Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
File:                     309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json)
Hash identifier:          3gdDnr95mihemCjm8Z7fD5ekO7a/fGrxYfrsDCYI+s8=
Subject key identifier:   82:42:26:91:DB:DF:82:4C:69:14:80:72:38:D3:C9:75:A5:46:24:44
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       2D602C735FAD37075390365BA5631070132CDA86
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
Manifest number:          0115
Signing time:             Fri 04 Apr 2025 17:45:18 +0000
Manifest this update:     Fri 04 Apr 2025 17:40:18 +0000
Manifest next update:     Sat 05 Apr 2025 18:23:18 +0000
Files and hashes:         1: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=)
                          2: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=)
                          3: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=)
                          4: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=)
                          5: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=)
                          6: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=)
                          7: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=)
                          8: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=)
                          9: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=)
                          10: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=)
                          11: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=)
                          12: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: H81LfcFIXsaVbHYKt+6IO4OSN5aNMUBG8OHwDke7Zck=)
                          13: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:60:2c:73:5f:ad:37:07:53:90:36:5b:a5:63:10:70:13:2c:da:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Apr  4 17:40:18 2025 GMT
            Not After : Apr  5 18:23:18 2025 GMT
        Subject: CN=82422691DBDF824C6914807238D3C975A5462444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:5f:9d:9d:52:28:38:30:d7:cc:55:c3:8e:
                    19:99:32:3a:29:20:d4:ab:4f:94:d0:4b:e1:76:01:
                    3b:01:24:3b:7e:b0:9e:d8:e2:ca:34:fd:6a:7e:00:
                    28:05:99:12:c9:0d:4a:12:ab:8f:4e:97:ab:18:b3:
                    17:e6:ce:12:00:48:85:5b:55:4a:31:17:ba:8e:34:
                    6a:fe:fa:d9:72:de:74:3e:15:1e:93:e0:d2:d8:87:
                    5c:50:d4:f9:57:02:fd:29:99:5d:8a:23:c1:4f:c3:
                    85:8c:c6:46:53:6e:d4:f0:05:26:c2:2b:ff:17:0a:
                    ac:ab:35:1f:75:5c:7f:21:53:a8:32:52:54:80:46:
                    5f:b5:ec:18:96:e1:d3:93:ae:9b:c6:88:9c:57:ea:
                    be:61:ef:47:7a:c5:f8:b2:2c:65:3a:04:4b:99:25:
                    29:fc:89:d2:dc:32:72:8c:01:6f:3a:c6:e2:75:c2:
                    2f:3f:c9:d6:50:75:c8:c9:5c:d9:a6:2d:37:dc:7e:
                    3d:93:6a:ec:ac:4b:21:60:d7:df:35:3d:3b:bd:2f:
                    df:99:24:e6:c2:23:9b:6a:e8:d0:ae:aa:73:ab:26:
                    da:3e:65:5e:87:0d:79:77:a8:90:6a:12:80:57:0a:
                    25:96:43:d4:c8:7a:3b:a1:2d:f2:bc:d6:fe:ec:c0:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:26:91:DB:DF:82:4C:69:14:80:72:38:D3:C9:75:A5:46:24:44
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:59:28:ec:d4:5f:e8:fe:9a:ea:2c:13:c0:5a:72:ab:43:9b:
         25:f7:1d:83:56:73:84:b7:e7:13:86:d5:c5:27:30:e5:0b:79:
         b2:e1:70:a7:b4:56:1c:cc:9e:7f:f5:d4:0c:cf:fe:71:32:52:
         1c:48:36:a7:13:13:a7:c4:f0:17:f3:7e:c6:68:73:c9:c8:c5:
         51:1a:29:2b:17:05:f5:94:f2:ec:68:32:32:bd:c5:97:3e:48:
         fe:57:18:43:3f:19:66:31:ac:1d:da:b3:4f:79:a9:6d:1c:88:
         b0:a2:c5:d9:7a:34:66:23:71:44:f0:06:33:99:22:e2:56:02:
         75:bc:16:78:b6:4d:b2:f6:07:e9:d1:a1:dc:bf:f8:3a:7c:e1:
         64:8d:a8:74:c6:55:4a:b6:ed:67:33:69:91:45:86:1c:6a:bf:
         50:ca:08:8c:ec:19:bd:bf:77:99:63:b2:21:6c:79:f2:3c:e8:
         b6:a1:f5:00:5e:13:6a:7d:0f:97:d8:b0:7d:b7:cb:e0:45:31:
         ed:05:70:07:e9:8e:9d:6a:36:b2:f4:b6:6d:1d:f3:ac:4a:04:
         ae:73:2e:65:dd:52:c5:01:31:ff:69:b6:5a:e8:1a:02:cd:47:
         3b:d2:08:4e:fe:7d:4a:4f:94:b0:2f:29:60:b0:c7:e3:cc:64:
         79:1c:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:45 2025 by rpki-client