Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
File:                     A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft (raw, json)
Hash identifier:          GQGTrVdmVezkA7/gJOUMwySu0U24DwtS+ICJPqW4nJM=
Subject key identifier:   E5:D7:8E:99:89:B2:4A:10:15:F2:41:43:10:22:9D:26:54:55:70:2A
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       74C5085A2A72E45992D4EA365159C5EB673358A4
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
Manifest number:          020F
Signing time:             Fri 06 Jun 2025 09:54:40 +0000
Manifest this update:     Fri 06 Jun 2025 09:49:40 +0000
Manifest next update:     Sat 07 Jun 2025 13:06:40 +0000
Files and hashes:         1: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: qeKhwSxBv73kgRxW6Pg8dImsSOEmPLh3wTLxedRpHZA=)
                          2: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: bPQ1HBzdP13bWbYEcnsttiFohjw+mT+amFg13lB095M=)
                          3: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: h7T/IBKgZ+g5LGDA1fTNWZlyWBtya6uHa3uTkoL3u98=)
                          4: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl (hash: nzJUsrcEUord0hd4WvknPPuODNwS0JjBlEm2sNY1kLo=)
                          5: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: HKmgP2ypG6wwvWOLbdtRfnpQpQFEpIJ3B8Rmypw0n+E=)
                          6: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: KjbRTlOn0pUH9so2EM+bXyKGqqTMvpmSO7usB8M9zXI=)
                          7: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5sfxFWfTleTq60HeudpGR9w7CPONeSZsJgkPlM018cs=)
                          8: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: S6jgMc6rG0ZsUATxPWt7SrTUxQY234zCLU7DInT6Xy8=)
                          9: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: jseZnQDpxM3OGEtPFiaXE9ESnwodw6BGWg1duSXkRMU=)
                          10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: dF4lz4b9uILyKiQv5ty5oA8TE3niW+o+umdhEtVVLnc=)
                          11: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: a/PEhvzrP+G5MwSsL0gkzB1gZuBpDOMslVaEMTvEPWA=)
                          12: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: rsDe4gVLOQQ6T2XmrS2vrQjsrzLl/iWq5oMRojuFXSU=)
                          13: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: hAG8kF083sc71HTpZHIm9pVONzb5X6Kq/j0og2972Og=)
                          14: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: mOOzHywYUf8zjI9dUNsK9l53AJEq7KLoJcvQC7/t8eg=)
                          15: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: CnAZ047tmrpRp78Hj9O+EaIJNOL4YEi+nEB/HQghDBU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 13:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c5:08:5a:2a:72:e4:59:92:d4:ea:36:51:59:c5:eb:67:33:58:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jun  6 09:49:40 2025 GMT
            Not After : Jun  7 13:06:40 2025 GMT
        Subject: CN=E5D78E9989B24A1015F2414310229D265455702A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:36:bf:46:ba:f2:be:32:4d:5d:ac:ad:1e:
                    20:90:23:c0:c1:62:a2:63:76:9b:db:dc:ff:48:1e:
                    6b:76:c8:d9:1e:05:c6:60:3d:30:db:bb:37:6a:d5:
                    51:a1:c9:d1:4c:f3:77:0c:3d:c1:19:7c:5e:bd:92:
                    63:86:b3:fe:33:f6:5e:24:bf:62:21:bd:99:d6:41:
                    44:4d:e2:50:43:83:02:a4:64:40:80:84:ca:ac:03:
                    ee:c9:38:52:c0:79:80:68:24:f6:8b:0d:e4:cf:ab:
                    7c:44:2b:07:39:f0:23:e5:b4:05:fa:26:d8:3a:14:
                    83:bd:45:42:c4:d5:be:6c:c2:10:ee:1a:f7:1d:ea:
                    eb:91:7c:44:ec:8a:dc:4a:0a:22:ba:af:35:4d:22:
                    ca:1f:0f:a8:61:5b:37:e2:98:2f:d4:7c:cf:26:68:
                    16:f4:1a:3e:f8:a6:7c:5a:65:5e:8c:7e:8b:17:ad:
                    5b:e7:4a:e3:ab:6b:dd:10:4a:10:93:d8:94:d9:e6:
                    a9:a2:c5:f6:4b:b7:6e:dd:42:9f:ea:46:3c:37:bc:
                    6c:6e:26:ab:0f:8b:3c:20:88:27:bb:97:fc:42:02:
                    64:e4:a5:03:5b:67:e2:54:cd:1f:5a:08:00:b8:05:
                    fb:d1:d7:7f:db:29:52:6a:de:ee:3a:e4:e0:55:f5:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:8E:99:89:B2:4A:10:15:F2:41:43:10:22:9D:26:54:55:70:2A
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:74:c3:ea:d0:6d:f1:b8:61:f2:76:a9:7e:93:e9:23:b8:
         83:c0:17:fc:ac:71:c7:39:3f:82:ec:12:3d:dc:0d:c6:00:61:
         52:ec:98:d8:c1:08:c3:37:3d:26:bc:fc:bd:4c:be:a8:25:97:
         f5:a9:a4:63:e4:4d:be:82:b5:e6:fb:95:47:b0:14:b3:4a:dd:
         dd:ff:b8:41:96:6e:68:19:89:70:f6:8a:6c:08:b6:d2:5e:72:
         7b:86:b5:54:30:48:b6:9d:50:f6:8c:cf:27:8e:23:0e:16:25:
         0e:fe:8e:e7:d9:30:68:62:38:65:58:f0:15:79:7c:a9:c0:01:
         96:e3:9c:e4:be:8d:81:cb:0c:c5:ab:65:48:bf:00:76:bc:4a:
         90:d9:de:2d:c1:31:f5:50:4f:d5:ff:d9:82:a0:60:4b:82:f6:
         06:11:ef:f0:4f:fb:da:9a:e0:a5:3d:bd:99:9a:e1:50:66:9d:
         76:8b:11:cd:da:05:4c:76:2b:31:8a:3e:ce:cb:35:45:71:ea:
         86:f9:f2:55:b8:93:36:fe:07:6d:5f:2a:94:5b:a3:c6:ad:7c:
         4d:97:17:ff:91:a5:23:98:62:a8:3d:3f:e2:e5:44:74:c7:09:
         f8:26:6e:4a:87:10:8d:4b:87:d4:16:15:97:d6:eb:62:72:d1:
         23:25:2f:d7
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUdMUIWipy5FmS1Oo2UVnF62czWKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5
NzE5OEJGRDAeFw0yNTA2MDYwOTQ5NDBaFw0yNTA2MDcxMzA2NDBaMDMxMTAvBgNV
BAMTKEU1RDc4RTk5ODlCMjRBMTAxNUYyNDE0MzEwMjI5RDI2NTQ1NTcwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmza/RrryvjJNXaytHiCQI8DB
YqJjdpvb3P9IHmt2yNkeBcZgPTDbuzdq1VGhydFM83cMPcEZfF69kmOGs/4z9l4k
v2IhvZnWQURN4lBDgwKkZECAhMqsA+7JOFLAeYBoJPaLDeTPq3xEKwc58CPltAX6
Jtg6FIO9RULE1b5swhDuGvcd6uuRfETsitxKCiK6rzVNIsofD6hhWzfimC/UfM8m
aBb0Gj74pnxaZV6MfosXrVvnSuOra90QShCT2JTZ5qmixfZLt27dQp/qRjw3vGxu
JqsPizwgiCe7l/xCAmTkpQNbZ+JUzR9aCAC4BfvR13/bKVJq3u465OBV9SVhAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU5deOmYmyShAV8kFDECKdJlRVcCowHwYDVR0j
BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5
QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz
LzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAActdMPq0G3xuGHydql+k+kjuIPAF/ysccc5P4LsEj3cDcYAYVLsmNjB
CMM3PSa8/L1Mvqgll/WppGPkTb6Cteb7lUewFLNK3d3/uEGWbmgZiXD2imwIttJe
cnuGtVQwSLadUPaMzyeOIw4WJQ7+jufZMGhiOGVY8BV5fKnAAZbjnOS+jYHLDMWr
ZUi/AHa8SpDZ3i3BMfVQT9X/2YKgYEuC9gYR7/BP+9qa4KU9vZma4VBmnXaLEc3a
BUx2KzGKPs7LNUVx6ob58lW4kzb+B21fKpRbo8atfE2XF/+RpSOYYqg9P+LlRHTH
CfgmbkqHEI1Lh9QWFZfW62Jy0SMlL9c=
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:00 2025 by rpki-client