Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          Sl3yJMR14j6WsmgmgDd/RzR9ZcvYI+iakOa/QiV5mG0=
Subject key identifier:   78:CB:5A:E7:7D:C5:A7:96:AD:F0:1A:AA:1B:59:88:1C:EE:87:9A:3F
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       4E8C4E92FDF8A6DAD5919B957152B6971B4422C1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0257
Signing time:             Wed 23 Sep 2026 11:38:04 +0000
Manifest this update:     Wed 23 Sep 2026 11:33:04 +0000
Manifest next update:     Thu 24 Sep 2026 12:31:04 +0000
Files and hashes:         1: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: YlgR+wU+M0eLvld2xSh3zDm4tMxr1XJShIukMjED9oE=)
                          2: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=)
                          3: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=)
                          4: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: 3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=)
                          5: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=)
                          6: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=)
                          7: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk=)
                          8: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=)
                          9: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c=)
                          10: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: Y1PCZcs+9Hl0rajcsrufc9z/aJxhV8gN3KKtcnKbxmc=)
                          11: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: Iq8D7j+xsoj7tpHG2Rp1FT0u536kED76xFBqNqODvEw=)
                          12: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: tTqMo3ISc/sF0ntlbW2z0ouFRTDoWq3HIgSn9gtpbxc=)
                          13: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: r9FazbYdcGWr8yxE7Xlc6COzFVG/V8HHiY4oJPUj9e0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 04:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8c:4e:92:fd:f8:a6:da:d5:91:9b:95:71:52:b6:97:1b:44:22:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Sep 23 11:33:04 2026 GMT
            Not After : Sep 24 12:31:04 2026 GMT
        Subject: CN=78CB5AE77DC5A796ADF01AAA1B59881CEE879A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:e2:68:b6:dd:27:52:00:6c:2f:8f:f6:fb:
                    d4:9c:4e:ca:ad:32:45:16:33:02:4a:9a:c6:d9:53:
                    cb:99:34:15:24:c6:83:f7:fd:cd:36:d2:67:8a:70:
                    63:fa:10:26:e6:db:c4:49:50:01:ca:ab:4a:59:5a:
                    38:ba:56:26:af:c9:b8:3e:36:bf:fc:68:37:57:7f:
                    db:e9:bb:27:d7:57:22:98:6d:57:de:e3:89:23:40:
                    69:a0:0d:04:4b:61:56:3e:7a:dc:34:57:ec:98:c9:
                    e6:cc:bb:a1:6e:bb:b8:22:cd:d9:d0:ba:d3:b7:d1:
                    eb:69:8e:db:6f:03:4c:a7:14:9b:b7:73:b6:0e:69:
                    52:06:15:24:c7:f0:67:87:70:48:e7:1b:fb:62:7e:
                    f2:87:09:0b:ba:1b:2a:3a:74:f3:f6:e5:60:50:70:
                    50:88:80:f5:42:7b:49:95:ca:5e:30:17:99:fd:9f:
                    76:20:e5:cd:9f:6e:ee:49:af:a7:86:ca:75:d3:91:
                    0f:41:f8:84:7e:24:eb:d5:0b:71:62:e1:69:87:d6:
                    0c:96:5d:89:0d:0f:53:51:4f:f6:ae:3b:a6:5c:65:
                    08:75:72:93:1e:bb:cb:1d:89:7b:de:bd:27:67:11:
                    6d:af:54:1d:7a:38:6a:2e:88:db:32:b3:0c:b3:f7:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CB:5A:E7:7D:C5:A7:96:AD:F0:1A:AA:1B:59:88:1C:EE:87:9A:3F
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:7a:44:bc:ee:08:07:0b:ab:eb:2f:58:cd:ed:95:3b:c3:
         ee:7d:58:0f:f1:60:2d:48:a8:37:f5:70:c9:0b:da:8a:2f:5a:
         e8:a7:92:4b:6e:89:bf:02:58:18:7c:f6:a0:d0:94:16:e5:8e:
         a1:7f:e2:6c:22:f0:8f:91:38:ef:72:74:4e:10:56:49:64:30:
         9a:0d:af:8b:3a:5e:ca:64:65:e8:60:3e:31:08:b5:47:b8:1e:
         ce:6c:ce:a8:4f:f6:f6:fe:a3:5e:c0:d8:1f:aa:16:c1:3d:ac:
         ce:2e:13:d5:11:82:4c:62:6f:90:77:eb:89:55:ac:49:96:c0:
         8e:a7:0e:6c:3e:4d:a0:68:b1:68:4f:97:b6:68:aa:f8:b9:7e:
         d4:95:0b:3e:96:3a:94:f1:4b:3f:e2:85:66:ec:41:2d:fe:11:
         f7:2e:90:8b:26:e3:d0:f6:7f:00:05:8f:97:a1:68:d9:29:36:
         29:65:5d:97:5b:72:5d:2a:e4:de:4f:a8:71:54:35:36:d8:08:
         51:f3:40:a7:7a:32:5d:f9:01:54:9a:44:59:48:f2:78:f6:cd:
         b6:4c:8b:ea:00:e9:87:f4:33:61:25:fc:be:7f:fe:c5:25:73:
         d8:11:9f:26:f9:5f:50:c2:9d:3d:b0:12:e2:88:0a:ff:07:31:
         e6:c0:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:30 2026 by rpki-client