Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
File:                     0F728B914670434DCF5633E81E2B8721DF75CEB8.mft (raw, json)
Hash identifier:          8ln4eCIHLF1o7Y7JbmDsUYUzJOY3fYtqRPv1f7ecwmU=
Subject key identifier:   C4:DF:FD:CD:6B:70:A3:63:82:98:F7:6D:E8:2E:93:7D:26:4B:3A:73
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       650643E1FE7CC372C5D7353A4635AA343006DB64
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
Manifest number:          91
Signing time:             Mon 20 Oct 2025 01:11:35 +0000
Manifest this update:     Mon 20 Oct 2025 01:06:35 +0000
Manifest next update:     Tue 21 Oct 2025 03:02:35 +0000
Files and hashes:         1: 326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (hash: WTZmUkrbRvCnq1WV0/b4J3wKCnYUZUlJ7NyI7AuLwZg=)
                          2: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (hash: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw=)
                          3: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (hash: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8=)
                          4: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (hash: T/jZB6hJnvckE1oQM04wQ4G6elO8ybOC5fa2RX6LRvo=)
                          5: 326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (hash: 5zkOtfMFRCYhmVW7LBhzu0cT34wr5G4zsYBbwLKUwUQ=)
                          6: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (hash: 9olAe2k5YVfRqkBWbCUyoH95HOSdUCIE1uFD0aZVTK8=)
                          7: 326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (hash: o0c6z8BVXaf88Og/NHkXsPQxVXa5TEEzjiKJXKikl2E=)
                          8: 0F728B914670434DCF5633E81E2B8721DF75CEB8.crl (hash: JqXLy02qgGu2IbgAt1cHs9IxQkGNHEOlJ7F+j/4qlcU=)
                          9: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (hash: t9hcvqhwXlPB3lKs0hXk2UPtuWy2Mwkk+JEAH74z3hU=)
                          10: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (hash: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=)
                          11: 326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (hash: 6S/HZN+hofz7bGbwqskKxqv7EIALWOyIB31Jd/CmpLk=)
                          12: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (hash: yfbaeT34FbMIGlyj0tQySNH5shIHOUf5oJ7SB3fvio4=)
                          13: 326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (hash: MtzTkzQ35m22EvkbzZHwIxUncfZ/F5ZBQnc0K5rFcKk=)
                          14: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (hash: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:06:43:e1:fe:7c:c3:72:c5:d7:35:3a:46:35:aa:34:30:06:db:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Oct 20 01:06:35 2025 GMT
            Not After : Oct 21 03:02:35 2025 GMT
        Subject: CN=C4DFFDCD6B70A3638298F76DE82E937D264B3A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:aa:66:58:b8:66:bc:69:1a:37:81:a5:f5:
                    a9:27:4c:cc:1b:00:6f:a0:73:fa:aa:2a:b4:74:4f:
                    3d:0b:15:5c:2a:a8:bc:af:97:b3:74:c1:d9:49:19:
                    13:30:50:0f:86:4e:14:8b:88:36:e0:d7:ad:58:b9:
                    e8:ab:de:e7:fc:10:a3:c9:1b:3c:e0:a8:17:2c:b9:
                    1b:19:c7:36:da:e8:e6:56:ee:0d:19:4d:1c:4a:33:
                    1b:74:83:2e:0c:f7:9d:f0:ff:77:44:15:7c:84:86:
                    f5:ee:7f:04:69:02:00:b7:f7:8d:8e:2c:69:ac:5e:
                    76:51:b8:6c:32:49:ad:6c:db:99:44:7b:f5:51:63:
                    56:9f:f4:96:93:4f:5e:ee:1b:95:43:28:cc:27:ff:
                    dd:5e:12:a5:21:0a:8b:9e:93:7d:54:cc:0b:ec:ec:
                    90:75:8b:c7:a2:75:6c:3a:13:fb:19:c3:55:eb:42:
                    8c:76:fa:fa:76:da:85:bc:a8:ed:21:05:ca:98:96:
                    74:ac:30:f9:91:d0:75:b8:e2:06:b0:24:59:11:37:
                    a5:ff:f3:ab:c8:14:b5:22:e9:4d:24:ca:bb:4e:e7:
                    5c:97:76:32:39:f1:42:c8:4b:32:01:06:51:0f:5d:
                    bd:ce:aa:ca:b7:04:d9:ea:d2:0f:a6:b7:0f:f1:b9:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:FD:CD:6B:70:A3:63:82:98:F7:6D:E8:2E:93:7D:26:4B:3A:73
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:07:48:51:9f:14:9d:c0:eb:91:05:10:97:2c:af:bd:83:ca:
         f0:f6:fd:0c:80:04:56:53:13:a1:ac:42:e2:bf:36:cc:f2:ed:
         0f:85:2f:c3:59:0f:38:4c:12:e4:d9:65:0e:5f:8e:03:e3:5f:
         24:78:17:74:4e:ae:d9:3c:45:a8:9e:2e:22:15:f8:cc:97:46:
         df:d6:8b:dc:50:0f:46:76:2e:7f:b4:8c:ef:2b:b5:17:2c:f3:
         35:39:f5:a4:bc:54:94:f7:fe:40:f0:fc:76:d1:7c:5e:71:5c:
         95:2f:b0:65:ae:9e:6e:8b:9e:dd:7d:07:7f:16:63:d3:45:f2:
         95:be:33:7c:9e:c6:40:8a:04:c6:02:21:3a:c1:19:17:d7:94:
         43:48:9e:7f:3d:e7:12:5f:4b:72:16:a1:1c:fc:54:e6:6f:34:
         dc:4e:f9:f1:12:06:68:dd:f0:80:59:7c:8b:a3:c8:79:51:5f:
         6d:3b:02:31:eb:75:26:5f:c4:33:d5:1e:9f:99:76:a7:12:b1:
         c6:c4:2d:3c:2b:6b:d6:54:2e:7e:a9:4e:fe:3e:53:e7:66:5f:
         f5:50:46:af:3e:04:27:91:81:5d:ec:8f:98:33:f0:53:11:ea:
         33:73:21:2d:ce:ef:66:cd:4e:d7:6c:19:8d:42:9c:19:54:4a:
         5f:65:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:18 2025 by rpki-client