Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          QACg9h7ynbDUpkQkyDx4S0YIEaW8132e0/Sf5C4EG7w=
Subject key identifier:   B3:F0:2B:30:D3:2C:F8:06:3F:3B:19:B7:F4:06:A0:BD:2B:BF:44:7A
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       5538548CED78A1C01CBC044201D6FA9CB3E29728
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0205
Signing time:             Thu 23 Jul 2026 20:04:28 +0000
Manifest this update:     Thu 23 Jul 2026 19:59:28 +0000
Manifest next update:     Fri 24 Jul 2026 22:25:28 +0000
Files and hashes:         1: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c=)
                          2: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: T8uZs8p4W3jfqZjQXZSWC6xgz2Z8drqppI97Rh1/7Cw=)
                          3: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: Y1PCZcs+9Hl0rajcsrufc9z/aJxhV8gN3KKtcnKbxmc=)
                          4: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=)
                          5: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: 3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=)
                          6: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=)
                          7: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: Iq8D7j+xsoj7tpHG2Rp1FT0u536kED76xFBqNqODvEw=)
                          8: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk=)
                          9: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=)
                          10: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=)
                          11: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: YlgR+wU+M0eLvld2xSh3zDm4tMxr1XJShIukMjED9oE=)
                          12: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=)
                          13: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: r9FazbYdcGWr8yxE7Xlc6COzFVG/V8HHiY4oJPUj9e0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:38:54:8c:ed:78:a1:c0:1c:bc:04:42:01:d6:fa:9c:b3:e2:97:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jul 23 19:59:28 2026 GMT
            Not After : Jul 24 22:25:28 2026 GMT
        Subject: CN=B3F02B30D32CF8063F3B19B7F406A0BD2BBF447A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:c6:13:d5:9b:8f:4e:b3:07:5c:01:45:4d:
                    29:c8:98:3d:10:3d:99:7d:df:b7:e2:e0:ab:b8:de:
                    12:a1:09:91:4d:89:96:25:e2:7a:74:31:79:38:36:
                    6a:28:5a:67:c2:58:de:da:5f:04:da:b5:2e:63:a3:
                    99:64:2b:14:f2:3d:9f:58:a0:bb:96:1c:2f:87:91:
                    b2:c6:27:ee:65:da:1a:00:b2:ac:cc:9e:71:85:a2:
                    6e:b8:ed:c0:03:a8:64:d8:b2:cc:73:2a:82:b9:3a:
                    75:ba:60:cb:a2:50:d8:ac:ef:15:ba:1b:b9:ae:9f:
                    7d:ff:5c:2d:2a:83:cb:07:a7:57:85:a4:85:06:c0:
                    92:c1:12:6e:da:4e:23:a0:43:1e:d8:f2:20:7a:c1:
                    b2:24:b0:1d:25:02:fc:0d:e8:8c:bd:78:7d:b3:f7:
                    96:85:ae:50:01:2f:f6:52:e8:7a:dd:7f:3f:21:ac:
                    62:a4:6b:43:75:e5:41:aa:c7:40:52:1b:3e:43:f3:
                    8b:c3:2d:c9:3c:fc:36:32:6c:0b:6d:b4:39:e1:aa:
                    d0:0b:c9:ff:17:89:c5:6b:22:1b:a9:67:39:b4:cd:
                    ca:33:a8:ce:1e:de:68:1a:8a:5b:2a:b4:06:a0:9c:
                    21:a3:fc:c8:be:8d:48:7d:f5:cf:12:1e:d3:a4:b4:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:2B:30:D3:2C:F8:06:3F:3B:19:B7:F4:06:A0:BD:2B:BF:44:7A
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:d6:17:5a:65:a9:e5:1f:6c:7f:c3:8c:52:bf:3d:00:b7:
         62:ff:07:e3:85:5f:70:8f:fa:62:33:17:53:77:9b:ae:86:92:
         73:a3:78:dd:35:b3:dc:ce:67:32:13:ff:e9:b7:87:ad:4f:b7:
         02:22:b6:66:6d:ff:c2:7b:45:9c:9d:0f:dd:25:19:59:35:05:
         a1:23:7a:c3:cd:b6:29:be:c2:1f:73:01:da:bd:97:d7:d6:d0:
         82:09:77:bf:63:89:bb:f0:18:30:d6:10:5a:b9:84:0c:e1:6b:
         7e:48:39:34:b6:fe:76:94:44:3d:52:86:e8:4e:5a:cc:d8:1c:
         f4:de:df:ce:50:23:7f:52:85:25:80:65:70:39:71:3b:35:ee:
         4a:d5:6c:89:12:38:62:b9:e1:4e:7c:a4:e7:6f:47:e1:51:50:
         c4:64:a5:35:e4:4a:57:9b:70:40:d1:b0:67:ee:75:7a:d2:d8:
         cb:e3:7c:37:05:12:76:07:24:b3:31:c2:fe:fd:0d:51:e6:19:
         18:f6:84:a7:57:c6:e7:49:62:ac:65:f1:26:80:2c:5e:96:58:
         ab:7b:05:1d:24:35:c4:4c:11:c0:59:ec:36:7c:6c:fe:e2:d5:
         04:27:41:aa:24:14:d6:00:85:5c:0f:60:91:58:94:d8:fa:79:
         a9:02:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:27 2026 by rpki-client