          2: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
                          3: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: LcktiRivaHX8/2N6/fBRyt9Q8SxDttdGD8LIM2rx6Lw=)
                          4: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
                          5: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
                          6: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
                          7: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:bc:6a:0e:9a:ea:f9:66:69:81:4f:83:66:07:51:2a:78:14:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
        Validity
            Not Before: May 12 19:03:51 2026 GMT
            Not After : May 13 19:54:51 2026 GMT
        Subject: CN=2C4267534E42E61F863DD43102EDA0B90065CBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:45:cb:37:f1:76:22:29:30:16:5b:c9:a4:
                    56:64:c9:79:81:dd:01:ae:49:31:55:d2:91:b1:c7:
                    51:82:3a:e4:25:43:d3:67:42:37:9f:44:89:43:0c:
                    e9:06:01:ad:24:97:f6:a9:5b:f5:ad:ca:3e:b0:18:
                    d0:fc:84:60:7c:c9:a1:3a:85:2d:b9:cf:a2:8e:2e:
                    f0:b7:28:c6:2c:fe:ff:87:7c:8f:66:48:b6:a1:4f:
                    f5:d6:c5:c9:82:31:bf:30:16:7b:96:ea:72:ca:ed:
                    8d:f3:a1:b7:02:97:6b:1e:5f:be:a9:eb:1a:fa:ff:
                    85:ce:08:49:36:d1:98:91:96:53:75:79:e7:90:41:
                    b2:31:d0:04:18:ea:e0:35:a9:8a:39:6e:16:30:bc:
                    bd:3d:ce:2e:c1:ea:ed:13:6b:ba:21:63:8c:3b:98:
                    65:34:40:6a:dd:43:62:2a:6d:d6:ef:64:13:c6:cf:
                    08:48:fb:17:9d:6a:06:35:27:45:19:59:0b:a2:2f:
                    49:d4:f4:33:df:42:c5:e4:06:ce:66:49:8c:5a:3c:
                    e3:c8:3c:9c:48:e6:5a:08:1b:10:18:ac:79:b8:3e:
                    62:d2:fe:b9:51:de:30:27:f1:54:9b:e3:38:fc:04:
                    61:14:2e:d2:eb:24:4b:82:47:a9:cd:ab:6b:23:97:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:42:67:53:4E:42:E6:1F:86:3D:D4:31:02:ED:A0:B9:00:65:CB:FE
            X509v3 Authority Key Identifier:
                keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:85:be:8d:61:51:35:35:56:5b:5f:30:2a:84:af:5d:ba:
         68:18:13:a4:d4:7c:92:98:47:f7:5b:62:1b:a3:9a:af:09:24:
         4c:3d:49:32:96:89:0b:e7:a8:fe:c2:a4:bd:2e:03:59:b1:5a:
         e7:de:ec:e6:73:01:39:b1:28:ad:8c:a1:b0:98:08:80:90:9d:
         43:6c:24:e0:ea:73:c8:2f:80:9f:1b:2a:1b:1d:42:46:12:17:
         d7:d7:e1:ff:e0:7a:3d:bf:3f:cc:9c:2e:5a:85:b2:45:11:cf:
         b7:41:c4:c8:f3:12:a8:73:1a:7f:d5:eb:6b:bd:78:ad:2c:9d:
         f8:69:77:bd:4a:dc:c6:c2:a5:5b:55:66:28:74:23:ae:b8:a7:
         32:50:56:75:28:bb:3c:4e:40:e0:62:3e:49:bb:68:d3:6a:e0:
         ac:a8:f3:dd:c5:d9:43:1e:ba:f1:6a:88:8f:b2:b5:cf:6d:80:
         64:e6:ea:ac:db:1c:38:25:e2:bd:68:2e:d8:f6:4c:2d:90:31:
         50:81:8c:a2:6e:4d:d3:da:c6:4b:88:3f:38:2f:99:0b:39:44:
         20:9e:76:fb:35:ab:60:48:d7:b5:a7:68:00:32:df:bc:fa:ff:
         b2:75:97:15:44:72:38:77:aa:ba:14:f9:e0:21:92:57:8f:89:
         9f:e4:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:05 2026 by rpki-client